rucksack

A terminal-based password manager, importer (Firefox Sync), and generator

Features

• [x] Password generator
• [x] Encrypted local storage
• [x] Concurrent hashmap for use by daemons
• [x] Supports Firefox Sync
• [x] List secrets (encrypted and decrypted)
• [x] Searching secrets (filtering)
• [ ] Reports (quality, duplicates, etc.)
• [ ] Local network sync

Usage

Password Generator

Use a UUID:

```shell ./bin/rucksack gen --type uuid

New password: 229ef9b4-b95b-4d91-a6ac-f6b7ef1cfc47 Password score: 88.50 ```

Augmented UUID:

```shell ./bin/rucksack gen --type uuid++

New password: 4C7360%E-4@60-4?03-b559-491C8A52E750 Password score: 100.00 ```

Random:

```shell ./bin/rucksack gen --type random

New password: A&6YU?#xk.?) Password score: 91.22 ```

Lorem-ipsum inspired:

```shell ./bin/rucksack gen --type lipsum

New password: Esse-maius-amicitia,-nihil.-]9^, Password score: 100.00 ```

Importing

Import login data from Firefox Sync:

shell ./bin/rucksack import \ --type firefox \ --db ./data/creds.db \ --password abc123 \ --file ~/Downloads/logins.csv

List Secrets

Show URL/accounts for all secrets:

shell ./bin/rucksack list --db ./data/creds.db

shell Enter db password:

Show URLs, accounts, passwords, and password scores for all secrets:

shell ./bin/rucksack list --db ./data/creds.db --decrypt

shell Enter db password:

In both cases a password may be passed with the --password flag. By default, the salt is the value of the USER environment variable; it may be overridden with --salt.

Note that without --decrypt, only the user and URL are displayed. With --decrypt, those as well as masked password and password score are displayed. To unmask the password, one must also set --reveal.

Search / Filter Secrets

Simple filtering is also possible (done using a flag with the list command, with or without sorting):

shell ./bin/rucksack list \ --db ./data/creds.db \ --password abc123 \ --filter exa \ --sort-by score \ --decrypt

text URL | User / Account | Password | Strength -----------------------------------------+--------------------------------+----------------------+----------- https://www.bugworld.com | hexapod123 | ********** | 93 https://accounts.cloud.com | hexapod@thing.systems | ********** | 90 https://entymology.slack.com | 6pod@example.com | ********** | 86 https://bugs.slack.com | Alice Roberts | ********** | 85 https://twitter.com | TheOtherHexapod | ********** | 83 https://portal-hexapod.testing.app | alice@example.com | ********** | 58 http://localhost:3000 | alice@example.com | ********** | 30

You may sort on score (strength), user, or url. If not provided, url sorting is used.

Other

Here are other cargo projects tagged with "password manager" ...

Projects of particular interest:

• kbs2 - A secret manager backed by age
• RustCrypto - A Github org collecting a handful of pure-Rust encryption libraries
• Firefox Sync

License

Copyright © 2022-2023, Oxur Group

Apache License, Version 2.0