1 .\" Copyright (c) 2021, 2022 Omar Polo <op@omarpolo.com>
2 .\"
3 .\" Permission to use, copy, modify, and distribute this software for any
4 .\" purpose with or without fee is hereby granted, provided that the above
5 .\" copyright notice and this permission notice appear in all copies.
6 .\"
7 .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
10 .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
12 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
13 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
14 .Dd October 1, 2022
15 .Dt PLASS 1
16 .Os
17 .Sh NAME
18 .Nm plass
19 .Nd manage passwords
20 .Sh SYNOPSIS
21 .Nm
22 .Op Fl h
23 .Ar command
24 .Op Ar argument ...
25 .Sh DESCRIPTION
26 .Nm
27 is a simple password manager.
28 Passwords are stored as a directory tree where every password is a
29 file encrypted with
30 .Xr gpg 1 .
31 .Pp
32 A password store is a
33 .Xr got 1
34 repository with a worktree checked out at
35 .Pa ~/.password-store
36 .Pq or Ev PLASS_STORE .
37 The only restriction is that a special file called
38 .Pa .gpg-id
39 containing the GPG recipient must exist in the root of the directory tree
40 for most
41 .Nm
42 commands to work.
43 .Pp
44 Password entries can be referenced using the path relative to the
45 store directory.
46 The file extension
47 .Dq \&.gpg
48 is optional.
49 .Pp
50 The following commands are available:
51 .Bl -tag -width Ds
52 .It Cm cat Ar entries ...
53 Decrypt and print the content of
54 .Ar entries
55 in the given order.
56 .It Cm find Op Ar pattern
57 Print the entries of the store one per line, optionally filtered by
58 .Ar pattern .
59 .It Cm gen Oo Fl nq Oc Oo Fl c Ar chars Oc Oo Fl l Ar length Oc Ar entry
60 Generate and persist a password for the given
61 .Ar entry
62 in the store.
63 .Fl c
64 can be used to control the characters allowed in the password
65 (by default
66 .Dq !-~
67 i.e. all the printable ASCII characters)
68 and
69 .Fl l
70 the length
71 .Pq 32 by default .
72 Unless the
73 .Fl q
74 flag is provided, print the generated password.
75 If the
76 .Fl n
77 flag is given the password won't be persisted and the
78 .Ar entry
79 argument is optional.
80 .It Cm mv Ar from Ar to
81 Rename a password entry, doesn't work with directories.
82 .Ar from
83 must exist and
84 .Ar to
85 mustn't.
86 .It Cm rm Ar entries ...
87 Remove the given
88 .Ar entries
89 from the store.
90 .It Cm tee Oo Fl q Oc Ar entry
91 Prompt for a password and persist it into the store under the given
92 .Ar entry
93 name and the print it again on the standard output unless the
94 .Fl q
95 option is given.
96 .El
97 .Sh ENVIRONMENT
98 .Bl -tag -width Ds
99 .It Ev PLASS_CHARS
100 default range of characters to use to generate passwords.
101 .It Ev PLASS_GOT
102 Path to the
103 .Xr got 1
104 executable.
105 .It Ev PLASS_GPG
106 Path to the
107 .Xr gpg 1
108 executable.
109 .It Ev PLASS_LENGTH
110 Default length for the generated passwords.
111 .It Ev PLASS_STORE
112 Path to the password store directory tree.
113 .El
114 .Sh FILES
115 .Bl -tag -width Ds
116 .It Pa ~/.password-store
117 Password store used by default.
118 .It Pa ~/.password-store/.gpg-id
119 File containing the GPG recipient used to encrypt the passwords.
120 .El
121 .Sh EXAMPLES
122 A got repository and password store can be initialized as follows:
123 .Bd -literal -offset indent
124 $ mkdir ~/.password-store
125 $ echo foo@example.com > ~/.password-store/.gpg-id
126 $ gotadmin init ~/git/pass.git
127 $ got import -r ~/git/pass.git -m 'initial import' ~/.password-store
128 $ got checkout -E ~/git/pass.git ~/.password-store
129 .Ed
130 .Pp
131 see
132 .Xr got 1
133 for more information.
134 .Pp
135 To migrate from
136 .Xr pass 1 ,
137 delete
138 .Pa ~/.password-store
139 and check out it again using
140 .Xr got 1 .
141 .Pp
142 To generate a temporary random password use
143 .Bd -literal -offset indent
144 $ plass gen -n
145 .Ed
146 .Sh SEE ALSO
147 .Xr got 1 ,
148 .Xr gpg 1 ,
149 .Xr pass 1
150 .Sh HISTORY
151 .Nm
152 was heavily influenced by
153 .Xr pass 1
154 in the design, but it's a different implementation that prioritizes ease
155 of use and composability.
156 .Sh AUTHORS
157 .An -nosplit
158 The
159 .Nm
160 utility was written by
161 .An Omar Polo Aq Mt op@omarpolo.com .
162 .Sh CAVEATS
163 .Nm
164 .Cm find
165 output format isn't designed to handle files containing newlines.
166 Use
167 .Xr find 1
168 .Fl print0
169 or similar if it's a concern.
170 .Pp
171 .Nm
172 .Cm mv
173 is not able to move directory trees, only file entries.
174 .Pp
175 There isn't a
176 .Cm init
177 sub-command, the store initialization must be performed manually.