kure

Password manager for the command-line that aims to offer a secure and private way of operating with sensitive information by reducing the attack surface to its minimum expression.

Features

• Cross-Platform: Linux, macOS, BSD, Windows and mobile supported.
• Private: Self-hosted and completely offline, no connection is established with 3rd parties.
• Secure: Each record is encrypted using AES-GCM with 256 bit key and a unique password derived using Argon2 (id version). The user's master password is never stored on disk, it's encrypted and temporarily held in-memory inside a protected buffer, which is destroyed immediately after use.
• Sessions: Run multiple commands by entering the master password only once. They support setting a timeout and running custom scripts.
• Portable: Both kure and its database compile to binary files and they can be easily carried around in an external device.
• Easy-to-use: Intuitive, does not require advanced technical skills.

Usage

For further information and examples, visit docs/commands.

Installation

Pre-compiled binaries

Linux, macOS, BSD, Windows and mobile pre-compiled binaries can be downloaded here.

Homebrew (Tap)

brew install GGP1/tap/kure

Scoop (Windows)

scoop bucket add GGP1 https://github.com/GGP1/scoop-bucket.git
scoop install GGP1/kure

or

scoop install https://raw.githubusercontent.com/GGP1/scoop-bucket/master/bucket/kure.json

Docker

For details about persisting the information check the docker-compose.yml file.

docker run -it gastonpalomeque/kure sh

For a container with limited privileges and kernel capabilities, use:

docker run -it --security-opt=no-new-privileges --cap-drop=all gastonpalomeque/kure-secure sh

Mobile phones terminal emulators

curl -LO https://github.com/GGP1/kure/releases/download/{version}/{ARM64 file}
tar -xvf {ARM64 file}
mv kure $BIN_PATH

Compile from source

git clone https://github.com/GGP1/kure
cd kure
make install

Configuration

Out-of-the-box kure needs no configuration, it creates a file with the default configuration and the database at:

• Linux, BSD: $HOME/.kure
• Darwin: $HOME/.kure or /.kure
• Windows: %USERPROFILE%/.kure

However, to store the configuration file elsewhere or use a different one, set the path to it in the KURE_CONFIG environment variable.

Head over to the configuration documentation for a detailed explanation of the configuration file and some samples.

Note

Linux and BSD systems require a utility to write to the clipboard. This could be xsel, xclip, wl-clipboard or the Termux:API add-on.

Documentation

Learn more about how kure works in the wiki.

License

This project is licensed under the Apache-2.0 license. See LICENSE.