This package provides a GTK prompter for Himitsu, used to request user consent for application access to stored secrets.

secretsd is a generic backend for the libsecret API to use on headless systems or minimal desktop environments. It stores secrets in a sqlite database, encrypted using a AES key. The database key is stored in a regular file next to the database by default, but can be read from an external program.

Pass-tomb provides a convenient solution to put your password store in a Tomb and then keep your password tree encrypted when you are not using it. It uses the same GPG key to encrypt passwords and tomb, therefore you don't need to manage more key or secret. Moreover, you can ask pass-tomb to automatically close your store after a given time.

KeePassXC is a password manager or safe which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-file which can be stored on an external storage device. The databases are encrypted using the algorithms AES or Twofish.

AWS Vault is a tool to securely store and access Amazon Web Services credentials.

AWS Vault stores IAM credentials in your operating system's secure keystore and then generates temporary credentials from those to expose to your shell and applications. It's designed to be complementary to the AWS CLI tools, and is aware of your profiles and configuration in ~/.aws/config.

OTPClient is a GTK+-based OTP client, supporting TOTP and HOTP.

This package provides an ssh-agent implementation that stores and secures keys through Himitsu.

This is a cracker for LUKS encrypted volumes. It can be used either in exhaustive mode to try every password given a charset or in dictionary mode to try every password contained in a file.

pwsafe is a command line tool compatible with Counterpane's Passwordsafe.

Maskprocessor is a high-performance word generator with a per-position configurable charset.

This package provides a simple command-line tool to convert SSH ed25519 keys to age keys.

This is a cracker for openssl encrypted files. It can be used either in exhaustive mode to try every password given a charset or in dictionary mode to try every password contained in a file.

Shroud is a simple secret manager with a command line interface. The password database is stored as a Scheme s-expression and encrypted with a GnuPG key. Secrets consist of an arbitrary number of key/value pairs, making Shroud suitable for more than just password storage. For copying and pasting secrets into web browsers and other graphical applications, there is xclip integration.

This is the command-line interface of LessPass, which computes a password deterministically from a site, a login, options and a master password, which is the only secret to keep.

Makepasswd is a program that generates pseudo-random passwords of a desired length. It can also generate their corresponding hashes for a given encryption algorithm if so desired.

Pass-coffin is a pass extension that hides the password store data inside a GPG encrypted file, which we'll call a coffin.

Vaultwarden is an unofficial Bitwarden server implementation written in Rust. It is compatible with the official Bitwarden clients, and is ideal for self-hosted deployments where running the official resource-heavy service is undesirable.

Supported features are:

• Personal vault support

• Organization vault support

• Groups

• Event Logs

• Password sharing and access control

• Collections

• File attachments

• Folders

• Favorites

• Website icons

• Bitwarden Authenticator (TOTP)

• Bitwarden Send

• Emergency Access

• Trash (soft delete, you can configure the days for automatic deletion)

• Master password re-prompt

• Personal API key

• Two-step login via email, Duo, YubiKey, and FIDO2 WebAuthn

• Username generator integration

• Directory Connector support

• Account Recovery (this requires mail to be enabled)

• Live sync (WebSocket only) for desktop/browser clients/extensions

• Live sync (push notifications) for mobile clients (Android/iOS)

• Single Sign-On (SSO)

Pwgen generates passwords which can be easily memorized by a human.

impass is a simple password manager using GPG-wrapped JSON files. It has a command line interface as well as a very simple graphical interface, which can even "type" your passwords into any X11 window.

FPM2 is GTK2 port from Figaro's Password Manager originally developed by John Conneely, with some new enhancements.

Upstream development seems to have stopped. It is therefore recommended to use a different password manager.

John the Ripper is a fast password cracker. Its primary purpose is to detect weak Unix passwords. Besides several crypt password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers. This is the community-enhanced, "jumbo" version of John the Ripper.

This package provides a flexible and scriptable password generator which generates strong passphrases, inspired by XKCD 936.

Libpwquality is a library for password quality checking and generation of random passwords that pass the checks.

pass-rotate is a command line utility and python library for rotating passwords on various web services. It makes it easier to rotate your passwords, one at a time or in bulk, when security events or routine upkeep of your online accounts makes it necessary.