Password management without the password cloud.
A free and open-source GUI for pass: your passwords stay GnuPG-encrypted files on machines you control, synced with Git, never in the cloud.
Install QtPass
From your system's package manager, or the installer for Windows and macOS:
- Debian, Ubuntu
sudo apt install qtpass- Fedora
dnf install qtpass- openSUSE
zypper install qtpass- Arch
pacman -S qtpass- Gentoo
emerge -atv qtpass- FreeBSD
pkg install qtpass- OpenBSD
pkg_add qtpass- Windows
-
winget install IJHack.QtPassorchoco install qtpass - macOS
-
The
.dmgfrom the releases page, thenxattr -d com.apple.quarantine /Applications/QtPass.app
The Homebrew cask is disabled until QtPass is notarized; here is how you can help. The AppImage, Flathub and every other option are on the downloads page.
Why QtPass?
QtPass works with pass, the standard UNIX password manager. Your passwords are encrypted with GPG using open standards: no vendor lock-in, fully portable and under your control.
Under the hood, each password is a single file: its name is the entry,
its contents are GPG-encrypted. pass keeps those files in an ordinary
folder, optionally versioned with Git like any other project, so a
server you sync through only ever sees encrypted files: just files, a
key you hold, and a history you can inspect. QtPass is the graphical
front end for that model: it calls
pass directly when it is installed, or talks to
gpg2 and git itself when it is not, so the
files on disk stay exactly as pass itself would leave
them.
-
GPG encrypted Open-standard encryption with your keys
-
Git synced Versioned store, synced across devices
-
Open source Free software you can read and audit
-
No account Nothing to sign up for
-
No telemetry QtPass never phones home
-
No cloud dependency Local files, under your control
It runs on Linux, macOS, Windows, FreeBSD and OpenBSD with a native
look and feel on each platform. Your password store
syncs via Git, so you always have a backup
and can access your passwords across all your devices. Already using
pass? QtPass works on your existing store:
point it at the folder and go.
QtPass is open source and free. It includes a secure password generator, built-in one-time passwords (TOTP, incl. Steam Guard), a clipboard with auto-clear, support for smartcards and YubiKeys through GnuPG, several password stores side by side, and is available in over 60 languages.
No accounts, no telemetry, no network code: QtPass never phones home. Read the privacy policy, it is short.
New to QtPass? Follow the getting started guide.
Looks at home on your desktop
QtPass is a native desktop application, not a browser around a cloud service. It uses the widgets, menus and colours of the platform it runs on, and follows its light or dark preference. The same store, everywhere you run it.
Other apps for the same store
A pass store is a folder of GPG-encrypted files, so other apps can work with the same one. They are separate projects by their own authors: we list them with what to watch out for, we do not vouch for them. Checked in October 2026.
In your browser
-
Browserpass
for Firefox, Chrome and Chromium, on Linux, macOS and Windows.
It runs gpg itself, so it works without pass. It matches sites
by entry name, so name entries after the domain, such as
github.com; one-time codes are off by default. - PassFF for Firefox. It needs pass (or gopass) installed, so not with QtPass's own GnuPG mode, and it reads one store.
Both need a small native helper next to the extension and a graphical pinentry.
On your phone
-
Android:
Password Store
(agrahn's fork, on F-Droid). It opens entries written by GnuPG
2.4 and newer, which the archived original cannot. It needs a
copy of your secret key (no YubiKey), syncs only through a Git
remote, does not check signed
.gpg-idfiles, and cannot use post-quantum keys. - iPhone: Pass for iOS. Saving an edited entry encrypts it to one key only, so keep shared stores read-only there; a YubiKey works with RSA keys only and tries only an entry's first recipient. Last release February 2025.
Around pass
-
gopass: a
pass-compatible command line manager that runs gpg directly; it
does not check signed
.gpg-idfiles. -
pass-import: bring your passwords over from 1Password, Bitwarden, KeePass
and many more (a pass extension; its
pimportworks without pass). - pass-git-helper: Git credentials from your store; needs pass.
QtPass itself on Android is only an experiment so far.
PyQtPass is an
experimental Python port of QtPass by the same maintainer, on
PyPI:
pipx install pyqtpass (Python 3.11 or newer).
Build from source
- QtPass 1.8 builds with Qt 5.15 or later (Qt 6 recommended); 2.0 will need Qt 6.8 or later
- GnuPG 2.2+
- Optional: Git and pass
Build on Linux/BSD:
qmake6 && make && make install
Build on macOS:
brew install qt
qmake && make && macdeployqt main/QtPass.app
FAQ, screenshots and a preview of 2.0, security and how to contribute.




