Create a store

If you already have a store in a git repository, skip to Connect the app.

HardenedPass cannot generate OpenPGP keys, so you need a computer for this part, with GnuPG, pass and git installed. Most Linux distributions package all three.

Make a key pair

bash

1

gpg --full-generate-key

Accept the default key type, enter your name and an address, and choose a strong passphrase. You will type it often, so pick one you can remember.

Create the store

Use the address you gave the key:

bash
      
1
2

pass init you@example.org
pass git init

The first command creates the store in ~/.password-store and writes .gpg-id. The second turns it into a git repository.

Add a first entry so that you have something to test with. -m lets you type several lines; finish with Ctrl+D:

bash

1

pass insert -m example.org

1
2


hunter2
username: alice

Add a remote

Create an empty, private repository on a git server you can reach over SSH or HTTPS. A hosting service works, and so does a server of your own. Then connect the store to it and send it there:

bash
      
1
2

pass git remote add origin git@git.example.org:store.git
pass git push -u origin HEAD

Export the private key

The phone needs a copy of the private key:

bash

1

gpg --armor --export-secret-keys you@example.org > private-key.asc

Handle this file with care

Move private-key.asc to the phone over USB, not through email or a cloud drive. Delete every copy from the phone’s storage and from the computer once the app has imported it. The app keeps its own.

Also keep a backup of the key offline, for example on an encrypted USB stick. See Concepts for why.

Create a store

// Make a key pair

// Create the store

// Add a remote

// Export the private key

Make a key pair

Create the store

Add a remote

Export the private key