gopass
Overview
gopass is a password manager for the command line, written in Go and designed for both individuals and teams. It builds on the philosophy of the classic Unix pass tool, storing secrets encrypted with your GPG keys inside a Git repository, so every change is versioned and auditable. Unlike pass, gopass ships as a single static binary for every major platform and adds first-class features for sharing a password store across a team. The latest release is gopass 1.17.4.
Key Features
- GPG-encrypted store — every secret is encrypted with your public keys before it is written to disk.
- Git-backed versioning — the store lives in a Git repository, so you get full history, rollback and a clear audit trail.
- Team sharing — share one store across a team via Git remotes, and add individual recipients to specific secrets.
- Drop-in friendly — gopass understands the same store layout as pass, easing migration between them.
- Single binary, everywhere — prebuilt releases for Linux, macOS, Windows, FreeBSD and OpenBSD.
- Extensible and scriptable — configurable aliases and a CLI built to fit into shell workflows.
Why Use It
If you live in a terminal, gopass keeps secrets close to your normal tools — GPG for encryption, Git for history — while adding team collaboration that plain pass lacks. It is ideal for developers and sysadmins who want credentials managed the same way they manage code.
Use Cases
- Personal secret storage from a terminal
- DevOps and engineering teams sharing credentials via Git
- Scripting secrets into deployment and automation workflows
Platforms
Linux · macOS · Windows · FreeBSD · OpenBSD
Licence
MIT