pass

Standard Unix credential store backed by GPG

About

pass keeps credentials in plain files encrypted with GnuPG, one file per entry. Use it when you want a store that is scriptable and version-controllable, with no proprietary app. Entries can be generated, read and removed from the terminal.

Install it

pkg install pass

Run this inside Termux. If the package is already present, pkg will say so and do nothing.

Commands worth knowing

6 of the invocations you will actually reach for. Tap the copy button to put one on your clipboard.

pass init user@example.com Set up a new encrypted store tied to a GPG key. The first step on a fresh device.
pass insert github.com Add a new entry. Your editor opens for the value.
pass show github.com Print a stored entry to the terminal after decrypting it.
pass generate amazon.com 24 Create a random 24-character value and save it under a site name in one step.
pass ls List the entries in the store as a tree of site names.
pass rm github.com Delete an entry you no longer need from the store.

Worked example

Run pass ls and this is what you should see.

termux
$ pass ls
Store tree:
github.com
amazon.com
work/email
bank

Developed by

Jason A. Donenfeld · released under GPL-2.0.