Gopass, an open-source command-line password manager designed for teams, stores credentials in an encrypted format and operates without requiring a network connection, making it suitable for air-gapped systems. The tool functions as a direct replacement for the traditional Unix password manager, `pass`.
By default, Gopass encrypts each secret using GnuPG (GPG) and maintains the password store within a Git repository. This Git integration provides a comprehensive record of all changes and facilitates synchronization of the store across multiple devices, including laptops and servers, for team collaboration. The private keys used for encryption remain exclusively on the user's local machine.
Users have the flexibility to customize the tool's backend. While GPG is the default encryption method, users can opt to switch to `age` for encryption. Similarly, the default Git storage can be replaced with `fossil`, or versioning can be disabled entirely by using the `--storage=fs` flag, which stores data directly on the filesystem.
Gopass is compatible with a wide range of operating systems, including Linux, macOS, Windows, and BSD variants, with developers aiming for a consistent user experience across all platforms. Installation is supported through various package managers and repositories, such as Homebrew and MacPorts for macOS, Fedora (potentially requiring the `daftaupe/gopass` Copr repository), Arch Linux, Alpine Linux, WinGet and Chocolatey for Windows, Scoop, and the FreeBSD and OpenBSD ports. The project is freely available on GitHub.
