git-credential-manager

Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. It aims to provide a consistent and secure authentication experience, including multi-factor authentication, to every major source control hosting service and platform. GCM supports Azure DevOps (including Azure DevOps Server / TFS), Bitbucket (Cloud and Data Center), GitHub (including GitHub Enterprise Server), and GitLab. Compared to Git's built-in credential helpers (wincred on Windows, osxkeychain on macOS, gnome-keyring/libsecret on Linux), which only provide single-factor username/password authentication, GCM adds support for modern authentication flows such as OAuth and multi-factor authentication. GCM replaces both the .NET Framework-based Git Credential Manager for Windows and the Java-based Git Credential Manager for Mac and Linux, unifying the experience across platforms. Key features include: - Secure platform credential storage on all supported operating systems - Entra authentication with broker support on Windows (opt-in) - Windows Integrated Authentication (NTLM/Kerberos) on Windows - Generic OAuth authentication across all platforms - Basic HTTP authentication - Network proxy support - Support for amd64, x86 (Windows only), arm64, and armhf (Linux only) architectures Supported environments: - Windows 10 and later, including Windows Server 2016 and later (Windows 7 and 8.x are no longer supported as of GCM 3.x) - macOS 14 and later - Linux distributions officially supported by .NET - WSL support is available GCM is called implicitly by Git and is not intended to be invoked directly by users. When pushing to a supported Git host, a sign-in window automatically opens and walks the user through the authentication process. Subsequent Git commands in the same repository reuse stored credentials or tokens as long as they remain valid. The project is MIT licensed and welcomes contributions. It follows GitHub's Open Source Code of Conduct.