diff options
| -rw-r--r-- | README | 91 | ||||
| l--------- | pass | 1 | ||||
| -rwxr-xr-x | password-store.sh | 118 |
3 files changed, 210 insertions, 0 deletions
@@ -0,0 +1,91 @@ +====================== +Simple Password Store +by Jason Donenfeld + Jason@zx2c4.com +====================== + +This is a very simple password store that encrypts passwords using gpg and +places the encrypted password in a directory. It can generate new passwords +and keep track of old ones. + + +Usage: + pass --init gpg-id + Initialize new password storage and use gpg-id for encryption. + pass [--ls] + List passwords. + pass pass-name + Show existing password. + pass --insert [--multiline] pass-name + Insert new optionally multiline password. + pass --generate [--no-symbols] pass-name pass-length + Generate a new password of pass-length with optionally no symbols. + pass --remove pass-name + Remove existing password. + pass --help + Show help text. + +Examples: + + - Initialize password store: + + zx2c4@laptop ~ $ pass --init Jason@zx2c4.com + mkdir: created directory ‘/home/zx2c4/.password-store’ + Password store initialized for Jason@zx2c4.com. + + - List existing passwords in store: + + zx2c4@laptop ~ $ pass + ├── Business + │ ├── some-silly-business-site.com + │ └── another-business-site.net + ├── Email + │ ├── donenfeld.com + │ └── zx2c4.com + └── France + ├── bank + ├── freebox + └── mobilephone + + Alternatively, "pass --ls". + + - Show existing password: + + zx2c4@laptop ~ $ pass Email/zx2c4.com + sup3rh4x3rizmynam3 + + - Add password to store: + + zx2c4@laptop ~ $ pass --insert Business/cheese-whiz-factory + Enter password for Business/cheese-whiz-factory: omg so much cheese what am i gonna do + + Or, multiline passwords: + + zx2c4@laptop ~ $ pass --insert --multiline Business/cheese-whiz-factory + Enter contents of Business/cheese-whiz-factory and press Ctrl+D when finished: + + Hey this is my + awesome + multi + line + passworrrrrrrrd. + ^D + + - Generate new password: + + zx2c4@laptop ~ $ pass --generate Email/jasondonenfeld.com 15 + The generated password to Email/jasondonenfeld.com is: + $(-QF&Q=IN2nFBx + + Or, with no symbols: + + zx2c4@laptop ~ $ pass --generate --no-symbols Email/jasondonenfeld.com 12 + The generated password to Email/jasondonenfeld.com is: + YqFsMkBeO6di + + - Remove password from store: + + zx2c4@laptop ~ $ pass --remove Business/cheese-whiz-factory + rm: remove regular file ‘/home/zx2c4/.password-store/Business/cheese-whiz-factory.gpg’? y + removed ‘/home/zx2c4/.password-store/Business/cheese-whiz-factory.gpg’ + @@ -0,0 +1 @@ +password-store.sh
\ No newline at end of file diff --git a/password-store.sh b/password-store.sh new file mode 100755 index 0000000..76ef226 --- /dev/null +++ b/password-store.sh @@ -0,0 +1,118 @@ +#!/bin/sh + +umask 077 + +PREFIX="$HOME/.password-store" +ID="$PREFIX/.gpg-id" + +usage() { + cat <<_EOF +Password Store +by Jason Donenfeld + Jason@zx2c4.com + +Usage: + $0 --init gpg-id + Initialize new password storage and use gpg-id for encryption. + $0 [--ls] + List passwords. + $0 pass-name + Show existing password. + $0 --insert [--multiline] pass-name + Insert new optionally multiline password. + $0 --generate [--no-symbols] pass-name pass-length + Generate a new password of pass-length with optionally no symbols. + $0 --remove pass-name + Remove existing password. + $0 --help + Show this text. +_EOF +} + +if [[ $1 == "--init" ]]; then + if [[ $# -ne 2 ]]; then + echo "Usage: $0 $1 gpg-id" + exit 1 + fi + mkdir -v -p "$PREFIX" + echo "$2" > "$ID" + echo "Password store initialized for $2." + exit 0 +elif [[ $1 == "--help" ]]; then + usage +fi + +if ! [[ -f $ID ]]; then + echo "You must run:" + echo " $0 --init your-gpg-id" + echo "before you may use the password store." + echo + usage + exit 1 +else + ID="$(head -n 1 "$ID")" +fi + +if [[ $# -eq 0 ]] || [[ $1 == "--ls" ]]; then + tree "$PREFIX" | tail -n +2 | head -n -2 | sed 's/\(.*\)\.gpg$/\1/'; +elif [[ $1 == "--insert" ]]; then + if [[ $# -lt 2 ]]; then + echo "Usage: $0 $1 [--multiline] pass-name" + exit 1 + fi + ml=0 + if [[ $2 == "--multiline" ]]; then + shift + ml=1 + fi + mkdir -p -v "$PREFIX/$(dirname "$2")" + + if [[ $ml -eq 0 ]]; then + echo -n "Enter password for $2: " + head -n 1 | gpg -e -r "$ID" > "$PREFIX/$2.gpg" + else + echo "Enter contents of $2 and press Ctrl+D when finished:" + echo + cat | gpg -e -r "$ID" > "$PREFIX/$2.gpg" + fi +elif [[ $1 == "--generate" ]]; then + if [[ $# -lt 3 ]]; then + echo "Usage: $0 $1 [--no-symbols] pass-name pass-length" + exit 1 + fi + symbols="-y" + if [[ $2 == "--no-symbols" ]]; then + symbols="" + shift + fi + if ! [[ $3 =~ ^[0-9]+$ ]]; then + echo "pass-length \"$3\" must be a number." + exit 1 + fi + mkdir -p -v "$PREFIX/$(dirname "$2")" + pass="$(pwgen -s $symbols $3 1)" + echo $pass | gpg -e -r "$ID" > "$PREFIX/$2.gpg" + echo "The generated password to $2 is:" + echo "$pass" +elif [[ $1 == "--remove" ]]; then + if [[ $# -ne 2 ]]; then + echo "Usage: $0 $1 pass-name" + exit + fi + passfile="$PREFIX/$2.gpg" + if ! [[ -f $passfile ]]; then + echo "$2 is not in the password store." + exit 1 + fi + rm -i -v "$passfile" +elif [[ $# -eq 1 ]]; then + passfile="$PREFIX/$1.gpg" + if ! [[ -f $passfile ]]; then + echo "$1 is not in the password store." + exit 1 + fi + exec gpg -q -d "$passfile" +else + usage + exit 1 +fi |