Qt-based graphical user interface for the password manager password-store also known as pass. Can use either pass or gpg to interact with password-store files. Features configurable password generation, templates, clipboard handling, and per folder settings for multi-recipient encryption.

Passwdqc is a password/passphrase strength checking and policy enforcement toolset, including an optional PAM module, pam_passwdqc, command-line programs (pwqcheck, pwqfilter, and pwqgen), and a library, libpasswdqc.

Pass OTP is an extension for password-store that allows adding one-time-password (OTP) secrets, generating OTP codes, and displaying secret key URIs using the standard otpauth:// scheme.

John the Ripper is a fast password cracker. Its primary purpose is to detect weak Unix passwords. Besides several crypt password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers. This is the community-enhanced, "jumbo" version of John the Ripper.

KeePassXC is a password manager or safe which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-file which can be stored on an external storage device. The databases are encrypted using the algorithms AES or Twofish.

YAPET is a text based password manager using the Blowfish encryption algorithm. Because of its small footprint and very few library dependencies, it is suited for installing on desktop and server systems alike. The text based user interface allows you to run YAPET easily in a Secure Shell session. Two companion utilities enable users to convert CSV files to YAPET and vice versa.

Vaultwarden is an unofficial Bitwarden server implementation written in Rust. It is compatible with the official Bitwarden clients, and is ideal for self-hosted deployments where running the official resource-heavy service is undesirable.

Supported features are:

• Personal vault support

• Organization vault support

• Groups

• Event Logs

• Password sharing and access control

• Collections

• File attachments

• Folders

• Favorites

• Website icons

• Bitwarden Authenticator (TOTP)

• Bitwarden Send

• Emergency Access

• Trash (soft delete, you can configure the days for automatic deletion)

• Master password re-prompt

• Personal API key

• Two-step login via email, Duo, YubiKey, and FIDO2 WebAuthn

• Username generator integration

• Directory Connector support

• Account Recovery (this requires mail to be enabled)

• Live sync (WebSocket only) for desktop/browser clients/extensions

• Live sync (push notifications) for mobile clients (Android/iOS)

• Single Sign-On (SSO)

This is the command-line interface of LessPass, which computes a password deterministically from a site, a login, options and a master password, which is the only secret to keep.

sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

This package provides a flexible and scriptable password generator which generates strong passphrases, inspired by XKCD 936.

cpass is a terminal user interface for pass. It supports both vim-like keybindings and the mouse.

pass-git-helper is a git credential helper which uses pass, the standard unix password manager, as the credential backend for your git repositories. This is achieved by explicitly defining mappings between hosts and entries in the password store.

This is a cracker for openssl encrypted files. It can be used either in exhaustive mode to try every password given a charset or in dictionary mode to try every password contained in a file.

This package provides a GTK prompter for Himitsu, used to request user consent for application access to stored secrets.

OTPClient is a GTK+-based OTP client, supporting TOTP and HOTP.

This package provides a simple command-line tool to convert SSH ed25519 keys to age keys.

Hashcat is an password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. Hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enable distributed password cracking.

This package provides a tool to demonstrate how easy it is to gain unauthorized access to a system by automatically attempting logins and passwords. It supports a wide range of protocols including SSH, SMTP and HTTP.

This package provides a git credential helper that queries Himitsu for credentials.

CrackLib is a library containing a C function which may be used in a passwd-like program. The idea is simple: try to prevent users from choosing passwords that could easily be guessed (or "cracked") by filtering them out, at the source.

Argon2 provides a key derivation function that was declared winner of the 2015 Password Hashing Competition.

Pass-tomb provides a convenient solution to put your password store in a Tomb and then keep your password tree encrypted when you are not using it. It uses the same GPG key to encrypt passwords and tomb, therefore you don't need to manage more key or secret. Moreover, you can ask pass-tomb to automatically close your store after a given time.

Browserpass is a browser extension for pass, a UNIX-based password store manager. It allows you to auto-fill or copy to clipboard credentials for the current domain, protecting you from phishing attacks.

This package only contains the Browserpass native messaging host. You must also install the browser extension for GNU IceCat or ungoogled-chromium separately.

Shroud is a simple secret manager with a command line interface. The password database is stored as a Scheme s-expression and encrypted with a GnuPG key. Secrets consist of an arbitrary number of key/value pairs, making Shroud suitable for more than just password storage. For copying and pasting secrets into web browsers and other graphical applications, there is xclip integration.