Shroud is a simple secret manager with a command line interface.
The password database is stored as a Scheme s-expression and encrypted with a GnuPG key. Secrets consist of an arbitrary number of key/value pairs, making Shroud suitable for more than just password storage. For copying and pasting secrets into web browsers and other graphical applications, there is xclip integration.
First, create a
.shroud file in your home directory to hold your
configuration settings. All you really need to set here is your GPG
user ID i.e. your email address:
'((user-id . "email@example.com"))
.shroud file is Scheme source code, so any expression that evaluates
to an alist of valid configuration settings is usable by Shroud.
Once Shroud is configured, try out the following commands to get a feel for how things work:
# Add a new secret: shroud hide bank-account username=foobar password=hackme # Edit an existing secret: shroud hide --edit bank-account password=hackmepls # List all secrets: shroud list # Show all key/value pairs for a saved secret: shroud show bank-account # Show a single value in a secret: shroud show bank-account password # Copy a password directly to X clipboard: shroud show -c bank-account password # Delete a secret: shroud remove bank-account
shroud showto work
Shroud uses the standard GNU build system. To build and install Shroud from source, run:
./configure make make install
Shroud is developed using the Git version control system. The official repository is hosted at https://git.dthompson.us/shroud.git
git clone https://git.dthompson.us/shroud.git
Real-time discussion for Shroud can be found on the
#guile channel on the Freenode IRC network.
Send patches and bug reports to firstname.lastname@example.org.