{"id":4624,"date":"2012-09-12T21:51:29","date_gmt":"2012-09-13T01:51:29","guid":{"rendered":"http:\/\/g33kinfo.com\/info\/?p=4624"},"modified":"2012-09-12T21:51:29","modified_gmt":"2012-09-13T01:51:29","slug":"pass","status":"publish","type":"post","link":"https:\/\/g33kinfo.com\/info\/pass\/","title":{"rendered":"Pass"},"content":{"rendered":"

From zx2c4.com<\/a><\/p>\n

Introducing\u00a0pass<\/h2>\n

Password management should be simple and follow\u00a0Unix philosophy<\/a>. With\u00a0pass, each password lives inside of a\u00a0gpg<\/a>\u00a0encrypted file whose filename is the title of the website or resource that requires the password. These encrypted files may be organized into meaningful folder hierarchies, copied from computer to computer, and, in general, manipulated using standard command line file management utilities.<\/p>\n

pass\u00a0makes managing these individual password files extremely easy. All passwords live in~\/.password-store<\/code> and\u00a0pass\u00a0provides some nice commands for adding, editing, generating, and retrieving passwords. It is a very short and simple shell script. It’s capable of temporarily putting passwords on your clipboard and tracking password changes using\u00a0git<\/a>.<\/p>\n

You can edit the password store using ordinary unix shell commands alongside the\u00a0pass command. There are no funky file formats or new paradigms to learn. There is bash completion so that you can simply hit tab to fill in names.<\/p>\n

The\u00a0pass\u00a0command is extensively documented in its\u00a0man page<\/a>.<\/p>\n

 
\n<\/p>\n

Using the password store<\/h3>\n

We can list all the existing passwords in the store:<\/p>\n

zx2c4@laptop ~ $ pass Password Store
\n|--- Business
\n| |---some-silly-business-site.com
\n| |---another-business-site.net
\n|--- Email
\n| |---donenfeld.com
\n| |---zx2c4.com
\n|--- France
\n |---bank
\n |---freebox
\n |---mobilephone
\n<\/code>
\n 
\n <\/p>\n

And we can show passwords too:<\/p>\n

zx2c4@laptop ~ $ pass Email\/zx2c4.com sup3rh4x3rizmynam3 <\/code>
\n 
\n <\/p>\n

Or copy them to the clipboard:<\/p>\n

zx2c4@laptop ~ $ pass -c Email\/zx2c4.com
\nCopied Email\/jason@zx2c4.com to clipboard.
\nWill clear in 45 seconds. <\/code>
\n <\/p>\n

There will be a nice password input dialog using the standard\u00a0gpg-agent\u00a0(which can be configured to stay authenticated for several minutes), since all passwords are encrypted.<\/p>\n

 <\/p>\n

We can add existing passwords to the store with\u00a0
\ninsert zx2c4@laptop ~ $ pass insert Business\/cheese-whiz-factory
\nEnter password for Business\/cheese-whiz-factory:
\nomg so much cheese what am i gonna do <\/code>
\n 
\n \n<\/p>\n

This also handles multiline passwords or other data with\u00a0–multiline\u00a0or\u00a0-m, and passwords can be edited in your default text editor using\u00a0
\npass edit pass-name<\/code><\/p>\n

 <\/p>\n

The utility can\u00a0generate\u00a0new passwords using the venerable\u00a0pwgen\u00a0utility internally:<\/p>\n

zx2c4@laptop ~ $ pass generate Email\/jasondonenfeld.com 15
\nThe generated password to Email\/jasondonenfeld.com is:
\n$(-QF&Q=IN2nFBx <\/code>
\n 
\n <\/p>\n

It’s possible to generate passwords with no symbols using\u00a0
\n–no-symbols\u00a0or\u00a0-n
\nand we can copy it to the clipboard instead of displaying it at the console using\u00a0
\n–clip\u00a0or\u00a0-c.\n<\/p>\n

