Pass-CLI is a fast, secure password and API key manager that stores credentials locally with AES-256-GCM encryption. Built for developers who need quick, script-friendly access to credentials without cloud dependencies.
This is free and open source software.
Key Features
- Military-Grade Encryption: AES-256-GCM with hardened PBKDF2 key derivation (600,000 iterations).
- BIP39 Recovery Phrase: 24-word recovery phrase for vault password reset (industry-standard mnemonic).
- System Keychain Integration: Windows Credential Manager, macOS Keychain, Linux Secret Service.
- Password Policy Enforcement: Complexity requirements for vault and credential passwords.
- Vault Backup & Restore: Manual backups with integrity verification and automatic backup during vault operations.
- Tamper-Evident Audit Logging: Optional HMAC-signed audit trail for vault operations.
- Health Checks: Built-in doctor command for vault verification and troubleshooting.
- Cross-Platform: Single binary for Windows, macOS (Intel/ARM), and Linux (amd64/arm64).
- Script-Friendly: Clean output modes (–quiet, –field, –masked) for shell integration.
- Usage Tracking: Automatic tracking of where credentials are used across projects.
- Local-First: Works offline by default, optional cloud sync via rclone.
- Cloud Sync: Sync vault across devices with rclone (Google Drive, Dropbox, OneDrive, S3, etc.).
Interactive TUI: Terminal UI for visual credential management. - TOTP / 2FA Support: Store TOTP secrets and generate 6-digit codes – no separate authenticator app needed.
Website: github.com/arimxyer/pass-cli
Support:
Developer: Ari
License: Apache License 2.0
Pass-CLI is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Terminal-Based Password Managers | |
|---|---|
| gopass | Simple but powerful password manager for your terminal |
| pass | Simple password manager using gpg and ordinary unix directories |
| prs | Secure, fast and convenient password manager for the terminal |
| Teller | Multi provider secret management tool |
| Bitwarden CLI | Password management for individuals, teams, and business organizations |
| Rooster | Simple password manager for geeks |
| passage | age-backed password manager |
| seniorpw | Password manager using age |
| pa | Simple password manager. Encryption support is provided via age |
| SpicyPass | Lightweight password manager |
| rbw | Unofficial Bitwarden CLI |
| MUTN | Self-hosted, SSH-synchronized password and note manager |
| Pass-CLI | Password and API key manager |
| pago | Go-based command-line password manager |
| kyp | Stores credentials in an encrypted SQLite database |
| Steelsafe | TUI password manager written in Rust |
| keydex | Password manager for KeePass databases |
| kpxhs | Keepass database interactive TUI viewer |
| kpcli | Command line interface to KeePass database files |
| cruxpass | Minimal command-line password manager written in C |
| Puny Manager | Minimal, local, CLI password manager |
| privage | Password manager and general file encryption tool that uses age |
| passfzf | Simple fzf wrapper for pass |
| pasejo | Command line password manager written in Rust |
| cpass | Console UI for pass |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |