pass

Store and retrieve GPG-encrypted credentials using the pass CLI.

1|Updated Feb 17, 2026

Search Tags:#cli #encryption #credentials #secrets-management #gpg #pass #password-store

Ready to run

npx skills add https://github.com/snqb/my-skills --skill pass

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: pass
Source: https://github.com/snqb/my-skills/tree/main/pass
Command: npx skills add https://github.com/snqb/my-skills --skill pass

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secure credential management is essential for protecting API keys, tokens, and secrets. This skill enables you to store, retrieve, generate, and remove credentials securely using the pass password store.

Core Features & Use Cases

Store and organize secrets locally using a hierarchical key-path (service/environment/key).
Retrieve and audit credentials on demand across development, CI/CD, and cloud workflows.
Generate strong passwords and remove outdated entries with simple commands, all while remaining encrypted by GPG.

Quick Start

Store a new credential with pass insert service/key and retrieve it later with pass show service/key.

Frequently Asked Questions about pass

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I store and retrieve API keys securely in a CLI environment?▼

Use pass to manage secrets in CI/CD pipelines by retrieving GPG-encrypted credentials on demand. The password store organizes tokens hierarchically, allowing automated workflows to securely access and audit secrets without exposing them in plaintext configuration files.

Do I need GPG to use a password store for credential management?▼

Yes, GPG is required. The pass CLI uses a GPG-encrypted password store to secure credentials. You must configure GPG keys before inserting, generating, or showing secrets for your development and cloud environments.

How does hierarchical key-path storage work for secrets management?▼

Hierarchical secrets management uses a path like service/environment/key to organize entries. This structure enables you to systematically list, show, insert, generate, and remove specific credentials within the GPG-encrypted password store.

Can I generate strong passwords and remove outdated secrets with pass?▼

Yes, pass supports generating strong passwords and removing outdated entries. You can create new secure credentials and delete expired tokens, keeping your GPG-encrypted password store clean and audited across development and cloud workflows.

What are the limitations of using a local password store for cloud workflows?▼

A local password store for cloud workflows requires the pass CLI and GPG keys on each executing machine. You must synchronize the encrypted store manually across distributed CI pipelines to ensure consistent credential retrieval.