The original pass seems to handle binary data fine: $ pass insert -m mybinarysecret <secret.png $ pass show mybinarysecret >secret.png Admittedly, it'

The original pass seems to handle binary data fine: $ pass insert -m mybinarysecret <secret.png $ pass show mybinarysecret >secret.png Admittedly, it's not very user-friendly, but some simple wrapper scripts could fix that.