Concept

Your passwords reside in an encrypted textfile, by default: ~/.sicuit.eno.pgp

The store can contain simple entries:

developer.blender.org: 1nice!DROWSSAP

You can also include metadata, tailored to your requirements:

codeberg.org:
password = 9what_METSYS
api_token = 70FrtPihanLxWZUJI
user = alice

To use your store execute sicuit from the terminal ...

$ sicuit

... and interactively search it (after entering your password) ...

.org▉

developer.blender.org
codeberg.org → password
codeberg.org → api_token
codeberg.org → user

To edit the store in your configured text editor, pass -e or --edit ...

$ sicuit --edit

sicuit's store uses eno syntax, providing the following key/subkey/list primitives ...

Alice's password: 9what_METSYS

Bob's email:
Email = bob@example.com
Password = 5more%ELPMAXE
Server = imap.example.com
User = bob

Claire's recovery codes:
- 12345
- 67890
- ABCDE

You can also use multiple stores for separate projects/teams and sign each of them with the public keys of all that should have access to share secrets with peers.

$ sicuit --init --for-email alice@example.com --for-email jane@example.com shared_secrets.eno.pgp

And that is all!

Get

sicuit has just been re-released as a new implementation that uses rust and Sequoia PGP and is available for recent debian-based Linux distros (Intel/amd64). Packages will be rolled out for more platforms in the future. See BUILD.md if you would like to build it yourself.

Recent Debian/Ubuntu systems

Download and install the .deb package (amd64)

Usage

You can either use plain passwords for the store (--init --with-password), or encrypt it using PGP keys (--init --for/--for-email/--for-userid). Setting up the latter using gpg or sq only takes a few minutes (and will also allow you to encrypt emails, sign code, and other good things).

Execute sicuit --help to get directions for the CLI.

Type Filter results
Tab Show/hide keys
Shift + Tab Show/hide selected secret
Enter Copy selected secret to the clipboard
Alt + Enter Print selected secret to stdout
Escape Exit
Up / Down Navigate
Page Up / Page Down Navigate pagewise
Home / End Go to first/last result

Migrating to sicuit

Heads up: sicuit was just re-released, and importers are still pending updates.

At the moment there is only a direct import script for pass. If you are using something else and don't mind a roundtrip you can use one of the importers on the pass website to migrate from your password manager to pass, and then migrate from pass to sicuit as a second step.

• importers/pass.py

Code contributions in the form of additional migration scripts for other password managers will be met with open arms!

Migrating away from sicuit

Heads up: sicuit was just re-released, and exporters are still pending updates.

As a sicuit user you shall always have the freedom of being able to take your data to any other software without impediment, and these exporters serve to fulfill that promise.

• exporters/eno.sh
• exporters/json.py
• exporters/pass.py

Code

The sicuit repository is hosted on codeberg.org.

Sicuit is licensed under the GPLv3+.