Password management without the password cloud.

A free and open-source GUI for pass: your passwords stay GnuPG-encrypted files on machines you control, synced with Git, never in the cloud.

Download QtPass Get Started

QtPass logo QtPass 1.8.3

Linux Compatible Windows 11 Compatible macOS Compatible FreeBSD Compatible OpenBSD Compatible

Install QtPass

From your system's package manager, or the installer for Windows and macOS:

Debian, Ubuntu
sudo apt install qtpass
Fedora
dnf install qtpass
openSUSE
zypper install qtpass
Arch
pacman -S qtpass
Gentoo
emerge -atv qtpass
FreeBSD
pkg install qtpass
OpenBSD
pkg_add qtpass
Windows
winget install IJHack.QtPass or choco install qtpass
macOS
The .dmg from the releases page, then xattr -d com.apple.quarantine /Applications/QtPass.app

The Homebrew cask is disabled until QtPass is notarized; here is how you can help. The AppImage, Flathub and every other option are on the downloads page.

Why QtPass?

QtPass works with pass, the standard UNIX password manager. Your passwords are encrypted with GPG using open standards: no vendor lock-in, fully portable and under your control.

Under the hood, each password is a single file: its name is the entry, its contents are GPG-encrypted. pass keeps those files in an ordinary folder, optionally versioned with Git like any other project, so a server you sync through only ever sees encrypted files: just files, a key you hold, and a history you can inspect. QtPass is the graphical front end for that model: it calls pass directly when it is installed, or talks to gpg2 and git itself when it is not, so the files on disk stay exactly as pass itself would leave them.

It runs on Linux, macOS, Windows, FreeBSD and OpenBSD with a native look and feel on each platform. Your password store syncs via Git, so you always have a backup and can access your passwords across all your devices. Already using pass? QtPass works on your existing store: point it at the folder and go.

QtPass is open source and free. It includes a secure password generator, built-in one-time passwords (TOTP, incl. Steam Guard), a clipboard with auto-clear, support for smartcards and YubiKeys through GnuPG, several password stores side by side, and is available in over 60 languages.

No accounts, no telemetry, no network code: QtPass never phones home. Read the privacy policy, it is short.

New to QtPass? Follow the getting started guide.

Looks at home on your desktop

QtPass is a native desktop application, not a browser around a cloud service. It uses the widgets, menus and colours of the platform it runs on, and follows its light or dark preference. The same store, everywhere you run it.

QtPass on Linux in the light theme
Linux, light: following your desktop theme.
QtPass on Linux in the dark theme
Linux, dark: the same store, a different theme.
Windows 11 Native light and dark.
macOS Native light and dark.
FreeBSD With Xfce, light and dark.

Other apps for the same store

A pass store is a folder of GPG-encrypted files, so other apps can work with the same one. They are separate projects by their own authors: we list them with what to watch out for, we do not vouch for them. Checked in October 2026.

In your browser

  • Browserpass for Firefox, Chrome and Chromium, on Linux, macOS and Windows. It runs gpg itself, so it works without pass. It matches sites by entry name, so name entries after the domain, such as github.com; one-time codes are off by default.
  • PassFF for Firefox. It needs pass (or gopass) installed, so not with QtPass's own GnuPG mode, and it reads one store.

Both need a small native helper next to the extension and a graphical pinentry.

On your phone

  • Android: Password Store (agrahn's fork, on F-Droid). It opens entries written by GnuPG 2.4 and newer, which the archived original cannot. It needs a copy of your secret key (no YubiKey), syncs only through a Git remote, does not check signed .gpg-id files, and cannot use post-quantum keys.
  • iPhone: Pass for iOS. Saving an edited entry encrypts it to one key only, so keep shared stores read-only there; a YubiKey works with RSA keys only and tries only an entry's first recipient. Last release February 2025.

Around pass

  • gopass: a pass-compatible command line manager that runs gpg directly; it does not check signed .gpg-id files.
  • pass-import: bring your passwords over from 1Password, Bitwarden, KeePass and many more (a pass extension; its pimport works without pass).
  • pass-git-helper: Git credentials from your store; needs pass.

QtPass itself on Android is only an experiment so far.

PyQtPass is an experimental Python port of QtPass by the same maintainer, on PyPI: pipx install pyqtpass (Python 3.11 or newer).

Build from source

Build on Linux/BSD:

qmake6 && make && make install

Build on macOS:

brew install qt
qmake && make && macdeployqt main/QtPass.app

FAQ, screenshots and a preview of 2.0, security and how to contribute.