SE Pass is an iPhone client for the standard Unix password manager, pass (also known as “GNU pass” or “password-store”). It does three things, well:
- Generates a keypair inside the Secure Enclave. The private key is created in the Enclave and can never leave the device. SE Pass exports the matching OpenPGP public key for you to add as a recipient.
- Syncs your encrypted store with git — clone and refresh over HTTPS (public or token) or SSH (with an Enclave-backed key). SSH host keys are pinned on first connect and verified on every clone.
- Browses the password tree and decrypts on demand. Decryption runs in the Secure Enclave, gated by Face ID / Touch ID. The clipboard clears itself automatically.
SE Pass has no account, sends nothing to us, and uses no analytics or tracking. It talks only to the git remote you configure. It’s a focused, read-only, hardware-backed window into your existing pass store.
Getting started
SE Pass is for people who already run pass on the desktop. You add
the app’s exported public key to your store’s recipients, re-encrypt, and push;
your phone then clones and decrypts. Full instructions and source are on GitHub.
Free & open source
SE Pass is free software, released under the GNU General Public License, version 3. You can read, build, and audit every line.