Thanks for the feedback, I hope you check out the app! Yes I know it is similar, I actually went through several different names. I started with PassMaster and then PassMan. PassMan was already taken on PyPI, and PassMaster was also quite long to use for a cli command. I liked Keepr as it is short to type out and I like the connotations it has to keys, secrets and security!
You're correct, generated password length is fixed to 20 characters at the moment. I've got a priority task to make user config the next release which will enable the user to configure generated password length, colour scheme and session length. With regards to security, the way the database is encrypted is using your master password on intial setup. I'm not sure if there is a way to make the database readable, even setting it to readable to the user, since the database file itself is encrypted. This is for security purposes, and when I was desinging the app, I had trade-offs to make between security and user experience. Security was a top priority as I hadn't seen another password manager with this level of security before. I have a feature planned to enable export and import of data from the database to .csv/.json, so this might help with user experience. Thanks for the feedback, really appreciated. I hope you enjoy using the app!
I've just released v1.1.0 which now has user configuration for password generator settings, color scheme and session duration! I've updated the README on the main project page which now includes instructions for user configuration. Hope you enjoy the new feature!
Hi, thanks for your feedback! Yes at the moment you can only change the password length via updating the config.py. This can only be done if you clone the repo and update the config.py yourself, not through installing off of PyPI. One of my first goals on the roadmap is to make configuration accessible to the user through the CLI, so they can change the generated password length, session time and colour scheme of the output. If you'd like I'd very much welcome a pull request if you want to help contribute to the project! Otherwise, I'll work on getting user configuration setup as a priority for the next release.
v1.0.0: Launch of PassMan - The Secure Command-Line Password Manager
I am delighted to announce the initial release of PassMan, a modern, open source, command-line password manager focused on speed, efficiency, and security.
This v1.0.0 release establishes the foundational architecture, utilizing industry-leading cryptographic standards to protect your sensitive data directly from your terminal.
Core Security Features:
Security is the primary feature of PassMan. This release incorporates several layers of defense:
- SQLCipher Database Encryption: Your entire vault is secured using SQLCipher, which provides 256-bit AES encryption for the underlying SQLite database file. This ensures all your data (passwords, usernames, notes) is encrypted at rest.
- Master Key Derivation (PBKDF2HMAC): Your Master Password never directly touches the database. Instead, it is used with a unique, securely stored salt and a high number of iterations (key stretching) via PBKDF2HMAC to derive a strong Key Encryption Key (KEK).
- Encrypted Primary Key Storage: A separate, random Primary Encryption Key (PEK) is generated and used as the direct encryption key for the database. This PEK is then encrypted by your derived KEK and saved to disk. This architecture prevents brute-force attacks against the PEK itself.
- Secure Session Management: The decrypted PEK is temporarily and securely cached in a short-lived session file with strict file permissions (0o600). This grants you seamless access for the default 1-hour timeout without re-entering your Master Password, balancing security and user experience.
How to Get Started:
Head over to the GitHub page and read the repository README on the main branch for up-to-date details on how to install the PassMan CLI, get started with commands, and a more in-depth look into the security features powering the application.
Support and Next Steps:
This is just the beginning. I welcome community input to make PassMan the best free and open source CLI password manager available.
- If you find a bug, please open a new issue.
- For feature suggestions or discussions, please use the Discussions tab.
