pass ¶

Installation¶

# Ubuntu
brew install pass

Remove gpg-agent error

sudo apt remove gpg-agent
gpgconf --kill gpg-agent

Usage¶

Import File ¶

pass insert -fm gpg/revoke < file.txt

Git¶

# Push your local pass history
pass git push -u --all

Reconnecting Existing Repo¶

git clone [email protected]:nicholaswilde/pass.git ~/.password-store

Custom Password Store Directory¶

By default, pass uses ~/.password-store. You can change this by setting the PASSWORD_STORE_DIR environment variable.

.bashrcManual

export PASSWORD_STORE_DIR="/path/to/your/custom/directory"

export PASSWORD_STORE_DIR="/path/to/your/custom/directory"
pass

pass-import ¶

rootsudo

curl -fsSL https://pkg.pujol.io/debian/gpgkey | tee /etc/apt/keyrings/pass-extension-import.gpg
echo "Types: deb
URIs: https://pkg.pujol.io/debian/repo
Suites: all
Components: main
Architectures: amd64
Signed-By: /etc/apt/keyrings/pass-extension-import.gpg" | tee /etc/apt/sources.list.d/pkg.pujol.io.sources > /dev/null
apt update
apt install pass-extension-import -y

curl -fsSL https://pkg.pujol.io/debian/gpgkey | sudo tee /etc/apt/keyrings/pass-extension-import.gpg
echo "Types: deb
URIs: https://pkg.pujol.io/debian/repo
Suites: all
Components: main
Architectures: amd64
Signed-By: /etc/apt/keyrings/pass-extension-import.gpg" | sudo tee /etc/apt/sources.list.d/pkg.pujol.io.sources > /dev/null
sudo apt update
sudo apt install pass-extension-import -y

Encrypt Files¶

pass insert -m sensitive/secret_answers < secret_answers.txt
# Or
cat secret_answers.txt | pass insert -m sensitive/secret_answers

Update encryption key¶

pass init <new-gpg-key-id>

Check Git Origin¶

pass git remote -v

Copy password using `osc52.sh`¶

Ensure that xclip is uninstalled

sudo apt remove xclip

Step 1: Create the xclip Wrapper¶

pass tries to run xclip with specific flags. We need a dummy xclip that ignores those flags and pipes the password to your copy command.

Create the file:

nano ~/.local/bin/xclip

Note

Ensure ~/.local/bin is in your $PATH. If you use a different bin folder, put it there

Paste the following content:

#!/bin/bash

# 1. 'pass' attempts to restore the clipboard using 'xclip -o'.
#    We cannot read the client clipboard via OSC52, so we ignore this or exit.
if [[ "$*" == *"-o"* ]]; then
  exit 0
fi

# 2. 'pass' sends the password via Stdin.
#    We pipe that Stdin directly to your 'copy' script.
#    Your 'copy' script (osc52.sh) handles the base64 encoding and escape codes.
cat | copy

Make it executable:

chmod +x ~/.local/bin/xclip

Check that it exists in $PATH

Success

which xclip

Step 2: Bypass the Display Check (Crucial for SSH)¶

If you are running this over SSH (which is likely, given you are using hterm), pass will abort saying "Error: No X11 window system found" because the $DISPLAY variable is empty.

You must set a fake display variable to trick pass into running our wrapper.

Run this in your terminal (or add it to your ~/.bashrc):

.bashrcManual

export DISPLAY=:0

export DISPLAY=:0

Step 3: Test It¶

Run the standard copy command:

pass -c social/reddit

pass¶