pass
The standard Unix password manager: each password is an encrypted file.
Instead of Google Password Manager
Screenshot from www.passwordstore.org, taken 2026-10-23, shown to help you recognise the tool. It belongs to its maker. Ask us to remove it.
pass stores each password as a GPG-encrypted file in a folder, and you can sync the folder with git. It is tiny, old and easy to inspect.
It lives on the command line, so Delivery is a 2 for most people. Phone and browser apps exist and are made by other volunteers.
- Each password is a file encrypted with GPG
- Sync the folder with git or anything else
- Command line first, so not for everyone
What stands out
Do you make pass? Get the badge for your site
This badge reports a dated review. It is not a certification and it costs nothing. Link it to this page and leave the numbers alone: the image always shows the current score.
For dark backgrounds, use pass-dark.svg in place of pass-light.svg.
For comparison, we also reviewed Google Password Manager (16/30) as a benchmark.
Other tools for “keep my passwords safe”
KeePassXCA password manager that keeps one encrypted file on your own computer.- KeePassDXA KeePass password vault for Android, stored in a file you own.
BitwardenA password manager with an open-source core and a generous free tier.
Proton PassAn end-to-end encrypted password manager with a free plan, from the makers of Proton Mail.