passage
A command-line fork of pass that encrypts the password store with age instead of GnuPG.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About passage
passage works like pass, the Unix password manager, but uses age for encryption instead of GnuPG. Secrets are stored as files under ~/.passage/store, decrypted with age identities and encrypted to the nearest .age-recipients file, so different folders can have different recipients.
The identity file can be kept plain on disk, protected with a passphrase, or backed by hardware through age-plugin-yubikey. pass extensions can support it through the PASSAGE variable. The init command is not available, and moving or copying a secret always re-encrypts it.
Strengths
- Uses the simple age format instead of GnuPG
- Per-folder recipients through .age-recipients files
- Works with YubiKey via age-plugin-yubikey
- Compatible with pass extensions that opt in
Limitations
- No init command, so setup is manual
- Command line only with no graphical interface
- Changes are infrequent
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- Filippo Valsorda
- Platforms
- macOS, Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Command-line users who like pass but want to avoid GnuPG
- Categories
- Password managers, Encryption tools, CLI tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to passage
Compare allSoftware that can replace passage for an important use case, and what changes if you switch.
pass
The standard Unix password manager: one GPG-encrypted file per secret.
pass is the upstream GPL-2.0 tool that passage forked, using GnuPG instead of age, with an init command and Git integration for history.
gopass
Team-oriented password store built on GPG and Git.
gopass is an MIT-licensed GPG and Git password store with multiple stores and built-in audits, running on Windows as well as macOS and Linux.
KeePassXC
A free, open-source desktop password manager that keeps your vault in a local encrypted file.
KeePassXC stores secrets in one local encrypted kdbx file with a graphical desktop app, browser extension and CLI, avoiding both age and GnuPG.
passage as an alternative
Listings that name passage as an alternative.
QtPass
A cross-platform graphical front end for pass, the GPG-encrypted Unix password manager.
passage is a command-line fork of pass that uses age instead of GnuPG, avoiding GPG key setup, but has no graphical interface and needs manual setup.
rbw
An unofficial command-line Bitwarden client that keeps keys in a background agent.
passage is an open-source command-line fork of pass that encrypts with age instead of GnuPG, with no account needed but manual setup.
Similar software
Related functionality, not necessarily a direct replacement.
Browserpass
A browser extension that fills and copies logins from a pass password store.
Pass for iOS
An iOS and iPadOS client for pass password stores, with Git sync, one-time codes and AutoFill.
