Passpie lets you manage login credentials from the terminal with a coloroful/configurable cli interface. Password files are saved into yaml text files with passwords as GnuPG encrypted strings. Use your master passphrase to decrypt login credentials, copy passwords to clipboard and more...

Passpie is built with Click and Tabulate for its interface, TinyDB for its database and python-gnupg for its encryption using gpg. Passpie is also inspired by great cli applications like git and httpie

• Console interface
• Manage multiple databases
• Add, update, remove credentials
• Copy passwords to clipboard
• List credentials as a table
• List credentials with a colored output
• Search credentials by name, login or comments
• Search with regular expression
• Group credentials by name
• Configuration from file. ~/.passpie
• Change passphrase and re-encrypt database
• Export Passpie database to plain text file
• Import plain text Passpie database
• Import credentials from Pysswords
• Randomly generated credential passwords
• Configurable random password generation
• Generate database status report
• Bulk remove credentials
• Bash/Zsh completion

Planned features:

• Undo/Redo updates to the database
• Bulk update credentials
• Import plain text credentials from Keepass
• Import plain text credentials from 1Password

# initialize a passpie database
passpie init

# add some credentials
passpie add foo@example.com
passpie add bar@example.com

# add some credential with random passwords
passpie add bar@github.com --random
passpie add spam@egg --random
passpie add foo@github.com --random
passpie add bar@github.com --random

# add spam@egg with random password and copy to clipboard
passpie add spam@egg.local --random --copy

# edit credential "foo@example.com"
passpie update foo@example.com

# copy password from credential "foo@example.com" to clipboard
passpie copy foo@example.com

# search credentials by string "exam"
passpie search exam

# search credentials using regular expressions
passpie search 'foo|bar'

# remove some credentials
passpie remove foo@example.com
passpie remove foo@github.com

# check database status
passpie status

# print all credentials as a table with hidden passwords
passpie

# shows help. Option `--help`
passpie --help

• [Linux, OSX, Windows] GnuPG
• [Linux] xclip or xsel

pip install passpie

brew tap marcwebbie/passpie
brew install passpie

The latest development version can be installed directly from GitHub:

pip install --upgrade https://github.com/marcwebbie/passpie/tarball/master

Passpie credentials are referenced by fullname. fullname syntax handles login and name for credentials in one go for faster adding and querying of credentials.

Fullnames are composed of login@name. Login is optional. If you don't pass any login when adding new credentials, credential login will be replaced by a _ character:

passpie add @banks/mybank --password 1234
passpie add @banks/myotherbank --password 5678

Listing credentials:

$ passpie
=================  =======  ==========  =========
Name               Login    Password    Comment
=================  =======  ==========  =========
banks/mybank       _        *****
banks/myotherbank  _        *****
=================  =======  ==========  =========

Since login is optional. You can query credentials using only name syntax, for example to update credential @banks/mybank:

passpie update @banks/mybank --random

Or even better, without using the @ notation:

passpie update banks/mybank --random

With default path ~/.passpie and a Dropbox shared directory on path ~/Dropbox

mv ~/.passpie ~/Dropbox/passpie    # move passpie db to Dropbox
ln -s ~/Dropbox/passpie ~/.passpie # make a link to the db

With default path ~/.passpie and a Google Drive shared directory on path ~/GoogleDrive

mv ~/.passpie ~/GoogleDrive/passpie   # move passpie db to Google Drive
ln -s ~/GoogleDrive/passpie ~.passpie # make a link to the db

passpie export passpie.db

passpie import passpie.db

Passpie credentials handles multiple logins for each name which groups credentials by name:

# add some credentials
passpie add jonh@example.com --comment "Jonh main mail" --random
passpie add doe@example.com --comment "No comment" --random

Listing credentials:

$ passpie
===========  =======  ==========  ===============
name         login    password    comment
===========  =======  ==========  ===============
example.com  doe      *****       No comment
example.com  jonh     *****       Jonh main email
===========  =======  ==========  ===============

