Password managers
Pass privacy rating
Command-line password manager that stores each password as a GPG-encrypted file in a folder, with optional git for history and syncing. Many third-party clients and extensions exist.
Summary
Pass scores 69 out of 100 (grade C) on the password managers criteria. It meets 5 of 7 criteria: open source, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet no trackers or telemetry and independent audit. Automated tests: Mozilla HTTP Observatory grade B.
Score 69 out of 100. How scoring works
Criteria
- Yes
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The pass tool has no telemetry, but the website loads Google Analytics and the Twitter widgets script.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free software with no ads, accounts or paid tiers.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Local-only: each password is a separate GPG-encrypted file, with no sync service.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
Passwords are stored in a local folder that can be synced with any git server.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Passwords are ordinary GPG files in a folder that standard tools can read.