SHSelfHostIndex
PA

pass-tomb

Encrypted storage extension for the pass manager

Password Managers ★ 437 stars Hard setup GPL-3.0

pass-tomb is an open-source extension for the standard Unix password manager that keeps the password store inside an encrypted Tomb container. It hides the directory structure of secrets when the store is locked.

Official siteSource code

Key features

  • Encrypted Tomb container
  • Hides store structure
  • Integrates with pass
  • Command-line workflow

Strengths

  • Released under the GPL-3.0 license
  • Written in Shell
  • Tiny footprint — runs in 64 MB RAM

Is pass-tomb secure?

OSV.dev has no published security advisories for pass-tomb's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

pass-tomb replaces

Self-hosted 1Password alternativesSelf-hosted KeePass alternatives

Health badge

Maintain pass-tomb? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 44 · fair

Markdown
[![SelfHostIndex health score for pass-tomb](https://selfhostindex.com/badge/pass-tomb.svg)](https://selfhostindex.com/app/pass-tomb/)
HTML
<a href="https://selfhostindex.com/app/pass-tomb/"><img src="https://selfhostindex.com/badge/pass-tomb.svg" alt="SelfHostIndex health score for pass-tomb"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/pass-tomb.svg
   :alt: SelfHostIndex health score for pass-tomb
   :target: https://selfhostindex.com/app/pass-tomb/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare pass-tomb

21 head-to-head comparisons.

Similar password managers apps