cmdrmoozy / pwm Goto Github PK

View Code? Open in Web Editor NEW

1.0 2.0 0.0 867 KB

A simple password manager for Linux.

License: Other

Rust 99.36% Python 0.64%

pwm's Introduction

pwm

A simple password manager for Linux.

Inspired conceptually (although the implementation is completely independent) by pass and gopass.

Installing

Installation requires a working Rust installation. Rust is most easily installed with rustup:

curl https://sh.rustup.rs -sSf | sh

From HEAD

git clone https://github.com/CmdrMoozy/pwm.git
cd pwm
cargo install

Basic Usage

# Set a default repository path to avoid having to retype it, and initialize the repository:
pwm config -k default_repository -s $HOME/pwm_repository
pwm init

# Store a password:
pwm set personal/email

# List stored passwords:
pwm ls

# Retrieve a stored password:
pwm get personal/email

pwm's People

Contributors

Stargazers

Watchers

pwm's Issues

Implement `pwm import` which supports the same format as `pwm export`

As the title says.

Implement deleting stored passwords

As the title says.

Master password is required even for operations which don't decrypt like ls

We should ask for a key to the user's repository lazily, i.e., only when absolutely needed to complete the requested operation.

Use separate global configuration for debug builds

This makes development easier, by separating real release configuration from debug / development configuration

Confirm master password on repository initialization

As the title says.

Implement UI for managing repository access keys

Internally, pwm uses key wrapping to manage access to the encrypted data, so adding / removing keys is fairly easy to do. However, this functionality is not exposed in the UI.

Allow retrieval of pure binary keys

Currently, the user can store a purely binary file in pwm with "pwm pw -s -k $FILE foobar", but then if the user tries to retrieve it with "pwm pw foobar" an error will be returned stating that the file is not a UTF-8 encoded string.

Add Yubikey support

Retyping the repository key many times for consecutive commands is tedious. Add support for YubiKeys to mitigate this.

Probably this needs to be done either by storing a secret on the Yubikey via the personalization GUI (code), or by using the PGP type of scheme.

`pwm pw (nonexistent key)` produces unclear error message

With the current version, the error is ERROR: Input / output error: No such file or directory (os error 2) which doesn't clearly explain what went wrong.

Implement password generation

pwm should have the ability to generate passwords randomly. For some examples of other implementations, see pwgen, pass, and gopass

One key thing that would be useful is to be able to use a generated password as part of a multiline secret (e.g., to add both the username and password to the repository)

Improve command-line help information

In some cases, the structure of command parameters is counter-intuitive / unclear and should be improved. This may require changes to https://github.com/CmdrMoozy/bdrck/tree/master/bdrck_params.

Store usernames as well, or other arbitrary information

A couple of use cases are not well supported yet:

Storing usernames in addition to passwords. Currently this is supported by entering both as the "password" when storing using the interactive prompt.
Storing other arbitrary notes or information. Currently this is supported by using the "-k" flag to store an arbitrary input file.

Add a mechanism to update crypto configuration

Currently, there is no way to update a repository's crypto configuration (e.g., key derivation configuration)

No easy mechanism to bulk import data

For users who are already storing account information using some other system, importing large amounts of data is difficult (requires running many commands, and retyping the master password [which is ostensibly very long] many times).

cmdrmoozy / pwm Goto Github PK

pwm's Introduction

pwm

Installing

From HEAD

Basic Usage

pwm's People

Contributors

Stargazers

Watchers

pwm's Issues

Recommend Projects

Recommend Topics

Recommend Org