privage is a terminal-based password manager and general file encryption tool that uses age to protect credentials and other secret files.
It’s designed for users who want to keep one encrypted file per credential or secret while backing up the encrypted directory to untrusted third-party services such as GitHub, GitLab, or Bitbucket. Instead of exposing meaningful filenames, privage stores encrypted files under hash-based .privage filenames, making it suitable for repositories or other storage locations where both content and metadata should remain private.
This is free and open source software.
Key Features
- Stores credentials as structured TOML files with fields for login details, passwords, URLs, API keys, and other associated data.
- Encrypts ordinary files as well as password records, using custom categories and labels for organisation.
- Supports optional YubiKey PIV use to encrypt and decrypt the age secret key.
- Provides commands to add, list, show, copy, decrypt, reencrypt, rename, delete, and rotate encrypted items.
- Can rotate the secret key and reencrypt tracked files with a single command.
- Offers stateless usage for automation by explicitly passing the key and repository paths.
- Includes built-in Bash completion for all commands.
- Cross-platform support – runs under Linux, FreeBSD, macOS, and Windows.
Website: github.com/revelaction/privage
Support:
Developer: revelaction
License: MIT License

privage is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Terminal-Based Password Managers | |
|---|---|
| gopass | Simple but powerful password manager for your terminal |
| pass | Simple password manager using gpg and ordinary unix directories |
| prs | Secure, fast and convenient password manager for the terminal |
| Teller | Multi provider secret management tool |
| Bitwarden CLI | Password management for individuals, teams, and business organizations |
| ripasso | Simple command-line password manager using pass |
| Rooster | Simple password manager for geeks |
| passage | age-backed password manager |
| seniorpw | Password manager using age |
| pa | Simple password manager. Encryption support is provided via age |
| SpicyPass | Lightweight password manager |
| rbw | Unofficial Bitwarden CLI |
| MUTN | Self-hosted, SSH-synchronized password and note manager |
| pago | Go-based command-line password manager |
| kyp | Stores credentials in an encrypted SQLite database |
| Steelsafe | TUI password manager written in Rust |
| keydex | Password manager for KeePass databases |
| kpxhs | Keepass database interactive TUI viewer |
| kpcli | Command line interface to KeePass database files |
| cruxpass | Minimal command-line password manager written in C |
| vd | Terminal password manager with built-in OTP authentication |
| Puny Manager | Minimal, local, CLI password manager |
| privage | Password manager and general file encryption tool that uses age |
| passfzf | Simple fzf wrapper for pass |
| oxipass-tui | Terminal-based manager for securely storing encrypted passwords |
| cpass | Console UI for pass |
Read our verdict in the software roundup.
LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |


Please read our Comment Policy before commenting.