cred / a command-line vaultOpen source · MIT

Credentials.
At your command.

An encrypted home for your project credentials. Right where you work: the terminal.

Read the documentation
GET STARTED

One small tool.
Your whole working set.

brew install emircancakmakk/tap/cred
Homebrew · macOS & LinuxInstallation guide
Encrypted with age.
Unlocked with your master password.
TRY THE VAULTInteractive example
cred — ~
DEMO
❯ cred
Master password: ••••••••••••
credlocalProjects
↑ ↓ navigateenter openesc back
Sample data · no real secrets.↑ ↓ ↵ or click
01 / WORKFLOWFind. Select. Copy.

A place for every
credential.

Organize by project, service, and field. Browse with your keyboard, or go straight to the value you need.

Command reference
Skip the browsing. Name what you need.
$ cred
my-projectProject
vercelService
passwordField
Copy on macOS, or add --show for stdout.

Prefer to explore? Run cred, navigate with j k, and press enter to copy.

02 / THE WORKING SETMore than a place to store secrets.

Bring it in. Keep it useful.

Import, update, switch context, and inspect.
A few commands for the whole lifecycle.

COMMAND NOTES

Bring your existing credentials.

Import a version 1 JSON file into your vault. New fields are added in one write; existing fields are skipped without replacing their values.

cred import data.json
  • Every field needs an explicit secret flag.
  • Invalid structure is rejected before the password prompt.
  • The source JSON is plaintext and stays on disk.
Read the full reference
data.jsonEXAMPLE / VERSION 1
{
  "version": 1,
  "projects": {
    "my-project": {
      "services": {
        "vercel": {
          "fields": {
            "email": {
              "value": "[email protected]",
              "secret": false
            },
            "password": {
              "value": "demo-password",
              "secret": true
            }
          }
        }
      }
    }
  }
}
03 / UNDER THE HOODYour files. Your infrastructure.

Local by choice.
Shared when needed.

a.

A vault on your machine

A single encrypted file. Work offline, unlock with your master password, and decrypt values in memory.

vault.age
b.

A shared vault in your Git

Connect a private repository using your existing Git authentication. Your team uses the same commands.

Requires network access. Anyone with repository access and the master password can read the whole vault.

--vault team
c.

Changes handled explicitly

Different fields merge automatically. Same-field conflicts ask you to choose. Failed syncs keep encrypted changes available for retry.

04 / INSTALLATIONFrom zero to your first credential.

Make room for cred.

Build from source
  1. 01

    Install cred

    One command with Homebrew on macOS or Linux.

    brew install emircancakmakk/tap/cred
  2. 02

    Make a vault

    Choose local or Git setup and set your master password.

    cred init
  3. 03

    Add your first credential

    Follow the prompts to add fields and hidden values.

    cred add my-project vercel
05 / NOTES & ANSWERS

Before you
get started.

Ask on GitHub

Small tool. Open code.Make it yours on GitHub