>

A CLI Password Manager With pass

Keep passwords in a GPG-encrypted store and copy them on demand.

LinuxsecurityclipboardencryptionLow risk
Run pass generate example.com 20 to create a 20-character password for that entry.

01Command

Command
$ pass generate example.com 20

02What it does

pass stores each password as a small GPG-encrypted file under ~/.password-store, which you can sync with git. Use pass show -c site to copy a password to the clipboard, and pass insert for existing secrets; the format is transparent and scriptable.

03Risk

RiskLow risk
Requirementssudo apt install pass
!Warning: Security depends on your GPG key; a weak or unbacked-up key can lock you out or expose every entry.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Password Store
    Official project · vendor-doc · 2026-09-20
    Evidence: Debian packages pass, the standard Unix password manager backed by GPG and git.
  • Debian package: pass
    Debian · vendor-doc · 2026-09-20
    Evidence: Debian packages pass, the standard Unix password manager backed by GPG and git.

Last verified: 2026-09-22 · Category: Security & Privacy

06Related solutions

Create an SSH key pair with ssh-keygen (Ed25519)
LinuxTerminaldevelopersecurity

Generate a modern Ed25519 public/private key pair in ~/.ssh for authenticating to servers and Git platforms without passwords.

Low risk ✓ 2026-09-17
Change file permissions with chmod
LinuxFilesTerminalsecurity

Add or remove read, write, and execute permission for the owner, group, or others using symbolic or octal modes.

Medium risk ✓ 2026-09-17
Allow a port through the firewall with ufw
Linuxnetworksecurity

Add a UFW rule to permit inbound traffic on a TCP or UDP port, such as SSH on port 22.

High risk ✓ 2026-09-17