Linux/Windows Password Manager “pass”

Derrick Gee
4 min readJun 7, 2019
Photo by Matt Artz on Unsplash

I have been using pass for about over a month now, and I think it’s a great terminal password manager. It uses gpg to encrypt your passwords into physical files in an organized folder system. And yes, the images below are all on WSL (Windows Subsystem for Linux) on Windows. It is a simple process to use Linux on Windows; Type in powershell in your start menu, run as admin, and run this command: Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux

After it restarts your pc, just go to the Microsoft Store and install Ubuntu (or a listed distro of your choice). It is a pretty painless process to gain access to Linux on Windows.

If you don’t have a gpg key gpg --list-keys , then you need to generate one. If your gpg version is over 2.1.17+: run gpg --full-generate-key , else run gpg --gen-key (check your man gpg incase it is not this flag). Remember your passphrase for this key, as you will need it to decrypt the passwords you store. Skip to Step 2 if you already have gpg.

Step 1, GPG: See if you have any gpg keys. If not, check the version of gpg you have and refer to the above on which command to run:

Yes, this is Linux on Windows.

Next, follow the prompts. I personally use and recommend RSA 2048, if you’re into future proofing, then go with 4096:

Be sure to remember your passphrase:

Enter your passphrase twice, be sure to remember this passphrase.

This is what you use to unlock your passwords. The idea here is that you don’t need to remember long complicated passwords, instead you use a simple passphrase to unlock and use it.

Displaying the newly made pub key.

Step 2, Installing pass: Check out passwordstore to see how to download and install it for your system. I use personally use Manjaro and Ubuntu, so it is sudo apt-get install pass and sudo pacman -S pass for me.

Installing pass on Ubuntu package manager
Installing pass on Arch package manager

Pass init: Now you want to hook up that gpg key to your password-store, so run gpg --list-keys , copy pub key (long capital letters and numbers string under pub in the image above), and then run pass init "YOUR_PUB_KEY" .

Once you have your gpg key linked, now you can create your passwords. Create a single password: To add a key, run pass insert FOLDER/CONTENT and then type in your password.

Create multiline passwords: Sometimes you might want to store more than 1 password. Maybe you want to store a user and pass, or a user, pass and API key. Pass is able to do that with pass -m insert Folder/content:

You can store pretty much anything in multi-line passwords, get creative.

Access your password: You can run pass -c FOLDER/CONTENT and type in your passphrase. The -c flag copies your password to your clipboard for 45 seconds, then erases it from your clipboard.

Copy to clipboard on Linux.

You will need to pipe clip.exe on WSL instead of using the -c flag in order to copy your password to your clipboard on Windows.

Copy to clipboard on WSL.

Remove a password: You can use the rm method to remove a pass file, just enter which Folder/application you want to remove:

The folder system should be easy to visualize, but you can see below to try to imagine it better:

/home/user/
|___.password-store
| |______Email
| | |______job
| | |______personal
| |
| |______Facebook
| | |______main
| | |______mydog

Like my content? GithubTwitterMediumSupport Me

--

--