passwrapper

Have you always wanted to use multiple password stores for different purposes? For example one password store for your passwords at work and another one for you private passwords?

While this is basically possible with native pass it is quite a hassle to setup and use.

This script massively simplifies such a use case by providing functions to perform simple switching, creating and removing of such password stores.

Installation

Simply copy the passwrapper.sh file to your favorite location or use the package manager of your distribution to install it.

After installation add the following to your rc-file of your shell to activate the passwrapper functionality.

source /path/to/passwrapper.sh

By default passwrapper saves the password stores in $HOME/.pass.However, if this is not the directory where you want to save your password stores, you can change this by putting the following command before sourcing the wrapper script.

export PASS_HOME=$HOME/mypasswords

Usage

After sourcing the script multiple commands managing your password stores are available

lspass

Lists all password stores which are managed by the script.

mkpass

Create a new password store.

rmpass

Remove a password store. This will remove all passwords saved in this password store.

passon

Activate one of the managed password stores. After using this command you can now simply use the pass program pass to manage your passwords.

passoff

Deactivate the previously activated password store again.

Additional Tools

passwrappermenu

Similar to the passmenu tool which is bundled with pass the passwrappermenu program can be used to query for any password in your password stores. However, in contrast to passmenu the tool will first ask which account should be used and then allows you to query for a password.

Alternatively it is also possible to directly specify which account should be used by the passwrappermenu program. The tool will then just setup the environment so that passmenu can be used properly.

Short walk-through

Make sure the script is properly sourced.
Create a new password store with mkpass private.
Activate the newly created password store with passon private.
Initialize pass with pass init YOURPGPID
Add passwords to the store with pass insert foo/bar.
Deactivate the password store again with passoff.

Show current password store in your prompt

It is of course possible to show in your shell prompt which password store you are currently using. Below there are some examples how to achieve this for different shells.

Zsh

With the help of the grml config adding the following to your zshrc will make a pretty password store prompt.

# Passwrapper support
function passwrapper_prompt() {
    REPLY=${PASS_DIR+(${PASS_DIR:t}) }
}

grml_theme_add_token passwrapper -f passwrapper_prompt '%F{blue}' '%f'

# Add to left prompt
zstyle ':prompt:grml:left:setup' items ... passwrapper ...

Bash

Changing your bash prompt as simple as the Zsh one. Just put the following in your bashrc.

# Passwrapper support
passwrapper_prompt() {
    if [ -z "$PASS_DIR" ]; then
        PASSWRAPPER_PROMPT=""
    else
        PASSWRAPPER_PROMPT="\[\e[1;34m\](`basename \"$PASS_DIR\"`) \[\e[0m\]"
    fi
}

build_prompt() {
    #...
    passwrapper_prompt
    #...
    
    PS1="... ${PASSWRAPPER_PROMPT} ..."
}

PROMPT_COMMAND=build_prompt

l3nkz/passwrapper