SE Pass is an iOS client for the standard Unix password manager, pass (sometimes also referred to as “GNU pass” or “password-store”). It's intended to let a user do three things:
- Generate a GPG keypair inside your device's Secure Enclave. The private key is created in the enclave and can never leave the device. SE Pass exports the matching GPG public key for you to add to your password store as an additional encryption key.
- Sync your password store via git to your device. You can clone and refresh over HTTPS (public or token) or SSH (with a separate enclave key for ssh authentication).
- Browse the password tree and decrypt passwords on demand. Decryption runs in the Secure Enclave, gated by biometrics (Face ID or Touch ID). The clipboard then clears itself automatically after 45 seconds.
SE Pass has no account, sends nothing to us (Modiot Labs), and uses no analytics or tracking. It talks only to the git server you configure. It’s intended to be a relatively focused app to enable access to your existing password store on your portable device.
Getting started
SE Pass is intended for use by people who already run pass on
their desktop(s). You add the app’s exported public key to your store’s recipients,
re-encrypt, and push. Your device then clones the password store
repo. Full instructions and source are on GitHub.
Free & open source
SE Pass is free software, released under the GNU General Public License, version 3.