gopasspw/gopass
Gopass
gopass is a terminal-based password manager and GPG secret store used for generating, storing, and retrieving encrypted credentials. It functions as a collaborative secret manager that encrypts data using GPG or age and synchronizes it across devices and teams using Git.
The system distinguishes itself by treating version control repositories as the primary storage backend, enabling secure secret sharing and version history for credentials. It utilizes a hierarchical directory structure to organize secrets on the filesystem and supports multi-store mounting to combine multiple independent repositories into a single namespace.
The tool provides a variety of operational capabilities, including password generation, regular expression search, and security auditing against leaked password databases. It includes a programmatic JSON gateway for external tool integration, browser credential autofill, and the ability to export secrets via QR codes.
Users can initialize the system through an interactive setup wizard and manage updates via signature-verified binary releases.
Features
- Command Line Interfaces - Provides a comprehensive command-line interface for creating, listing, removing, and retrieving encrypted credentials.
- Git Repository Secret Managers - Acts as a secret manager that uses encrypted Git repositories for storing and synchronizing credentials across devices.
- Secret Hierarchies - Organizes secrets using a nested folder system on the filesystem to map logical password categories to physical paths.
- Cryptography Backend Configurations - Allows users to configure and convert encryption backends, supporting GPG, age, and plain text.
- GitOps Secret Management - Implements a Git-centric workflow for committing and sharing encrypted secrets among team members.
- Credential Encryption - Provides end-to-end encryption for stored passwords and sensitive information using GPG or age.
- Git File Encryption - Uses version control repositories as the primary storage backend to synchronize encrypted files across devices and teams.
- Credential Sharing - Enables secure sharing and organization of API keys and passwords across collaborative technical teams.
- Secret Encryption - Implements a workflow for encrypting sensitive data locally using GPG or age.
- Secret Retrieval Utilities - Provides command-line utilities to extract and output encrypted secrets to the terminal, clipboard, or QR codes.
- Secret Access Policies - Manages lists of authorized recipients for each secret to control decryption access.
- CLI Secret Management - Provides a comprehensive terminal-based interface for generating, storing, and retrieving encrypted credentials.
- Version-Controlled Secret Encryption - Stores encrypted secrets within a version control system, leveraging GPG for secure access.
- Cryptography Backends - Abstracts encryption logic to support multiple providers like GPG or age while maintaining a consistent internal secret interface.
- Credential Hierarchies - Organizes encrypted passwords into a hierarchical directory structure to simplify credential discovery and management.
- Pluggable Storage Backends - Provides an abstraction layer to connect with various storage backends like Consul and Vault.
- CLI Gateways - Exposes a standardized JSON interface that acts as a gateway for external tools and browser extensions to interact with the CLI.
- Leaked Credential Checks - Scans stored credentials against databases of known leaked passwords to audit security.
- Release Signature Verifiers - Validates the authenticity of software releases using a built-in keyring of trusted digital signatures.
- Secret Search - Provides regular expression and exact match search to quickly locate stored credentials.
- Store Security Analysis - Analyzes the credential store for security vulnerabilities and exports results in multiple formats.
- Secret Store Mounting - Combines multiple independent password stores into a single namespace using diverse storage and cryptography backends.
- Binary Secret Handling - Encodes raw data from standard input into a secret or decodes binary secrets to standard output.
- Password Generators - Creates high-entropy, cryptographically secure random passwords based on specified complexity rules.
- Store Mounts - Combines multiple independent credential repositories into a single unified view by mapping different backends to specific paths.
- JSON Interfaces - Provides a programmatic JSON gateway that allows external tools to interact with the credential store via standard data formats.
- System Integrations - Password manager with native encryption backend support.
- Password Management - Unix-style password manager designed for teams.
- Secrets Management - Offers a team-oriented password manager built on git and GPG.
- Securitate și consolidare - Command-line password manager for secure credential storage.
- Securitate și confidențialitate - Fully-featured password manager.
