kure

kure command [options]

kure is a CLI password manager that emphasizes security and privacy by reducing the attack surface to its minimum. It works completely offline with no third-party connections. Each record is encrypted using AES-GCM 256-bit with a unique password derived using Argon2id.
The master password is never stored on disk — it is encrypted and temporarily held in a protected memory buffer that is destroyed immediately after use. Sessions allow running multiple commands by entering the master password only once, with configurable timeouts and custom scripts.

Completely offline — no built-in sync across devices. The database file must be manually transferred between systems. Losing the master password means permanent loss of stored data.

kure was created by GGP1 and is written in Go. It supports Linux, macOS, BSD, Windows, and mobile platforms.

pass(1), gopass(1)