Another option is "
pass: the standard unix password manager", which encrypts all password files with
It's an open source project, so you don't have to trust a company with your password data, which perhaps makes this preferable to the other two answers that have been suggested so far. Given that the encryption is done with
gpg—a pretty widely-used open source tool for encryption—it's likely that the passwords will be pretty safe.
gpg-encrypted files can be stored offline, as requested by the OP. However, since the files are encrypted with
gpg you can probably safely put the binary files online somewhere, so long as you take the necessary steps to protect your
gpg key that decrypts the passwords.1
Passwords that are tracked by
pass are stored in
~/.password-store, which is, by default, a
git repository. Since the files are encrypted with
gpg and can only be decrypted with your key, one thing you can do—if you want to—is add a
git remote that is hosted on some cloud service, like GitHub or Bitbucket. I personally keep my
~/.password-store directory in a private repo on Bitbucket (since Bitbucket has unlimited private repos, unlike GitHub). And I feel pretty safe with this setup, given that the files are encrypted and can only be decrypted with my
As far as autofill goes, there is a Firefox plugin that has been written by the community that uses
The community has also developed a cross-platform GUI app, an Android app, a Windows client, and an emacs package.
I suppose one reason to prefer some of the other answers is that they are probably more user-friendly, but I personally prefer
pass to any other options that I have come across for a Mac, since I don't have to trust companies and their closed-source password managers and since the encryption of the passwords is done with a widely-used open source encryption tool.
If the set up process seems intimidating, here is a blog post that walks you through the process.
- Here are two blog posts (1, 2) that detail good and safe ways to generate and protect your