Fullname syntax supports subgrouping of credentials by name

passpie add foo@opensource/github.com --random
passpie add foo@opensource/python.org --random
passpie add foo@opensource/bitbucket.org --random
passpie add foo@opensource/npm.org --random

Listing credentials:

$ passpie
========================  =======  ==========  =========
Name                      Login    Password    Comment
========================  =======  ==========  =========
opensource/bitbucket.org  foo      *****
opensource/github.com     foo      *****
opensource/npm.org        foo      *****
opensource/python.org     foo      *****
========================  =======  ==========  =========

Sometimes it is useful to have multiple databases with different passphrases for higher security. This can be done using -D or --database option.

passpie -D ~/credentials/personal init
passpie -D ~/credentials/work init
passpie -D ~/credentials/junk init

passpie -D ~/credentials/personal add johnd@github.com --random
passpie -D ~/credentials/work add john.doe@example.com --random
passpie -D ~/credentials/junk add fake@example.com --random

$ passpie -D ~/databases/junk
===========  =======  ==========  =========
Name         Login    Password    Comment
===========  =======  ==========  =========
example.com  fake     *****
===========  =======  ==========  =========

You can activate passpie completion for bash or zsh shells

Check the generated script with passpie complete {shell_name}.

Add this line to your .bash_profile or .bashrc

if which passpie > /dev/null; then eval "$(passpie complete bash)"; fi

Add this line to your .zshrc or .zpreztorc

if which passpie > /dev/null; then eval "$(passpie complete zsh)"; fi

You can override default passpie configuration with a .passpierc file on your home directory. Passpie configuration files must be written as a valid yaml file.

path: /Users/john.doe/.passpie
short_commands: true
genpass_length: 32
genpass_symbols: "_-#|+= "
table_format: fancy_grid
headers:
  - name
  - login
  - password
  - comment
colors:
  login: green
  name: yellow
  password: cyan

default ~/.passpie

Path to passpie database

default false

Use passpie commands with short aliases. Like passpie a for passpie add

default: 32

Length of randomly generated passwords with option --random

default: "_-#|+= "

Symbols used on random password generation

default: fancy_grid

Table format when listing credentials

default:

headers:
  - name
  - login
  - password
  - comment

default:

colors:
  name: yellow
  login: green

Encryption is done with GnuGPG using AES256. Take a look at passpie.crypt module to know more.

The default database path is at ~/.passpie. If you want to change the database path, add --database option to passpie. Together with init you can create arbitrary databases.

passpie --database "/path/to/another/database/" init

Passpie database is structured in a directory hierachy. Every credential is a .pass file inside a directory named after a credential group.

An empty database would look like this:

passpie --database /tmp/passpie init

tree /tmp/passpie -la
# /tmp/passpie
# └── .keys

After adding a new credential the database would look like this:

passpie --database /tmp/passpie add octocat@github.com
# Password: **********

tree /tmp/passpie -la
# /tmp/passpie
# ├── .keys
# └── github.com
#     └── octocat.pass

If we add more credentials to group github.com. Directory structure would be:

passpie --database /tmp/passpie add octocat2@github.com
# Password: **********

tree /tmp/passpie -la
# /tmp/passpie
# ├── .keys
# └── github
#     └── octocat.pass
#     └── octocat2.pass

Feel free to comment, open a bug report or ask for new features on Passpie issues page or over Twitter.

If you want to contributing with code:

• Fork the repository https://github.com/marcwebbie/passpie/fork
• Make sure to add tests
• Create a pull request
• [optional] Read the Makefile

You probably have the python-gnupg package installed. Passpie depends on isislovecruft fork of python-gnupg

To fix:

pip uninstall python-gnupg
pip install -U passpie

You don't have gpg installed or it is not working as expected

Make sure you have gpg installed:

Ubuntu:

sudo apt-get install gpg

OSX:

brew install gpg

You don't have copy to clipboard support by default on some linux distributions.

Ubuntu:

sudo apt-get install xclip

The MIT License (MIT)

Copyright (c) 2014-2015 Marc Webbie, http://github.com/marcwebbie

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.