pass

It stores each password in a separate GPG‑encrypted file whose path reflects the associated service, allowing a hierarchical organization under ~/.password‑store. The command‑line interface provides commands to add, edit, generate, retrieve, and copy passwords to the clipboard, and it can track changes with Git. Because the store consists of ordinary files, any standard Unix tools can be used to manipulate it, and bash, zsh, and fish completions are supplied.

The design follows the Unix philosophy: there are no proprietary file formats or custom databases, and the core is a short shell script that relies on existing GPG and Git utilities. Encryption is handled by GPG, and the optional use of the GPG agent enables temporary password entry dialogs and cached authentication.

An active community maintains extensions, graphical clients, and additional tools that work with the same password store, while extensive documentation is available in the man page. The utility is stable and available on Linux, BSD, and macOS platforms.