A lightweight, terminal-based password manager that uses GPG encryption and a simple file-system hierarchy to secure your credentials.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install pass
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install pass using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is pass - The Standard Unix Password Manager?
pass is the definitive Unix password manager, designed for users who value simplicity and security. Unlike proprietary solutions, it stores each password as a GPG-encrypted file within a standard folder hierarchy at ~/.password-store/. This approach ensures that your data remains under your control, free from daemon dependencies or opaque formats.
By leveraging Openclaw Skills, developers can seamlessly integrate this tool into their daily terminal workflows, ensuring robust security without sacrificing speed or flexibility. The skill emphasizes a file-based philosophy where the directory structure is the primary organization method, making it highly portable and compatible with standard Unix tools.
pass - The Standard Unix Password Manager Use Cases
- Securely generating and storing passwords from the command line using GPG encryption.
- Synchronizing a password database across multiple machines using integrated git support.
- Managing Two-Factor Authentication (TOTP) codes directly via the terminal using extensions.
- Migrating existing credentials from managers like Bitwarden or 1Password via pass-import.
- Sharing specific password subfolders with team members using multiple GPG IDs.
How pass - The Standard Unix Password Manager Works
- Initialize the password store with a specific GPG key to create the encrypted root directory and set the .gpg-id file.
- Create or generate new password entries, which are saved as individual GPG-encrypted files in a user-defined directory tree.
- Access credentials by decrypting files to stdout or copying only the first line (the password) to the system clipboard.
- Organize entries using a standard directory structure that mirrors your personal or professional context (e.g., email/work, finance/bank).
- Track changes and synchronize the store across multiple devices using standard git push and pull commands through the pass interface.
pass - The Standard Unix Password Manager Setup
To get started with pass, install the package for your operating system and initialize the store using your GPG key. This is a foundational step in utilizing Openclaw Skills for security.
# macOS installation
brew install pass
# Ubuntu/Debian installation
sudo apt install pass
# Initialize the store with your GPG email or key ID
pass init "[email protected]"
If you do not have a GPG key, you must generate one using gpg --full-generate-key before initialization.
pass - The Standard Unix Password Manager Data Schema & Taxonomy
The store follows a simple file-based taxonomy located in ~/.password-store/. It is structured to be readable by humans and terminal tools alike.
| Component | Description |
|---|---|
| Root Directory | Default location at ~/.password-store/ |
| GPG ID File | .gpg-id containing the encryption key IDs used for the store |
| Password Files | Files ending in .gpg containing the encrypted payload |
| Internal Format | Line 1: Password; Subsequent lines: Metadata (URL, username, notes) |
| Tree Structure | Hierarchical folders (e.g., work/github.gpg, personal/gmail.gpg) |
pass - The Standard Unix Password Manager Advanced Features
- Native git integration for automated commits on every password change.
- Support for multi-user shared stores by initializing folders with multiple GPG IDs.
- The pass-otp extension for generating TOTP tokens without leaving the CLI.
- Extensible architecture allowing for custom bash-based user extensions.
- Shell completion support for Bash, Zsh, and Fish to speed up navigation.
- Multi-line entry support for storing complex metadata alongside passwords.
SKILL.md
Loading
Related Openclaw Skills
Obsidian Daily Notes
A comprehensive CLI-based skill for managing Obsidian daily journals, tasks, and search queries within an AI agent workflow.
Conventional Commits
A skill that enforces the Conventional Commits specification for git messages to enable automated changelogs and semantic versioning.
Pet Sitter Client Intake Form Generator
A specialized tool for pet care professionals to generate branded, fillable PDF client intake and onboarding forms with ease.
VibeTunnel
A comprehensive tool for managing, monitoring, and controlling terminal sessions through the VibeTunnel REST API.
topydo Task Manager
A powerful CLI tool for managing tasks in the todo.txt format with support for dependencies, recurrence, and advanced filtering.
EWS Calendar Sync for Microsoft Exchange
A secure tool for extracting structured meeting data from Microsoft Exchange via the EWS API.
Featured*
