Credential storage options in Git - Commands & Configuration

Introduction

When you use Git to work with remote repositories, you often need to enter your username and password. Credential storage options help you save these details securely so you don't have to type them every time.

When you want to avoid typing your Git username and password repeatedly for the same remote repository.

When you work on a personal computer and want Git to remember your credentials safely.

When you use HTTPS URLs for Git remotes and want to speed up your workflow.

When you want to store credentials temporarily during a session without saving them permanently.

When you want to use a system's secure storage to keep your Git credentials safe.

Commands

This command tells Git to cache your credentials in memory for 15 minutes by default. It helps avoid typing your password repeatedly during short sessions.

Terminal

git config --global credential.helper cache

Expected Output

No output (command runs silently)

→

--global - Applies the setting for the current user across all repositories.

This sets Git to cache your credentials in memory for 3600 seconds (1 hour), so you won't need to re-enter them during that time.

Terminal

git config --global credential.helper 'cache --timeout=3600'

Expected Output

No output (command runs silently)

→

--timeout=3600 - Sets the cache duration to 3600 seconds.

This command saves your credentials permanently in a plain text file in your home directory. Use it only on secure personal machines.

Terminal

git config --global credential.helper store

Expected Output

No output (command runs silently)

On macOS, this command tells Git to use the system's Keychain to store your credentials securely.

Terminal

git config --global credential.helper osxkeychain

Expected Output

No output (command runs silently)

On Windows, this command configures Git to use the Windows Credential Manager to save your credentials safely.

Terminal

git config --global credential.helper wincred

Expected Output

No output (command runs silently)

Key Concept

If you remember nothing else from this pattern, remember: Git can save your credentials temporarily or permanently using different helpers to make your workflow easier and more secure.

Common Mistakes

Using 'git config credential.helper store' on a shared or public computer.

This saves credentials in plain text, which can be read by others and cause security risks.

Use 'cache' for temporary storage or system-specific secure helpers like 'osxkeychain' or 'wincred' on shared machines.

Not specifying --global flag and expecting credentials to be saved for all repositories.

Without --global, the setting applies only to the current repository, causing confusion when credentials are not remembered elsewhere.

Always add --global to apply credential helper settings for all repositories of the user.

Forgetting to install system helpers like 'osxkeychain' or 'wincred' before configuring them.

Git will fail to use the helper if it is not installed, so credentials won't be saved as expected.

Install the required helper tools before configuring Git to use them.

Summary

Use 'git config --global credential.helper cache' to save credentials temporarily in memory.

Use 'git config --global credential.helper store' to save credentials permanently in plain text (use carefully).

Use system-specific helpers like 'osxkeychain' on macOS or 'wincred' on Windows for secure credential storage.