gopass is an open-source, command-line password manager written in Go, compatible with the Unix pass store format. Credentials are encrypted with GPG (or age) and versioned in git, with packages available for Linux, macOS, and Windows.
Reviewed by Marcus Holmberg
gopass
gopass.pw 1 rating so far*
Rate gopass: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
gopass is essentially pass with a team-friendly redesign: multiple stores, structured secrets, browser integration via a companion extension, and solid cross-platform packaging including Windows. If you live in the terminal and already manage GPG keys, it slots in naturally and the git-backed store makes sharing team credentials straightforward. The catch is the prerequisite stack: GPG setup is a hurdle most non-technical users never clear, and there is no mobile app to speak of. A tool for engineers who want credentials close to the shell, not a recommendation for anyone who wants passwords to just work.
GitHub at a glance
gopasspw/gopass
Stars
7,022
+ 89 this week
Last commit
9d ago
healthy
License
MIT
Latest release
v1.16.1
7mo ago
Stars, last 31d
Website at a glance
gopass.pw
D score 30
Weak website security headers
Graded by Mozilla HTTP Observatory, tested 14d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
gopass alternatives
NordPass Audited by an independent cybersecurity firm Cure53 in Feb 2020 and confirmed the security of NordPass. Offers browser extensions for Chrome, Firefox, Edge, Brave, Opera and…
Proton Pass Open-source, end-to-end encrypted password manager from the maker of Proton Mail, based in Switzerland. Stores logins, notes, and cards, with built-in email aliasing via SimpleLogin. Apps for Windows, macOS, Linux, Android, iOS, and the major browsers.
PrivacyNotes Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.
KeePassXC Securely store passwords using industry standard encryption, quickly auto-type them into desktop applications, and use browser extension to log into websites. KeePassDX for…
Bitwarden Bitwarden is our top choice. You can import your previous passwords from other password managers with ease. Free for personal use. Available for Desktop, all Browsers, Android…
1Password 1Password is a commercial password manager for individuals, families, and teams, available on Windows, Mac, Linux, Android, iOS, and all major browsers. It uses a dual-key architecture combining your master password with a locally generated Secret Key.
gopass license, in plain English
MIT Permissive
Do almost anything: use, change, and ship it, even inside closed-source products. The only condition is keeping the copyright notice.
Permits
- Commercial use
- Modification
- Distribution
- Private use
Requires
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: Permissive licensing lets anyone reuse this, including inside closed products. That is freedom to build on, but no guarantee that downstream copies stay open.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.
* Average ratings will show on this page once the threshold of 5 ratings is reached.