SE Pass — a Secure Enclave client for pass on iOS

SE Pass is an iOS client for the standard Unix password manager,<br>pass (sometimes also<br>referred to as “GNU pass” or “password-store”). It's intended to<br>let a user do three things:

Generate a GPG keypair inside your device's Secure Enclave. The private<br>key is created in the enclave and can never leave the device. SE Pass exports<br>the matching GPG public key for you to add to your password<br>store as an additional encryption key.

Sync your password store via git to your<br>device. You can clone and refresh over HTTPS (public or token) or SSH<br>(with a separate enclave key for ssh authentication).

Browse the password tree and decrypt passwords on demand. Decryption<br>runs in the Secure Enclave, gated by biometrics (Face ID or Touch<br>ID). The clipboard then clears itself automatically after 45<br>seconds.

SE Pass has no account, sends nothing to us (Modiot Labs), and uses no analytics<br>or tracking. It talks only to the git server you configure. It’s<br>intended to be a relatively focused app to enable access to your<br>existing password store on your portable device.

Getting started

SE Pass is intended for use by people who already run pass on<br>their desktop(s). You add the app’s exported public key to your store’s recipients,<br>re-encrypt, and push. Your device then clones the password store<br>repo. Full instructions and source are on GitHub.

github.com/modiotlabs/sepass →

Free & open source

SE Pass is free software, released under the<br>GNU General Public License,<br>version 3.