Gopass cheatsheet

  • Posted: October 11, 2025
  • Updated: October 11, 2025

Commands compatible with pass

# Init repo: 
gopass init

# List secrets:
gopass ls

# Show secret:
gopass site-url/username-or-email

# Copy secret to clipboard for 45 seconds:
gopass -c site-url/username-or-email

# Insert a secret:
gopass insert site-url/username-or-email

# To remove a secret:
gopass remove site-url/username-or-email
gopass rm site-url/username-or-email
gopass rm -rf site-url/username-or-email

# Generate a password and insert it:
gopass generate site-url/username-or-email

Gopass specific commands

# Init a repo using age as encryption backend instead of gpg (default):
gopass init --crypto=age

# To list recipients:
gopass recipients

# To add a recipient:
gopass recipients add $KEY_ID

# To list mounts:
gopass mounts

# To add a new mount:
gopass mounts add $NAME_OF_MOUNT $PATH_TO_PASSWORD_STORE

# To sync local repo with remote:
gopass sync

# To get topt code:
gopass totp site-url/username-or-email

# To audit all secrets:
gopass audit

# To show current config:
gopass config

# To show only a specific config value:
gopass config $CONFIG_KEY

# To set a config:
gopass config $CONFIG_KEY $CONFIG_VALUE

# To enable debugging:
export GOPASS_DEBUG=true

# To disable colors:
export GOPASS_NOCOLOR=true