gopass is an open-source, command-line password manager written in Go, compatible with the Unix pass store format. Credentials are encrypted with GPG (or age) and versioned in git, with packages available for Linux, macOS, and Windows.
Reviewed by Marcus Holmberg
gopass
gopass.pw 2 ratings so far*
Rate gopass: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
gopass is essentially pass with a team-friendly redesign: multiple stores, structured secrets, browser integration via a companion extension, and solid cross-platform packaging including Windows. If you live in the terminal and already manage GPG keys, it slots in naturally and the git-backed store makes sharing team credentials straightforward. The catch is the prerequisite stack: GPG setup is a hurdle most non-technical users never clear, and there is no mobile app to speak of. A tool for engineers who want credentials close to the shell, not a recommendation for anyone who wants passwords to just work.
GitHub at a glance
gopasspw/gopass MIT gitgogpghacktoberfestpassword-managersecurity
Stars
7,308
+18 this week
Forks
569
68 watching
Last commit
today
healthy
Latest release
v1.17.4
24d ago, 100+ total
Star history
Issues
94% closed
77
open
1,260
closed
+7 / -13
opened / closed, last 4 weeks
Opened vs closed, last 12 weeks
Commits, last 26 weeks
202 commits, active 20 of 26 weeks
240 contributors since Feb 2017
Languages
- Go 91.7%
- Shell 7.1%
- Roff 0.9%
Updated daily from the GitHub API. Star tracking since Jun 22, 2026.
Website at a glance
gopass.pw
D score 30
Weak website security headers
Graded by Mozilla HTTP Observatory, tested today
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
gopass alternatives
NordPass Audited by an independent cybersecurity firm Cure53 in Feb 2020 and confirmed the security of NordPass. Offers browser extensions for Chrome, Firefox, Edge, Brave, Opera and…
Proton Pass Open-source, end-to-end encrypted password manager from the maker of Proton Mail, based in Switzerland. Stores logins, notes, and cards, with built-in email aliasing via SimpleLogin. Apps for Windows, macOS, Linux, Android, iOS, and the major browsers.
PrivacyNotes Encrypted notes, tasks, calendar, files, passwords and a journal with mood and medication tracking, all unlocked by one 12-word recovery phrase. Sign up with no email and no password. Open source.
KeePassXC Securely store passwords using industry standard encryption, quickly auto-type them into desktop applications, and use browser extension to log into websites. KeePassDX for…
Bitwarden Bitwarden is our top choice. You can import your previous passwords from other password managers with ease. Free for personal use. Available for Desktop, all Browsers, Android…
1Password 1Password is a commercial password manager for individuals, families, and teams, available on Windows, Mac, Linux, Android, iOS, and all major browsers. It uses a dual-key architecture combining your master password with a locally generated Secret Key.
gopass license, in plain English
MIT Permissive
Do almost anything: use, change, and ship it, even inside closed-source products. The only condition is keeping the copyright notice.
Permits
- Commercial use
- Modification
- Distribution
- Private use
Requires
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: Permissive licensing lets anyone reuse this, including inside closed products. That is freedom to build on, but no guarantee that downstream copies stay open.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.
* Average ratings will show on this page once the threshold of 5 ratings is reached.