 <\/p>\n

And of course, passwords can be removed:<\/p>\n

zx2c4@laptop ~ $ pass remove Business\/cheese-whiz-factory
\nrm: remove regular file \u2018\/home\/zx2c4\/.password-store\/Business\/cheese-whiz-factory.gpg\u2019? y
\nremoved \u2018\/home\/zx2c4\/.password-store\/Business\/cheese-whiz-factory.gpg\u2019 <\/code>
\n 
\n <\/p>\n

If the password store is a git repository, since each manipulation creates a git commit, you can synchronize the password store using\u00a0pass push\u00a0and\u00a0pass pull, which call\u00a0git-push\u00a0or git-pull\u00a0on the store.<\/p>\n

You can read more examples and more features in the\u00a0man page<\/a>.<\/p>\n

 
\n <\/p>\n

Setting it up<\/h3>\n

To begin, there is a single command to initialize the password store:<\/p>\n

zx2c4@laptop ~ $ pass init \"ZX2C4 Password Storage Key\"
\nmkdir: created directory \u2018\/home\/zx2c4\/.password-store\u2019
\nPassword store initialized for ZX2C4 Password Storage Key. <\/code>
\n <\/p>\n

Here,\u00a0ZX2C4 Password Storage Key\u00a0is the ID of my GPG key. You can use your standard GPG key or use an alternative one especially for the password store as shown above. We can additionally initialize the password store as a git repository:<\/p>\n

zx2c4@laptop ~ $ pass git init
\nInitialized empty Git repository in \/home\/zx2c4\/.password-store\/.git\/
\nzx2c4@laptop ~ $ pass git remote add origin kexec.com:pass-store <\/code>
\n <\/p>\n

If a git repository is initialized,\u00a0pass\u00a0creates a git commit each time the password store is manipulated. There is a more\u00a0detailed initialization example<\/a>\u00a0in the\u00a0man page<\/a>.<\/p>\n

 <\/p>\n

Download<\/h2>\n

The latest version is 1.2.<\/p>\n

Ubuntu \/ Debian<\/h3>\n


\n$ sudo apt-get install gnupg git-core pwgen tree xclip
\n$ wget http:\/\/zx2c4.com\/projects\/password-store\/dist\/pass_1.2-1_all.deb
\n$ sudo dpkg -i pass_1.2-1_all.deb
\n$ echo \"source \/etc\/bash_completion.d\/password-store\" >> ~\/.bashrc
\n$ rm -f pass_1.2-1_all.deb
\n<\/code><\/p>\n

A gpg signature is available\u00a0here. If you’re in a position to add this to the official Ubuntu repositories, please\u00a0contact me<\/a>.<\/p>\n

 <\/p>\n

Fedora \/ RHEL \/ CentOS \/ OpenSUSE \/ Mageia<\/h3>\n

$ sudo yum install http:\/\/zx2c4.com\/projects\/password-store\/dist\/pass-1.1.4-1.fc17.noarch.rpm
\n$ echo \"source \/etc\/bash_completion.d\/password-store\" >> ~\/.bashrc<\/code><\/p>\n

A gpg signature is available\u00a0here.<\/p>\n

 <\/p>\n

Gentoo<\/h3>\n

The password store currently lives in the\u00a0zx2c4\u00a0overlay, which you can get using\u00a0layman<\/a>:<\/p>\n

# layman -a zx2c4
\n# emerge -av pass
\n# eselect bashcomp enable --global pass <\/code>
\n <\/p>\n

Arch<\/h3>\n

The password store currently lives in AUR, which you can fetch with\u00a0packer:<\/p>\n

$ packer -S pass
\n$ echo \"source \/etc\/bash_completion.d\/password-store\" >> ~\/.bashrc<\/code>
\n <\/p>\n

Macintosh<\/h3>\n

The password store is available through the\u00a0Homebrew package manager<\/a>:<\/p>\n

$ brew install pass
\n$ echo \"source \/usr\/local\/etc\/bash_completion.d\/password-store\" >> ~\/.bashrc<\/code>
\n <\/p>\n

Tarball<\/h3>\n