Alternatives to gopass
Team-oriented password store built on GPG and Git. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
gopass
Team-oriented password store built on GPG and Git.
Replacements
Listings that take over the same core job as gopass.
pass
The standard Unix password manager: one GPG-encrypted file per secret.
pass is the simpler original using one GPG-encrypted file per secret with Git history, runs on macOS and Linux only, and leaves filenames unencrypted.
Passbolt
Self-hosted password manager for teams, built on OpenPGP keys.
Passbolt also uses OpenPGP keys for team sharing but adds a self-hosted web server and browser extension, with directory sync and audit logs paid.
Bitwarden
An open-source password manager with free cross-device sync, apps for every platform and optional paid plans.
Bitwarden replaces GPG and Git with graphical apps, cloud sync and a free tier, and can be self-hosted, though some features need a paid plan.
KeePassXC
A free, open-source desktop password manager that keeps your vault in a local encrypted file.
KeePassXC swaps GPG keys for a single local encrypted database with a desktop interface, CLI and browser extension, but has no built-in sync service.
Psono
Self-hostable password manager aimed at companies and developers.
Psono is a self-hosted Apache-2.0 server with SAML and LDAP authentication and fine-grained sharing, but self-hosting requires running several containers.
Similar software
Related functionality, not a direct replacement.
Vaultwarden
A lightweight self-hosted server compatible with the Bitwarden apps, written in Rust.
KeePass
The original open-source local password database in the kdbx format.
