pass
Unix command-line password manager storing GPG-encrypted files in a git repository.
Liked for keeping GPG-encrypted passwords as plain files in a git repo you can sync however you want123, plus hardware-key support and years of reliable use.456 Caveats include its dependency on GPG, which one commenter calls a hassle to operate7, fewer integrations than 1Password, and edits from two clients not merging cleanly without manual work.89
Why people recommend it
Git-based sync · 3
Passwords are encrypted files in a git repo, synced with any infrastructure you choose.
“I store my passwords using this: https://www.passwordstore.org/”
“I use pass[1] and it is good.”
Show 1 more
“I use pass[0], and it works well for me. It's secured by PGP and passwords are shared between devices using git.”
Hardware keys · 3
Works with GPG keys on YubiKey or NitroKey dongles.
“I highly recommend https://www.passwordstore.org/ coupled with a PGP key storage dongle”
“The way I solve the plain text problem is through a combination of direnv[1] and pass[2].”
Show 1 more
“We use YubiKeys on desktops/laptops with pass/password-store”
Long-term reliability · 2
Commenters report about a decade of happy use.
“I have been using https://www.passwordstore.org/ for 10 years and am super happy with it.”
“I highly recommend https://www.passwordstore.org/ coupled with a PGP key storage dongle”
Developer secrets · 2
Pairs with direnv or .env files to load API tokens without plain-text storage.
“The way I solve the plain text problem is through a combination of direnv[1] and pass[2].”
“MY_SECRET=$(pass show path/to/my/secret)”
Client ecosystem · 2
Open source iOS/Android clients, browser extensions and plugins make daily use close to hosted managers.
“Pass has a pretty good ecosystem of plugins/other clients, as well.”
“I store my passwords using this: https://www.passwordstore.org/”
Caveats and dissent
GPG dependency · 1
GPG is described as dated and a hassle to operate, and worth learning before committing.
“Pass has a pretty good ecosystem of plugins/other clients, as well.”
Fewer integrations · 1
Lacks the convenient integrations of 1Password.
“I have been using https://www.passwordstore.org/ for 10 years and am super happy with it.”
Multi-client merging · 1
A former user switched to Bitwarden for clean automatic merging of changes from two clients.
“I used to use gnupass and its variants (including passforios on mobile)”
Mobile hardware keys · 1
Getting YubiKey-backed pass working on phones and tablets took long fiddling for one team.
“We use YubiKeys on desktops/laptops with pass/password-store”
Often compared with
Who recommends it in their own words
Threads where it came up
- Ask HN: Advice on Migrating from 1Password? 2 mentions
- Get your passwords out of Bitwarden while you still can 2 mentions
- Bitwarden Dual License Model 1 mention
- Show HN: Using the secure enclave in a pass/password-store iOS client 1 mention
- The Quiet Renovation at Bitwarden 1 mention
- I Do Not Recommend Bitwarden 1 mention
Data: pass.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 10
“I used to use gnupass and its variants (including passforios on mobile)”
“I have been using https://www.passwordstore.org/ for 10 years and am super happy with it.”
“I highly recommend https://www.passwordstore.org/ coupled with a PGP key storage dongle”
“We use YubiKeys on desktops/laptops with pass/password-store”
“Pass has a pretty good ecosystem of plugins/other clients, as well.”
“I store my passwords using this: https://www.passwordstore.org/”
“I use pass[1] and it is good.”
“I use pass[0], and it works well for me. It's secured by PGP and passwords are shared between devices using git.”
“MY_SECRET=$(pass show path/to/my/secret)”
“The way I solve the plain text problem is through a combination of direnv[1] and pass[2].”