otty / apps

All apps/LastPass CLI

LastPass CLI

lpass

lpass is a simple command line interface to LastPass.

Runs as lpass|macOS, Linux|github.com

Open form in Otty otty.toml

Sync rules

What travels, what stays, what never leaves

LastPass CLI in your home directory Every rule on this page, by file

· env Sync

· alias.* Sync

· env Sync

· alias.* Sync

· blob Never synced

· plaintext_key Never synced

· session_* Never synced

· trusted_id Never synced

· blob Never synced

· plaintext_key Never synced

· session_* Never synced

· trusted_id Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/lpass/otty.tomlThe file this page is generated from

id = "lpass"

name = "LastPass CLI"

homepage = "https://github.com/lastpass/lastpass-cli"

description = "lpass is a simple command line interface to LastPass."

icon = "SimpleIcons:lastpass"

executables = ["lpass"]

platforms = ["macos", "linux"]

[dotfiles]

# lpass(1), CONFIGURATION: "If $LPASS_HOME is set, everything goes there.

# Otherwise, persistent user-specific data files go in $XDG_DATA_HOME/lpass,

# configuration items go in $XDG_CONFIG_HOME, and runtime items (socket,

# pidfile, etc) go in $XDG_RUNTIME_HOME. If none of the $XDG environment

# variables are set, it falls back to ~/.lpass."

# config.c is the authority on which file is which. config_path_type() sends

# only two names to the config directory: anything beginning with "alias" —

# "aliases are config files", the per-subcommand default arguments the manual

# describes with `echo 'ls --color=never' > ~/.config/lpass/alias.ls` — and

# "env", the optional environment-variable overrides. Everything else is

# CONFIG_DATA or CONFIG_RUNTIME.

# Both directories are listed because the XDG split only happens when

# $XDG_RUNTIME_DIR is set (get_xdg_dir returns NULL otherwise), so a typical

# Linux session writes $XDG_CONFIG_HOME/lpass — [configHome], which is the XDG

# variable and not a hard-coded ~/.config — while a macOS one writes ~/.lpass.

paths = [

"[configHome]/lpass/env",

"[configHome]/lpass/alias.*",

"~/.lpass/env",

"~/.lpass/alias.*",

]

exclude = []

# Everything config.c marks CONFIG_DATA: "blob" is the encrypted vault,

# "plaintext_key" is its decryption key stored in the clear, the "session_*"

# family is the live LastPass session (uid, sessionid, token, privatekey,

# server) and "trusted_id" identifies this device to the account. Both the XDG

# data directory and the ~/.lpass fallback are named, since which one a machine

# uses depends on whether $XDG_RUNTIME_DIR was set. The data directory is

# [xdgData] — $XDG_DATA_HOME, else ~/.local/share, on macOS as much as on

# Linux — and not [dataHome], which is ~/Library/Application Support on macOS,

# a directory lpass never writes to.

secret = [

"~/.lpass/blob",

"~/.lpass/plaintext_key",

"~/.lpass/session_*",

"~/.lpass/trusted_id",

"[xdgData]/lpass/blob",

"[xdgData]/lpass/plaintext_key",

"[xdgData]/lpass/session_*",

"[xdgData]/lpass/trusted_id",

]

# No machine_lines: an alias file is a line of default arguments for one

# subcommand, and the env file holds LPASS_* settings such as the agent

# timeout. Both are preferences that travel.

[commands]

format = 1

label = "LastPass CLI"

description = "Look up and list LastPass entries. Pick a job below; add, edit, remove, sharing and import/export are left out."

quality = "ai-draft"

base = "fig:lpass"

parser = { end_of_options = "--", interleave = "permute", long_equals = true, short_attached = true, short_bundles = false }

[[commands.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/lpass.ts"

license = "MIT"

[[commands.subcommand]]

path = ["login"]

label = "Log in"

[[commands.subcommand.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/lpass.ts"

license = "MIT"

[[commands.subcommand.field]]

id = "username"

label = "Account email"

type = "string"

position = 0

sources = ["fig"]

[[commands.subcommand.field]]

id = "trust"

label = "Trust this device (skip multifactor next time)"

type = "boolean"

option = ["--trust"]

sources = ["fig"]

[[commands.subcommand.task]]

id = "login"

label = "Log in"

fields = ["username", "trust"]

required = ["username"]

[[commands.subcommand.group]]

id = "basic"

label = "Basic"

fields = ["username", "trust"]

[[commands.subcommand]]

path = ["ls"]

label = "List entries"

[[commands.subcommand.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/lpass.ts"

license = "MIT"

[[commands.subcommand.field]]

id = "group"

label = "Group"

type = "string"

position = 0

sources = ["fig"]

[[commands.subcommand.field]]

id = "long"

label = "Show last modification time"

type = "boolean"

option = ["--long", "-l"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "used"

label = "Show last used time"

type = "boolean"

option = ["-u"]

sources = ["fig"]

[[commands.subcommand.task]]

id = "list"

label = "List a group"

fields = ["group", "long"]

[[commands.subcommand.group]]

id = "basic"

label = "Basic"

fields = ["group", "long", "used"]

[[commands.subcommand]]

path = ["show"]

label = "Show an entry"

[[commands.subcommand.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/lpass.ts"

license = "MIT"

[[commands.subcommand.field]]

id = "entry"

label = "Entry name or ID"

type = "string"

position = 0

sources = ["fig"]

[[commands.subcommand.field]]

id = "password"

label = "Only the password"

type = "boolean"

option = ["--password"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "username"

label = "Only the username"

type = "boolean"

option = ["--username"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "url"

label = "Only the URL"

type = "boolean"

option = ["--url"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "notes"

label = "Only the notes"

type = "boolean"

option = ["--notes"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "clip"

label = "Copy to clipboard"

type = "boolean"

option = ["--clip", "-c"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "json"

label = "JSON output"

type = "boolean"

option = ["--json", "-j"]

sources = ["fig"]

[[commands.subcommand.task]]

id = "copy_password"

label = "Copy password"

fields = ["entry", "password", "clip"]

required = ["entry"]

set = { password = [true], clip = [true] }

[[commands.subcommand.group]]

id = "basic"

label = "Basic"

fields = ["entry", "password", "username", "url", "notes", "clip", "json"]

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/lpass. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out.