lockedpass-cli 0.1.3

Official CLI for LockedPass — zero-knowledge password manager

LockedPass CLI

Official command-line interface for LockedPass — a zero-knowledge password manager for teams and AI agents.

All encryption and decryption happens locally on your machine. The server never sees your master password, private key, or any plaintext credential data.

Requirements

• Python 3.11+
• A LockedPass account (Pro plan or higher)
• An active CLI token generated from Settings → API & CLI

Install

pip install lockedpass-cli

Quick start

lp login [e-mail]
# Master password: ••••••••  (prompted once, then cached)

lp vault list
lp ls
lp get "GitHub"
lp get "GitHub" --field password

Commands

Command	Description
lp login <email>	Authenticate — master password required once
lp lock	Wipe cached keys (re-prompt on next use)
lp unlock	Re-cache keys from master password after lock
lp vault list	List all vaults
lp ls	List credentials in default vault
lp get <name>	Show a credential
lp get <name> --field password	Print a single field (scriptable)
lp add	Create a credential interactively
lp edit <name>	Edit a credential
lp rm <name>	Delete a credential
lp otp <name>	Generate a live TOTP code
lp generate	Generate a random password
lp copy <name>	Copy password to clipboard (clears in 30s)
lp status	Show session status
lp logout	Clear saved session

Non-interactive / AI agent use

The master password can be passed as an argument or environment variable — useful for automation and AI agents:

# Argument
lp login [e-mail] "$LP_AI_PASSWORD"

# Environment variable
LP_MASTER_PASSWORD="$LP_AI_PASSWORD" lp login [e-mail]

After login the session is cached — subsequent commands run without any password.

See AGENT.md for the full AI agent setup guide.

Security

• Argon2id key derivation — only a one-way hash (auth_verifier) is sent to the server
• X25519 + XSalsa20-Poly1305 (NaCl) for vault key encryption
• XSalsa20-Poly1305 for credential data encryption
• Private key and vault keys never leave your machine in plaintext
• Session cached with a random local key — wiped on lp lock

License

Copyright (c) 2026 Nextcoders LLC. All Rights Reserved. — see LICENSE