otty / apps

All apps/pass

pass

Stores, retrieves, generates, and synchronizes passwords securely.

Runs as pass|macOS, Linux, Windows|www.passwordstore.org

Open form in Otty otty.toml

Sync rules

What travels, what stays, what never leaves

pass in your home directory Every rule on this page, by file

· ~/.password-store/ Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/pass/otty.tomlThe file this page is generated from

id = "pass"

name = "pass"

homepage = "https://www.passwordstore.org/"

description = "Stores, retrieves, generates, and synchronizes passwords securely."

executables = ["pass"]

[dotfiles]

# pass has no config file. Everything is environment variables —

# PASSWORD_STORE_DIR, PASSWORD_STORE_KEY, PASSWORD_STORE_GPG_OPTS and the rest,

# listed under ENVIRONMENT VARIABLES in pass(1) — set from the user's shell rc,

# which belongs to that shell's entry rather than here.

paths = []

exclude = []

# The whole store. pass(1), DESCRIPTION and FILES:

# pass is a very simple password store that keeps passwords inside gpg2(1)

# encrypted files inside a simple directory tree residing at

# ~/.password-store.

# ~/.password-store

# The default password storage directory.

# https://git.zx2c4.com/password-store/tree/man/pass.1

# Every leaf in the tree is a GPG-encrypted password (`Business/site.gpg`), so

# the directory is a credential from end to end; the two non-password members

# FILES names, `.gpg-id` and `.extensions/`, only make sense next to it. The

# ciphertext is binary, which is a fact about the bytes, not a reason to leave

# the path unrecorded — a consumer that carries it carries bytes.

secret = ["~/.password-store/"]

[commands]

format = 1

label = "Password store"

description = "Show, generate or insert a password in the password store. Initialising the store, git, edit, copy/move and grep are left out."

quality = "ai-draft"

base = "fig:pass"

parser = { end_of_options = "--", interleave = "permute", long_equals = true, short_attached = true, short_bundles = false }

[[commands.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/pass.ts"

license = "MIT"

[[commands.field]]

id = "pass_name"

label = "Password name"

description = "Leave empty to list the whole store."

type = "string"

position = 0

sources = ["fig"]

[[commands.field]]

id = "clip"

label = "Copy to clipboard"

type = "boolean"

option = ["--clip", "-c"]

sources = ["fig"]

[[commands.field]]

id = "qrcode"

label = "Show as QR code"

type = "boolean"

option = ["--qrcode", "-q"]

sources = ["fig"]

[[commands.task]]

id = "show"

label = "Show a password"

fields = ["pass_name", "clip", "qrcode"]

required = ["pass_name"]

[[commands.task]]

id = "copy"

label = "Copy to clipboard"

set = { clip = [true] }

fields = ["pass_name", "clip"]

required = ["pass_name"]

[[commands.group]]

id = "basic"

label = "Basic"

fields = ["pass_name", "clip", "qrcode"]

[[commands.subcommand]]

path = ["generate"]

label = "Generate a password"

description = "Create a new random password and store it under the given name."

[[commands.subcommand.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/pass.ts"

license = "MIT"

[[commands.subcommand.field]]

id = "pass_name"

label = "Password name"

type = "string"

position = 0

sources = ["fig"]

[[commands.subcommand.field]]

id = "pass_length"

label = "Length"

type = "integer"

position = 1

sources = ["fig"]

[[commands.subcommand.field]]

id = "no_symbols"

label = "Alphanumeric only"

type = "boolean"

option = ["--no-symbols", "-n"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "clip"

label = "Copy to clipboard"

type = "boolean"

option = ["--clip", "-c"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "in_place"

label = "Replace first line only"

type = "boolean"

option = ["--in-place", "-i"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "force"

label = "Overwrite existing"

type = "boolean"

option = ["--force", "-f"]

effect = "overwrite"

sources = ["fig"]

[[commands.subcommand.task]]

id = "generate"

label = "Generate and copy"

set = { clip = [true] }

fields = ["pass_name", "pass_length", "no_symbols", "clip", "in_place", "force"]

required = ["pass_name"]

[[commands.subcommand.group]]

id = "basic"

label = "Basic"

fields = ["pass_name", "pass_length", "no_symbols", "clip", "in_place"]

[[commands.subcommand.group]]

id = "advanced"

label = "Advanced"

fields = ["force"]

[[commands.subcommand]]

path = ["insert"]

label = "Insert a password"

description = "Store a password you type in."

[[commands.subcommand.source]]

id = "fig"

kind = "completion"

url = "https://github.com/withfig/autocomplete/blob/master/src/pass.ts"

license = "MIT"

[[commands.subcommand.field]]

id = "pass_name"

label = "Password name"

type = "string"

position = 0

sources = ["fig"]

[[commands.subcommand.field]]

id = "multi_line"

label = "Multi-line entry"

type = "boolean"

option = ["--multi-line", "-m"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "echo"

label = "Echo input"

type = "boolean"

option = ["--echo", "-e"]

sources = ["fig"]

[[commands.subcommand.field]]

id = "force"

label = "Overwrite without prompt"

type = "boolean"

option = ["--force", "-f"]

effect = "overwrite"

sources = ["fig"]

[[commands.subcommand.task]]

id = "insert"

label = "Insert one line"

fields = ["pass_name", "multi_line", "echo", "force"]

required = ["pass_name"]

[[commands.subcommand.group]]

id = "basic"

label = "Basic"

fields = ["pass_name", "multi_line", "echo", "force"]

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/pass. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out.