monopass

monopass is a local-first password manager and credential storage daemon that stores data securely on your machine, protected with AES-256-GCM encryption.

Key features

• Bank-grade security: Secure local data using AES-256-GCM encryption and PBKDF2 key derivation (256,000 iterations).
• Single-binary installation: Run instantly on Linux and macOS with a single, dependency-free executable.
• Seamless sharing: Share credentials effortlessly with other users via monopass share.
• Built-in TOTP: Store and generate TOTP codes directly, replacing standalone authenticator apps.
• Automatic session caching: Prevent repeated password prompts. Enter your master password once, and the requesting process chain is trusted for 15 minutes (configurable).
• CLI-native: Automate workflows easily by integrating the command-line interface directly into your scripts.
• Credential daemon: Integrate any application via the API, bypassing the need for native system keyrings.

Quickstart

Use the commands below to get started, which will install monopass, configure shell completions, initialize your password vault, and auto-start the password agent.

curl -fsSL https://raw.githubusercontent.com/supriyo-biswas/monopass/master/install.sh | sh
monopass init

And then, add your first password and retrieve it:

monopass add Personal/GitHub --username my-username --password
monopass ls
monopass ls Personal
monopass show Personal/GitHub --reveal

Documentation

User guide

1. Getting started
2. Creating and editing directories and items
3. Listing, moving, deleting and versioning items
4. Secure access to your vault
5. Sharing items
6. Connect existing tools
7. .env files and references
8. Use the local agent API

Recipes

• Using monopass as a git credential cache
• Using monopass to store Ansible vault passwords
• Supply AWS CLI credentials from monopass

References

• Settings
• API reference

License

This project is licensed under the MIT license. See the LICENSE file for details.