rpass - Secure, simple, and pluggable command-line password management

RedScare · 2010-12-25 23:25:01

WARNING: this program requires a python version greater than or equal to 3.

EDIT: Fixed a bunch of bugs that made this unusable, please update!
EDIT: Added a default configuration file.

Hi there!

rpass is a command-line password manager that encrypts any and all credentials you would like to store using gpg's algorithms.

Gnome and Mac OS both have a universal credential solution, but to my knowledge there is no such generic linux application. Gnome's keyring code is long and personally, I don't trust it as much as the simple system I have in place in rpass - it is transparent and easy to understand, and any possible security holes would be blatantly visible.

rpass can be used directly from the commandline, typing your master password (gpg passphrase) in every time, but it really shines when gpg-agent and xclip are installed. gpg-agent saves your passphrase for an interval of time, so you only have to authenticate yourself occaisonally, and the powerful search capabilities of rpass (regex-enabled) allow simple and quick account selection.

Furthermore, with xclip installed passwords NEVER have to be printed onscreen - the first matching entry's password is automatically copied to the clipboard if a search is done with rpass. You can even run rpass from applications like 'dmenu', and although there will be no visible output, if you enter a search term after rpass you will have the password you wanted copied to your clipboard.

Finally, it can also be easily integrated in other applications -- I use it for my email (mutt) and any script I write that requires a password.

AUR Link: http://aur.archlinux.org/packages.php?ID=44788

More detailed documentation and explanation can be found at: https://github.com/rscare/rpass/blob/ma … E.asciidoc (scroll down)

or with

$ man rpass

after installation.

git repository: git://github.com/rscare/rpass.git

Please comment on the software and the documentation. Thank you very much for taking the time to try my software.

Last edited by RedScare (2010-12-27 07:04:44)

falconindy · 2010-12-26 03:34:26

I'm very interested in this. However... on the initial run, pressing enter causes a crash:

$ rpass
Need to first create gpg key pair.
Choose a secure passphrase -- this is going to be your master password.
Rerun program after key creation.

WARNING: DO NOT pick a sign-only key type.

-------------------------------------------------------------------------
Press [ENTER] when ready.
Traceback (most recent call last):
  File "/usr/bin/rpass_py_interface", line 80, in <module>
    input("Press [ENTER] when ready.")
  File "<string>", line 0

    ^
SyntaxError: unexpected EOF while parsing

I got around this by entering junk and I made my key. After rerunning rpass with the key generated:

$ rpass
Traceback (most recent call last):
  File "/usr/bin/rpass_py_interface", line 84, in <module>
    if not(IsRunning(gpg-agent)):
  File "/usr/lib/python2.7/site-packages/rpass.py", line 24, in IsRunning
    plist = [re.match(ppatt, p.strip()).groups()[0] for p in str(proc.communicate()[0], encoding=utf-8).split(n)[1:-1]]
TypeError: str() takes at most 1 argument (2 given)

Looks like rpass expects the gpg-agent to be running when it starts.

edit: rather, it expects the gpg-agent to be running with the key loaded. gpg-agent was already loaded thanks to keychain but without my newly created key known to it.

Last edited by falconindy (2010-12-26 03:42:28)

RedScare · 2010-12-26 04:16:16

It appears you aren't using python 3 as your default python installation -- this is what is causing problems. This program is meant to be run with python versions greater than 3.

Thanks for your testing, would you mind trying it again, but with python 3?

falconindy · 2010-12-26 04:21:09

I'd love to. Sorry about that. I've got a symlink hanging out in my ~/bin that I conveniently forgot about. Works much better now.

RedScare · 2010-12-26 04:25:23

Thanks a lot for looking at this. I hope you like it. This is the first time I've distributed something so please ask questions if something is unclear, either in the program or in the documentation.

Feature requests welcome as well:)

I'll come up with a python 2 version later if the need arises as well...

Last edited by RedScare (2010-12-26 04:25:37)

RedScare · 2010-12-27 00:09:35

I've fixed most of the bugs in this that made it initially unusable for those with a different gpg setup. Most things should work now, sorry for the initial inconvenience.

RedScare · 2010-12-27 07:05:30

Ok for those of you that downloaded this and found it to be buggy/not workable/not configurable those problems are fixed in the latest commit/aur package. Please update.

mortbauer · 2012-08-25 18:21:50

Hey, first of all i really would like to see this work, but unfortunately there is following:

1. the PKGBUILD doesn't work correct:

python: can't open file 'setup.py': [Errno 2] No such file or directory

wasn't difficult to correct but still

2. after succesful installation, i started and i got the following:

Would you like to add additional fields to the entry? [N/y] n
Traceback (most recent call last):
  File "/usr/bin/rpassword-manager", line 5, in <module>
    run()
  File "/usr/lib/python3.2/site-packages/rpass/rpass_interface.py", line 210, in run
    else: account.AddEntry(CreateEntry())
  File "/usr/lib/python3.2/site-packages/rpass/rpass.py", line 149, in AddEntry
    return rpass.AddRpassAccount(self, self.passfile, raccount)
  File "/usr/lib/python3.2/site-packages/rpass/rpass.py", line 100, in AddRpassAccount
    self.__talkToDaemon(message)
  File "/usr/lib/python3.2/site-packages/rpass/rpass.py", line 16, in __talkToDaemon
    s.connect(SOCKET_NAME)
socket.error: [Errno 2] No such file or directory

Arch Linux

#1 2010-12-25 23:25:01

rpass - Secure, simple, and pluggable command-line password management

#2 2010-12-26 03:34:26

Re: rpass - Secure, simple, and pluggable command-line password management

#3 2010-12-26 04:16:16

Re: rpass - Secure, simple, and pluggable command-line password management

#4 2010-12-26 04:21:09

Re: rpass - Secure, simple, and pluggable command-line password management

#5 2010-12-26 04:25:23

Re: rpass - Secure, simple, and pluggable command-line password management

#6 2010-12-27 00:09:35

Re: rpass - Secure, simple, and pluggable command-line password management

#7 2010-12-27 07:05:30

Re: rpass - Secure, simple, and pluggable command-line password management

#8 2012-08-25 18:21:50

Re: rpass - Secure, simple, and pluggable command-line password management

Board footer