Purse

Purse is a command-line secrets manager written as a Bash script. It stores passwords and other secrets in encrypted text files using GnuPG, and relies on asymmetric, public-key authentication rather than a passphrase. With a YubiKey you plug in the key, enter a PIN and touch it to read a secret. It is a sibling of the same author's pwd.sh, which uses symmetric, passphrase-based encryption. It suits technical users comfortable with GnuPG and the shell.

A GnuPG identity is required, and the README points to the author's YubiKey guide for setting one up. Run the script interactively or from the command line to write, read and list secrets, and to create and restore backup archives. Passwords are stored with an epoch timestamp so earlier versions are kept, and reading a password copies the most recent one to the clipboard, which is cleared after a configurable number of seconds.

Behavior can be tuned through environment variables, for example the clipboard command and clipboard arguments, the clear delay and the default generated password length. The repository ships recommended GnuPG options. Purse is MIT licensed and runs on Unix-like systems, using xclip on Linux and pbcopy on macOS by default.