GitHub - ahmedhosssam/vd: TUI Password Manager and 2FA/OTP Authenticator

vd is TUI password manager and OTP authenticator for Unix systems (Linux and MacOS).

Features

• Encrypting the credentials using GPG.
• 2FA/OTP Authentication, you can finally get your OTP codes from your computer without reaching your phone.
• Import your existing OTP secrets from Google Authenticator.
• Scriptability with cli arguments (see Usage).
• Built-in random password generator.
• Export credentials to csv.

Installation

For Linux and MacOS, you can download a binary from here.

Build from source:

git clone https://github.com/ahmedhosssam/vd.git
cd vd
go mod tidy
go build cmd/vd/main.go
mkdir -p ~/.local/bin && mv main ~/.local/bin/vd

Usage

You can open the TUI by:

Or use it from the cli:

Commands:
  add      Add a new password [--name password_name --password password]
  get      Copy a password to clipboard
  delete   Delete a stored password [-f|--force]
  change   Change a stored password
  otp      Add an OTP or copy its code [add|get otp_name]
  register Register a new GPG key
  ls       List stored passwords
  gen      Generate a random password to clipboard
  export   Export passwords to a CSV file in the home directory [password_name]
  import   Import OTP secrets from a Google Authenticator export QR image [otp google path/to/img.jpg]

How Does vd Work?

• vd relies on gpg keys for encryption, so we don't implement any encryption algorithms ourselves, we use GPG for encrypting/decrypting the credentials on the disk.
• vd creates its own gpg key by default when you first register by $ vd register or through the TUI by /register. But if you want to use your already existing gpg key for encryption, you can just type the email that's registered for your key in ~/.local/share/vd/gpg_email.txt.
• NOTE: Once the credential is encrypted with a specifc GPG key, it will be decrypted only with the same key, even if you changed ~/.local/share/vd/gpg_email.txt. That's how GPG works.
• ~/.local/share/vd/gpg_email.txt only affects encryption, that's why we encourage you not to change the first-created gpg key to keep all credentials decryptable with the same key.
• vd stores the encrypted passwords in ~/.local/share/vd/passwords/ so be careful and don't delete this directory because vd doesn't have backups by default yet.