Rpass - Secure, simple, and pluggable command-line password management

Question

WARNING: this program requires a python version greater than or equal to 3.
EDIT: Fixed a bunch of bugs that made this unusable, please update!
EDIT: Added a default configuration file.
Hi there!
rpass is a command-line password manager that encrypts any and all credentials you would like to store using gpg's algorithms.
Gnome and Mac OS both have a universal credential solution, but to my knowledge there is no such generic linux application. Gnome's keyring code is long and personally, I don't trust it as much as the simple system I have in place in rpass - it is transparent and easy to understand, and any possible security holes would be blatantly visible.
rpass can be used directly from the commandline, typing your master password (gpg passphrase) in every time, but it really shines when gpg-agent and xclip are installed. gpg-agent saves your passphrase for an interval of time, so you only have to authenticate yourself occaisonally, and the powerful search capabilities of rpass (regex-enabled) allow simple and quick account selection.
Furthermore, with xclip installed passwords NEVER have to be printed onscreen - the first matching entry's password is automatically copied to the clipboard if a search is done with rpass. You can even run rpass from applications like 'dmenu', and although there will be no visible output, if you enter a search term after rpass you will have the password you wanted copied to your clipboard.
Finally, it can also be easily integrated in other applications -- I use it for my email (mutt) and any script I write that requires a password.
AUR Link: http://aur.archlinux.org/packages.php?ID=44788
More detailed documentation and explanation can be found at: https://github.com/rscare/rpass/blob/ma … E.asciidoc (scroll down)
or with
$ man rpass
after installation.
git repository: git://github.com/rscare/rpass.git
Please comment on the software and the documentation. Thank you very much for taking the time to try my software.
Last edited by RedScare (2010-12-27 07:04:44)

Answer 1

I'm very interested in this. However... on the initial run, pressing enter causes a crash:
$ rpass
Need to first create gpg key pair.
Choose a secure passphrase -- this is going to be your master password.
Rerun program after key creation.
WARNING: DO NOT pick a sign-only key type.
Press [ENTER] when ready.
Traceback (most recent call last):
File "/usr/bin/rpass_py_interface", line 80, in <module>
input("Press [ENTER] when ready.")
File "<string>", line 0
^
SyntaxError: unexpected EOF while parsing
I got around this by entering junk and I made my key. After rerunning rpass with the key generated:
$ rpass
Traceback (most recent call last):
File "/usr/bin/rpass_py_interface", line 84, in <module>
if not(IsRunning(gpg-agent)):
File "/usr/lib/python2.7/site-packages/rpass.py", line 24, in IsRunning
plist = [re.match(ppatt, p.strip()).groups()[0] for p in str(proc.communicate()[0], encoding=utf-8).split(n)[1:-1]]
TypeError: str() takes at most 1 argument (2 given)
Looks like rpass expects the gpg-agent to be running when it starts.
edit: rather, it expects the gpg-agent to be running with the key loaded. gpg-agent was already loaded thanks to keychain but without my newly created key known to it.
Last edited by falconindy (2010-12-26 03:42:28)