Pass-CLI is a fast, secure password and API key manager that stores credentials locally with AES-256-GCM encryption. Built for developers who need quick, script-friendly access to credentials without cloud dependencies.
This is free and open source software.
Key Features
- Military-Grade Encryption: AES-256-GCM with hardened PBKDF2 key derivation (600,000 iterations).
- BIP39 Recovery Phrase: 24-word recovery phrase for vault password reset (industry-standard mnemonic).
- System Keychain Integration: Windows Credential Manager, macOS Keychain, Linux Secret Service.
- Password Policy Enforcement: Complexity requirements for vault and credential passwords.
- Vault Backup & Restore: Manual backups with integrity verification and automatic backup during vault operations.
- Tamper-Evident Audit Logging: Optional HMAC-signed audit trail for vault operations.
- Health Checks: Built-in doctor command for vault verification and troubleshooting.
- Cross-Platform: Single binary for Windows, macOS (Intel/ARM), and Linux (amd64/arm64).
- Script-Friendly: Clean output modes (–quiet, –field, –masked) for shell integration.
- Usage Tracking: Automatic tracking of where credentials are used across projects.
- Local-First: Works offline by default, optional cloud sync via rclone.
- Cloud Sync: Sync vault across devices with rclone (Google Drive, Dropbox, OneDrive, S3, etc.).
Interactive TUI: Terminal UI for visual credential management. - TOTP / 2FA Support: Store TOTP secrets and generate 6-digit codes – no separate authenticator app needed.
Website: github.com/reyamira/pass-cli
Support:
Developer: Ari
License: Apache License 2.0
Pass-CLI is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Terminal-Based Password Managers | |
|---|---|
| gopass | Simple but powerful password manager for your terminal |
| pass | Simple password manager using gpg and ordinary unix directories |
| prs | Secure, fast and convenient password manager for the terminal |
| Teller | Multi provider secret management tool |
| Bitwarden CLI | Password management for individuals, teams, and business organizations |
| ripasso | Simple command-line password manager using pass |
| Rooster | Simple password manager for geeks |
| passage | age-backed password manager |
| seniorpw | Password manager using age |
| pa | Simple password manager. Encryption support is provided via age |
| SpicyPass | Lightweight password manager |
| rbw | Unofficial Bitwarden CLI |
| MUTN | Self-hosted, SSH-synchronized password and note manager |
| pago | Go-based command-line password manager |
| kyp | Stores credentials in an encrypted SQLite database |
| Steelsafe | TUI password manager written in Rust |
| keydex | Password manager for KeePass databases |
| kpxhs | Keepass database interactive TUI viewer |
| kpcli | Command line interface to KeePass database files |
| cruxpass | Minimal command-line password manager written in C |
| vd | Terminal password manager with built-in OTP authentication |
| Puny Manager | Minimal, local, CLI password manager |
| privage | Password manager and general file encryption tool that uses age |
| passfzf | Simple fzf wrapper for pass |
| oxipass-tui | Terminal-based manager for securely storing encrypted passwords |
| cpass | Console UI for pass |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.