1 .\" Copyright (c) 2021, 2022 Omar Polo <op@omarpolo.com>
2 .\"
3 .\" Permission to use, copy, modify, and distribute this software for any
4 .\" purpose with or without fee is hereby granted, provided that the above
5 .\" copyright notice and this permission notice appear in all copies.
6 .\"
7 .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
10 .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
12 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
13 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
14 .Dd Januaury 2, 2023
15 .Dt PLASS 1
16 .Os
17 .Sh NAME
18 .Nm plass
19 .Nd manage passwords
20 .Sh SYNOPSIS
21 .Nm
22 .Op Fl h
23 .Ar command
24 .Op Ar argument ...
25 .Sh DESCRIPTION
26 .Nm
27 is a simple password manager.
28 Passwords are stored as a directory tree where every password is a
29 file encrypted with
30 .Xr gpg 1 .
31 .Pp
32 A password store is a
33 .Xr got 1
34 repository with a worktree checked out at
35 .Pa ~/.password-store .
36 The only restriction is that a special file called
37 .Pa .gpg-id
38 containing the GPG recipient must exist in the root of the directory tree
39 for most
40 .Nm
41 commands to work.
42 .Pp
43 Password entries can be referenced using the path relative to the
44 store directory.
45 The file extension
46 .Dq \&.gpg
47 can be omitted.
48 .Pp
49 .Nm
50 provides global and command-specific options.
51 Global options must precede the command name, and are as follows:
52 .Bl -tag -width Ds
53 .It Fl h
54 Display usage information and exit immediately.
55 .El
56 .Pp
57 The following commands are available:
58 .Bl -tag -width Ds
59 .It Cm cat Ar entries ...
60 Decrypt and print the content of
61 .Ar entries
62 in the given order.
63 .It Cm find Op Ar pattern
64 Print the entries of the store one per line, optionally filtered by
65 the case-insensitive
66 .Ar pattern .
67 .It Cm mv Ar from Ar to
68 Rename a password entry, doesn't work with directories.
69 .Ar from
70 must exist and
71 .Ar to
72 mustn't.
73 .It Cm rm Ar entries ...
74 Remove the given
75 .Ar entries
76 from the store.
77 .It Cm tee Oo Fl q Oc Ar entry
78 Persist the data read from standard input into the store under the given
79 .Ar entry
80 name and then print it again on the standard output unless the
81 .Fl q
82 option is given.
83 .El
84 .Sh ENVIRONMENT
85 .Bl -tag -width Ds
86 .It Ev PLASS_GOT
87 Path to the
88 .Xr got 1
89 executable.
90 .It Ev PLASS_GPG
91 Path to the
92 .Xr gpg 1
93 executable.
94 .It Ev PLASS_STORE
95 Alternative path to the password store directory tree.
96 .El
97 .Sh FILES
98 .Bl -tag -width Ds
99 .It Pa ~/.password-store
100 Default password store.
101 .It Pa ~/.password-store/.gpg-id
102 File containing the GPG recipient used to encrypt the passwords.
103 .El
104 .Sh EXIT STATUS
105 .Ex -std
106 .Sh EXAMPLES
107 A got repository and password store can be initialized as follows:
108 .Bd -literal -offset indent
109 $ mkdir ~/.password-store
110 $ echo foo@example.com > ~/.password-store/.gpg-id
111 $ gotadmin init ~/git/pass.git
112 $ got import -r ~/git/pass.git -m 'initial import' ~/.password-store
113 $ got checkout -E ~/git/pass.git ~/.password-store
114 .Ed
115 .Pp
116 see
117 .Xr got 1
118 for more information.
119 .Pp
120 To migrate from
121 .Xr pass 1 ,
122 delete
123 .Pa ~/.password-store
124 and check out it again using
125 .Xr got 1 .
126 .Pp
127 Generate a random password and save it to the clipboard:
128 .Bd -literal -offset indent
129 $ pwg | plass tee entry/name | xsel -b
130 .Ed
131 .Pp
132 Display the entries matching
133 .Sq key
134 arranged comfortably for reading in a terminal window:
135 .Bd -literal -offset indent
136 $ plass find key | rs
137 .Ed
138 .Pp
139 Enable tab-completion of
140 .Nm
141 command names and entries in
142 .Xr ksh 1 :
143 .Bd -literal -offset indent
144 $ set -A complete_plass_1 -- cat find mv rm tee
145 $ set -A complete_plass -- $(plass find)
146 .Ed
147 .Sh SEE ALSO
148 .Xr got 1 ,
149 .Xr gpg 1 ,
150 .Xr pwg 1
151 .Sh HISTORY
152 .Nm
153 was heavily influenced by
154 .Xr pass 1
155 in the design, but it's a different implementation that prioritizes ease
156 of use and composability.
157 .Sh AUTHORS
158 .An -nosplit
159 The
160 .Nm
161 utility was written by
162 .An Omar Polo Aq Mt op@omarpolo.com .
163 .Sh CAVEATS
164 .Nm
165 .Cm find
166 output format isn't designed to handle files containing newlines.
167 Use
168 .Xr find 1
169 .Fl print0
170 or similar if it's a concern.
171 .Pp
172 .Nm
173 .Cm mv
174 is not able to move directory trees, only file entries.
175 .Pp
176 There isn't an
177 .Cm init
178 sub-command, the store initialization must be performed manually.