

Autotype pwsafe-cli mysafe.psafe3 -select='Title:Gmail' -autotype
#PWSAFE EXPORT PASSWORD#
Generate new password pwsafe-cli mysafe.psafe3 -select='Title:Hotmail' -generate-new-passwordĥ. No fieldname or field value are required for these 4. Delete pwsafe-cli mysafe.psafe3 -select='Title:SourceForge' -delete='URL'


#PWSAFE EXPORT WINDOWS#
Would be nice to be able to do this without linking in any X windows library. Copy to clipboard (only if X is running) pwsafe-cli mysafe.psafe3 -select='Title:Github' -to-clipboard='password'
#PWSAFE EXPORT UPDATE#
Update pwsafe-cli mysafe.psafe3 -select='Title:Amazon' the fieldname is required 2. They could take a valid field name a valid value for that field, depending on the semantics ofīoth field name and a valid value are required 1. All matching entries would be printed, and the desired entry can be selected exactly in the next command for any modifications.Īny operation whose '-select=' clause results in multiple matches would fail. However, entries can be search for by supplying a partial value for one of its fields, which is a read-only operation. Selecting entries by partial matching is not supported, to prevent accidental overwriting/deletion of a wrong entry. Multiple fields can be specified, but typically it would be Title, sometimes in combination with User. The field must be a known valid field type, which are The "select" argument essentially specifies the EXACT value of any field in the database. pwsafe-cli mysafe.psafe3 -combination-fd=5 -select='Title:SomeTitle' -autotype The combination then be securely written to & read from the fd by the parent application and pwsafe-cli respectively. Instead, the parent application could create an fd and fork pwsafe such that pwsafe inherits it. Passing safe combination as command line parameter has the security issue that the combination could be visible in the output of ps command. pwsafe-cli mysafe.psafe3 -combination-keyring -select='Group:Forums,Title:AVSForum' -print=notesĪn application having access to a safe's combination might want to launch pwsafe-cli and pass the combination to it securely. The keyring manager should prompt the user to allow/disallow specific apps from accessing the password. From a keyring (if possible, like on OSX) This idea is from ipmitool, which works somewhat like that. It's a security hole waiting to be exploited.Įxport PASSWORSAFE_PASSWORD=mysecret pwsafe-cli mysafe.psafe3 -combination-env=PASSWORDSAFE_PASSWORD -select='Title:ebay' -view I really don't think we should do this. Other mechanisms for safe password input From an environment variable confirm prompts before making each change for which value to prefer (-mine=mysafe, -other=othersafe), along with all-mine,all-other,quit,abort options. (-n for dry-run, to print out the changes without modifying mysafe.psafe3) -dryrun? Merge pwsafe-cli mysafe.psafe3 -merge othersafe.psafe3 -mine|-other|-confirm confirm prompts before making each change with yes,no,no-to-all,yes-to-all,quit,abort options. Entries in othersafe.psafe3 that don't exist in mysafe.psafe3 are ignored. Update entries of mysafe.psafe3 with matching entries from othersafe.psafe3, wherever they differ. Or just hand it over to an external program like vimdiff Sync pwsafe-cli mysafe.psafe3 -sync othersafe.psafe3 Show unified (default), context or side-by-side diff. Multi-safe operations Diff pwsafe-cli mysafe.psafe3 -diff othersafe.psafe3 More details entry selection and actions below. However, its not an error if the field is not set or is set to an empty value (in which case pwsafe-cli would print nothing). pwsafe-cli would exit with an error code. It is an error if the entry is not found. Print some field(s) of an existing entry pwsafe-cli mysafe.psafe3 -select='Group:Forums,Title:AVSForum' -print=password Error if > 1 entries match Update an existing entry pwsafe-cli mysafe.psafe3 -select='Group:Forums,Title:AVSForum' entry must exist. If invoked by another process, -yes must be passed or else it would result in a no-op. Would prompt for confirmation if the input is a terminal, unless -yes is specified. Error if entry exists? Delete an existing entry pwsafe-cli newsafe-psafe3 -select='Group:Forums,title:AndroidForum' -delete pwsafe-cli mysafe.psafe3 -add='Group:Forums,Title:AVSForum,email: Password could be autogenrated if unspecified? Perhaps it would be better to have a uniform way of specifying parameters, e.g., Add a new entry pwsafe-cli newsafe-psafe3 -add title='NewEntry' user='newuser' password='secret'. It would print the Group, Title & User of matching entries on stdout, which are usually enough to distinguish each entry. Search for an entry pwsafe-cli mysafe.psafe3 -search='Group=Banks,Title=Citibank' New Actions Create a new safe pwsafe-cli newsafe.psafe3 -new Add more functionality to PasswordSafe CLIġ.
