pwd.sh

pwd.sh, by drduh, is a Bash script for managing text secrets such as passwords with GnuPG. Each secret is saved to a randomly named file in a directory, and an encrypted index maps usernames to those files. Both the index and the files can be decrypted directly with GnuPG, without needing pwd.sh at all.

Run interactively or with command-line options, the script lets you write, read and list secrets, generate random secrets and usernames, archive materials for backup and print version and help text. Secrets are stored with an epoch timestamp for revision control, and the most recent version is read by default. Environment variables configure the storage directory, index name, clipboard command and arguments, the output destination and how many seconds the secret stays in the clipboard or on screen before being cleared, which defaults to ten seconds.

The tool is written in Shell, licensed under MIT, and works on Linux and macOS with clipboard tools such as xclip or pbcopy. It runs locally with no server, so there is no hosted service.