plass

Omar Polo's password manager, a reimplementation of pass (password-store) with a smaller and cleaner interface. The absence of trees and colored output is positioned as a feature — a stricter take on the UNIX philosophy of "do one thing well." Compatible with pass today, with the option of switching away from gpg as the encryption tool in the future.

How it works

• Each password lives in a gpg(1)-encrypted file under ~/.password-store.
• The directory is a got(1) repository — got is the BSD-licensed VCS used in the OpenBSD ecosystem in place of git. This tracks changes, recovers accidental overwrites, and synchronizes across devices.
• Three companion tools:
  • plass(1) — manage passwords
  • pwg(1) — password generator
  • totp(1) — time-based one-time password generator

Why it exists

Most pass-flavored tools accumulate features over time. plass sits at the other end — fewer features, fewer dependencies, and an explicit choice of got instead of git so the entire toolchain fits inside the OpenBSD ecosystem. This is the same author who wrote gmid, telescope, and other small OpenBSD-shaped tools.

Install

$ ftp https://ftp.omarpolo.com/plass-1.0.tar.gz
$ tar xzvf plass-1.0.tar.gz
$ cd plass-1.0
$ make
$ doas make install

Or fetch via git from the project page.

Where it sits

Adjacent to marius-bitwarden-not-recommended and the credential-compartmentalization thread — plass is the explicit "small, single-purpose, audit-friendly tool" answer to vault-scope-creep concerns. Compatible-with-pass plus a vendor-independent VCS (got) means migration in or out is mechanical.

Source: plass project page