diff --git a/security/Makefile b/security/Makefile
index 6775b326c4b5..4bf99d3bc091 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1000,6 +1000,7 @@
     SUBDIR += py-paramiko
     SUBDIR += py-pass-audit
     SUBDIR += py-pass-git-helper
+    SUBDIR += py-passhole
     SUBDIR += py-passlib
     SUBDIR += py-pbkdf2
     SUBDIR += py-pem
diff --git a/security/py-passhole/Makefile b/security/py-passhole/Makefile
new file mode 100644
index 000000000000..f04e9d1684e3
--- /dev/null
+++ b/security/py-passhole/Makefile
@@ -0,0 +1,28 @@
+PORTNAME=	passhole
+DISTVERSION=	1.10.0
+CATEGORIES=	security python
+MASTER_SITES=	PYPI
+PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
+
+MAINTAINER=	DtxdF@disroot.org
+COMMENT=	Secure hole for your passwords (KeePass CLI)
+WWW=		https://pypi.org/project/passhole \
+		https://github.com/Evidlo/passhole
+
+LICENSE=	GPLv3
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}colorama>=0:devel/py-colorama@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}future>=0:devel/py-future@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pykeepass-cache>=0:security/py-pykeepass-cache@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pykeepass>=0:security/py-pykeepass@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pynput>=0:x11/py-pynput@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}pyotp>=0:security/py-pyotp@${PY_FLAVOR} \
+		${PYTHON_PKGNAMEPREFIX}qrcode>=0:textproc/py-qrcode@${PY_FLAVOR}
+
+USES=		python
+USE_PYTHON=	autoplist distutils
+
+NO_ARCH=	yes
+
+.include <bsd.port.mk>
diff --git a/security/py-passhole/distinfo b/security/py-passhole/distinfo
new file mode 100644
index 000000000000..b1651305de2e
--- /dev/null
+++ b/security/py-passhole/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1710386646
+SHA256 (passhole-1.10.0.tar.gz) = de937186a9a4c3cb4ed30541b999ee6bae0726b129c9e35200a88032c338a156
+SIZE (passhole-1.10.0.tar.gz) = 57522
diff --git a/security/py-passhole/pkg-descr b/security/py-passhole/pkg-descr
new file mode 100644
index 000000000000..4d67fb2ab40e
--- /dev/null
+++ b/security/py-passhole/pkg-descr
@@ -0,0 +1,13 @@
+passhole is a commandline password manager for KeePass inspired by
+pass.
+
+Features:
+
+* fill user/pass field in any application via keyboard shortcut
+* add, delete, move, edit, rename entries and groups
+* generate alphanumeric, symbolic, or correct horse battery staple style
+  passwords
+* temporarily cache database password (by default for 10 minutes)
+* multiple databases
+* supports KeePass v3 and v4 databases
+* supports TOTP