commit 193d72299b2532081fdb0caf35f7d60d61f4b858
Author: Jason A. Donenfeld <Jason@zx2c4.com>
Date: Mon, 23 Jul 2012 16:51:03 +0200
Initial commit.
Diffstat:
| A | README | | | 91 | +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ |
| A | pass | | | 2 | ++ |
| A | password-store.sh | | | 118 | +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ |
3 files changed, 211 insertions(+), 0 deletions(-)
diff --git a/README b/README
@@ -0,0 +1,91 @@
+======================
+Simple Password Store
+by Jason Donenfeld
+ Jason@zx2c4.com
+======================
+
+This is a very simple password store that encrypts passwords using gpg and
+places the encrypted password in a directory. It can generate new passwords
+and keep track of old ones.
+
+
+Usage:
+ pass --init gpg-id
+ Initialize new password storage and use gpg-id for encryption.
+ pass [--ls]
+ List passwords.
+ pass pass-name
+ Show existing password.
+ pass --insert [--multiline] pass-name
+ Insert new optionally multiline password.
+ pass --generate [--no-symbols] pass-name pass-length
+ Generate a new password of pass-length with optionally no symbols.
+ pass --remove pass-name
+ Remove existing password.
+ pass --help
+ Show help text.
+
+Examples:
+
+ - Initialize password store:
+
+ zx2c4@laptop ~ $ pass --init Jason@zx2c4.com
+ mkdir: created directory ‘/home/zx2c4/.password-store’
+ Password store initialized for Jason@zx2c4.com.
+
+ - List existing passwords in store:
+
+ zx2c4@laptop ~ $ pass
+ ├── Business
+ │ ├── some-silly-business-site.com
+ │ └── another-business-site.net
+ ├── Email
+ │ ├── donenfeld.com
+ │ └── zx2c4.com
+ └── France
+ ├── bank
+ ├── freebox
+ └── mobilephone
+
+ Alternatively, "pass --ls".
+
+ - Show existing password:
+
+ zx2c4@laptop ~ $ pass Email/zx2c4.com
+ sup3rh4x3rizmynam3
+
+ - Add password to store:
+
+ zx2c4@laptop ~ $ pass --insert Business/cheese-whiz-factory
+ Enter password for Business/cheese-whiz-factory: omg so much cheese what am i gonna do
+
+ Or, multiline passwords:
+
+ zx2c4@laptop ~ $ pass --insert --multiline Business/cheese-whiz-factory
+ Enter contents of Business/cheese-whiz-factory and press Ctrl+D when finished:
+
+ Hey this is my
+ awesome
+ multi
+ line
+ passworrrrrrrrd.
+ ^D
+
+ - Generate new password:
+
+ zx2c4@laptop ~ $ pass --generate Email/jasondonenfeld.com 15
+ The generated password to Email/jasondonenfeld.com is:
+ $(-QF&Q=IN2nFBx
+
+ Or, with no symbols:
+
+ zx2c4@laptop ~ $ pass --generate --no-symbols Email/jasondonenfeld.com 12
+ The generated password to Email/jasondonenfeld.com is:
+ YqFsMkBeO6di
+
+ - Remove password from store:
+
+ zx2c4@laptop ~ $ pass --remove Business/cheese-whiz-factory
+ rm: remove regular file ‘/home/zx2c4/.password-store/Business/cheese-whiz-factory.gpg’? y
+ removed ‘/home/zx2c4/.password-store/Business/cheese-whiz-factory.gpg’
+
diff --git a/pass b/pass
@@ -0,0 +1 @@
+password-store.sh
+\ No newline at end of file
diff --git a/password-store.sh b/password-store.sh
@@ -0,0 +1,118 @@
+#!/bin/sh
+
+umask 077
+
+PREFIX="$HOME/.password-store"
+ID="$PREFIX/.gpg-id"
+
+usage() {
+ cat <<_EOF
+Password Store
+by Jason Donenfeld
+ Jason@zx2c4.com
+
+Usage:
+ $0 --init gpg-id
+ Initialize new password storage and use gpg-id for encryption.
+ $0 [--ls]
+ List passwords.
+ $0 pass-name
+ Show existing password.
+ $0 --insert [--multiline] pass-name
+ Insert new optionally multiline password.
+ $0 --generate [--no-symbols] pass-name pass-length
+ Generate a new password of pass-length with optionally no symbols.
+ $0 --remove pass-name
+ Remove existing password.
+ $0 --help
+ Show this text.
+_EOF
+}
+
+if [[ $1 == "--init" ]]; then
+ if [[ $# -ne 2 ]]; then
+ echo "Usage: $0 $1 gpg-id"
+ exit 1
+ fi
+ mkdir -v -p "$PREFIX"
+ echo "$2" > "$ID"
+ echo "Password store initialized for $2."
+ exit 0
+elif [[ $1 == "--help" ]]; then
+ usage
+fi
+
+if ! [[ -f $ID ]]; then
+ echo "You must run:"
+ echo " $0 --init your-gpg-id"
+ echo "before you may use the password store."
+ echo
+ usage
+ exit 1
+else
+ ID="$(head -n 1 "$ID")"
+fi
+
+if [[ $# -eq 0 ]] || [[ $1 == "--ls" ]]; then
+ tree "$PREFIX" | tail -n +2 | head -n -2 | sed 's/\(.*\)\.gpg$/\1/';
+elif [[ $1 == "--insert" ]]; then
+ if [[ $# -lt 2 ]]; then
+ echo "Usage: $0 $1 [--multiline] pass-name"
+ exit 1
+ fi
+ ml=0
+ if [[ $2 == "--multiline" ]]; then
+ shift
+ ml=1
+ fi
+ mkdir -p -v "$PREFIX/$(dirname "$2")"
+
+ if [[ $ml -eq 0 ]]; then
+ echo -n "Enter password for $2: "
+ head -n 1 | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+ else
+ echo "Enter contents of $2 and press Ctrl+D when finished:"
+ echo
+ cat | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+ fi
+elif [[ $1 == "--generate" ]]; then
+ if [[ $# -lt 3 ]]; then
+ echo "Usage: $0 $1 [--no-symbols] pass-name pass-length"
+ exit 1
+ fi
+ symbols="-y"
+ if [[ $2 == "--no-symbols" ]]; then
+ symbols=""
+ shift
+ fi
+ if ! [[ $3 =~ ^[0-9]+$ ]]; then
+ echo "pass-length \"$3\" must be a number."
+ exit 1
+ fi
+ mkdir -p -v "$PREFIX/$(dirname "$2")"
+ pass="$(pwgen -s $symbols $3 1)"
+ echo $pass | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+ echo "The generated password to $2 is:"
+ echo "$pass"
+elif [[ $1 == "--remove" ]]; then
+ if [[ $# -ne 2 ]]; then
+ echo "Usage: $0 $1 pass-name"
+ exit
+ fi
+ passfile="$PREFIX/$2.gpg"
+ if ! [[ -f $passfile ]]; then
+ echo "$2 is not in the password store."
+ exit 1
+ fi
+ rm -i -v "$passfile"
+elif [[ $# -eq 1 ]]; then
+ passfile="$PREFIX/$1.gpg"
+ if ! [[ -f $passfile ]]; then
+ echo "$1 is not in the password store."
+ exit 1
+ fi
+ exec gpg -q -d "$passfile"
+else
+ usage
+ exit 1
+fi
