Let's Encrypt/ACME client and library written in Go
Publisher’s description
What is lego?
lego is an open-source firewall & privacy program for Windows from Sebastian Erhart. It ranks 40th by popularity among firewall & privacy in this catalogue. It is written in Go.
Installation and requirements
Official installers exist for 64-bit, ARM64 and 32-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 5.5.2, released on September 23, 2026. 39 versions are listed since January 28, 2024, each with links to its own installer files. That is about 15 releases a year.
Popularity and file types
The source code on GitHub (go-acme/lego) has 9,956 stars. Similar programs include OnionShare, Portmaster and dnscrypt-proxy.
Project description on GitHub: “Let's Encrypt/ACME client and library written in Go”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
- Frequent updates (about 15 a year)
- Large user base
In short: lego is an open-source firewall & privacy tool for 64-bit, ARM64 and 32-bit PCs. It is actively maintained.
Is lego safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
FC544130A2716329CAD73A47B674E3AEEA019C4753C3963D259BD45D946BBD34· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the go-acme/lego repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- Actively maintained10
- No dangerous workflows10
- No binaries in the repository10
- Licence declared10
- Security policy10
- Published packages10
- Restricted token permissions9
- Pinned dependencies8
- Branch protection5
- OpenSSF Best Practices badge2
- Code review0
- Fuzzing0
- Signed releases0
- Static code analysis0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 39 versions ›39 versions over 3 years · about 15 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 5.5.2Latest | September 23, 2026 | — | ARM64 ZIP32-bit ZIP64-bit ZIP |
| 5.5.1 | September 17, 2026 | — | 64-bit ZIP32-bit ZIPARM64 ZIP |
| 5.5.0 | September 17, 2026 | — | 32-bit ZIPARM64 ZIP64-bit ZIP |
| 5.4.1 | August 31, 2026 | — | 32-bit ZIPARM64 ZIP64-bit ZIP |
| 5.4.0 | August 21, 2026 | — | 64-bit ZIPARM64 ZIP32-bit ZIP |
| 5.3.1 | July 21, 2026 | — | ARM64 ZIP32-bit ZIP64-bit ZIP |
| 5.3.0 | July 21, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
| 5.2.2 | June 2, 2026 | — | 64-bit ZIP32-bit ZIPARM64 ZIP |
Install from the command line
Silent install ›winget install --id GoACME.lego -escoop install main/legoRelated guide: How to use winget: install and update apps
Also for other systems
brew install legoInformation
- Publisher
- Sebastian Erhart
- Category
- Firewall & privacy
- Licence
- MIT
- Price
- Free
- Source code
- github.com/go-acme/lego
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- Portable
- Version
- 5.5.2
- Released
- September 23, 2026
- Added to the catalogue
- February 8, 2024
- Versions listed
- 39
- Updates / year
- 14.7
- GitHub stars
- 9,956
- GitHub forks
- 1,181
- Website
- github.com
- winget ID
- GoACME.lego
- Scoop package
- main/lego
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to lego
See all ›-
OnionShare2.7OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor networkOpen source40.7K ↓ -
Portmaster2.2.3Portmaster is a free and open-source application that puts you back in charge over all your computers network connections.Open source21.4K ↓ -
Open source15.1K ↓ -
DingTalk Workspace CLI1.0.65dws — DingTalk Workspace on the command line, built for humans and AI agents.Open source5.7K ↓ -
Open source21.7K ↓ -
Open source57.4K ↓ -
Subsurface6.0.5504Subsurface can plan and track single and multi-tank dives using air, Nitrox or TriMix.Open source5.4K ↓ -
GreenTunnel3.0.5GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.Open source854 ↓
Frequently asked questions
Is lego free?
Yes. lego is open-source software under the MIT licence.
Is lego safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install lego with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does lego run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of lego?
The versions page lists all 39 versions with links to their official installer files, back to January 28, 2024.
Can I use lego without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to lego?
OnionShare, Portmaster, dnscrypt-proxy, DingTalk Workspace CLI and WindowsSpyBlocker. The alternatives page compares them.
