diff --git a/shell-completion/bash/meson.build b/shell-completion/bash/meson.build
index 91635df74a5..59c2e2ef40c 100644
--- a/shell-completion/bash/meson.build
+++ b/shell-completion/bash/meson.build
@@ -24,6 +24,7 @@ items = [['busctl',              ''],
          ['systemd-cat',         ''],
          ['systemd-cgls',        ''],
          ['systemd-cgtop',       ''],
+         ['systemd-creds',       ''],
          ['systemd-delta',       ''],
          ['systemd-detect-virt', ''],
          ['systemd-id128',       ''],
diff --git a/shell-completion/bash/systemd-creds b/shell-completion/bash/systemd-creds
new file mode 100644
index 00000000000..310106b936e
--- /dev/null
+++ b/shell-completion/bash/systemd-creds
@@ -0,0 +1,185 @@
+# shellcheck shell=bash
+# systemd-creds(1) completion                   -*- shell-script -*-
+# SPDX-License-Identifier: LGPL-2.1-or-later
+#
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+#
+# systemd is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with systemd; If not, see <https://www.gnu.org/licenses/>.
+
+__contains_word() {
+    local w word=$1; shift
+    for w in "$@"; do
+        [[ $w = "$word" ]] && return
+    done
+}
+
+__get_tpm2_devices() {
+    local i
+    for i in /dev/tpmrm*; do
+        [ -c "$i" ] && printf '%s\n' "$i"
+    done
+}
+
+__get_creds() {
+    local a b c
+    local mode=$1; shift 1
+    systemd-creds list $mode --no-legend --no-pager $1 2>/dev/null | \
+        { while read -r a b c; do echo " $a"; done }
+}
+
+_systemd_creds() {
+    local verb comps mode i
+    local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]} words cword
+    local -A OPTS=(
+        [STANDALONE]='-h --help --version --no-pager --no-legend
+                      -H -T --system --user -p --pretty --allow-null'
+        [ARG]='--tpm2-device
+               --tpm2-device-key
+               --tpm2-pcrs
+               --tpm2-public-key
+               --tpm2-public-key-pcrs
+               --tpm2-signature
+               --json
+               --transcode
+               --newline
+               --name
+               --timestamp
+               --not-after
+               --with-key
+               --uid'
+    )
+
+    local -A VERBS=(
+        [STANDALONE]='list setup'
+        [CAT]='cat'
+        [ENCRYPT]='encrypt'
+        [DECRYPT]='decrypt'
+    )
+
+    local -A OPTS_FOR_VERB=(
+        [CAT]='--help
+               --version
+               --no-pager
+               --no-legend
+               --user
+               --system'
+        [ENCRYPT]='--help
+                   --version
+                   --no-pager
+                   --no-legend
+                   --uid
+                   --with-key
+                   -H
+                   -T
+                   --tpm2-device
+                   --tpm2-pcrs
+                   --tpm2-public-key
+                   --tpm2-public-key-pcrs
+                   --tpm2-signature
+                   --not-after
+                   --name
+                   --timestamp
+                   --pretty'
+        [DECRYPT]='--help
+                   --version
+                   --no-pager
+                   --no-legend
+                   --uid
+                   --tpm2-device
+                   --tpm2-pcrs
+                   --tpm2-public-key
+                   --tpm2-public-key-pcrs
+                   --tpm2-signature
+                   --name
+                   --timestamp
+                   --allow-null'
+    )
+
+    _init_completion || return
+
+    if __contains_word "--user" ${COMP_WORDS[*]}; then
+        mode=--user
+    elif __contains_word "--system" ${COMP_WORDS[*]}; then
+        mode=--system
+    else
+        mode=''
+    fi
+
+    if __contains_word "$prev" ${OPTS[ARG]}; then
+        case $prev in
+            --tpm2-public-key|--tpm2-signature)
+                comps=$(compgen -A file -- "$cur")
+                compopt -o filenames
+                ;;
+            --tpm2-device)
+                comps="auto list $(__get_tpm2_devices)"
+                ;;
+            --json)
+                comps=$( systemd-creds --json=help 2>/dev/null )
+                ;;
+            --transcode)
+                comps='base64 unbase64 hex unhex'
+                ;;
+            --with-key)
+                comps='host tpm2 host+tpm2 null auto auto-initrd'
+                ;;
+        esac
+        COMPREPLY=( $(compgen -W '$comps' -- "$cur") )
+        return 0
+    fi
+
+    if [[ -z ${verb-} && "$cur" = -* ]]; then
+        COMPREPLY=( $(compgen -W '${OPTS[*]}' -- "$cur") )
+        return 0
+    fi
+
+    for ((i=0; i < COMP_CWORD; i++)); do
+        if __contains_word "${COMP_WORDS[i]}" ${VERBS[*]} &&
+                ! __contains_word "${COMP_WORDS[i-1]}" ${OPTS[ARG]}; then
+            verb=${COMP_WORDS[i]}
+            break
+        fi
+    done
+
+    if [[ -z ${verb-} ]]; then
+        comps=${VERBS[*]}
+    elif __contains_word "$verb" ${VERBS[STANDALONE]}; then
+        comps=''
+    elif __contains_word "$verb" ${VERBS[CAT]}; then
+        if [[ $cur = -* ]]; then
+            comps=${OPTS_FOR_VERB[CAT]}
+        else
+            comps=$( __get_creds $mode )
+        fi
+    elif __contains_word "$verb" ${VERBS[ENCRYPT]}; then
+        if [[ $cur = -* ]]; then
+            comps=${OPTS_FOR_VERB[ENCRYPT]}
+        else
+            comps=$( compgen -A file -- "$cur" )
+            compopt -o filenames
+        fi
+    elif __contains_word "$verb" ${VERBS[DECRYPT]}; then
+        if [[ $cur = -* ]]; then
+            comps=${OPTS_FOR_VERB[DECRYPT]}
+        else
+            comps=$( compgen -A file -- "$cur" )
+            compopt -o filenames
+        fi
+    fi
+
+    COMPREPLY=( $(compgen -W '${comps-}' -- "$cur") )
+    return 0
+}
+
+complete -F _systemd_creds systemd-creds