Simple and secure self-hosted command-line password manager

• Server: An API server to store/backup your local vault
• Client: A CLI client to manage your passwords and interact with the API

Download the latest release for your system. Then place is somewhere on your PATH. For example:

tar xvf passctl_linux-amd64.tar.gz
sudo mv client /usr/bin/passctl

If this is your first installation, run passctl setup to create a master password and to generate a token. To learn more about all the commands run passctl help or just passctl.

You can self-host a passctl server using docker:

docker run -d -v $PWD/db:/app/db            \
              -p 80:8080                    \
              ghcr.io/passctl/server:latest \
              0.0.0.0:8080 http://127.0.0.1:8080

The first argument (0.0.0.0:8080) is the interface that the application will listen on, the second argument (http://127.0.0.1:8080) is the URL for the application. This should be the full URL that will be used by the clients. For example if you are hosting this server on passctl.example.com using HTTPS, with a reverse proxy setup, then the URL should be https://passctl.example.com.