sq-key-password - Man Page
Change password protecting secrets
Synopsis
sq key password [Options] FILE
Description
Change password protecting secrets.
Secret key material in keys can be protected by a password. This subcommand changes or clears this encryption password.
To emit the key with unencrypted secrets, either use `--clear` or supply a zero-length password when prompted for the new password.
Options
Subcommand options
- -B, --binary
Emit binary data
- --clear
Emit a key with unencrypted secrets
- --new-password-file=NEW_PASSWORD_FILE
File containing password to encrypt key
Note that the entire key file will be used as the password, including surrounding whitespace like for example a trailing newline
- -o, --output=FILE
Write to FILE or stdout if omitted
[default: -]
- --old-password-file=OLD_PASSWORD_FILE
File containing password to decrypt key
Note that the entire key file will be used as the password, including surrounding whitespace like for example a trailing newline
- FILE
Read from FILE or stdin if omitted
[default: -]
Global options
See sq(1) for a description of the global options.
Examples
First, generate a key
sq key generate --userid '<juliet@example.org>' \ --output juliet.key.pgp
Then, encrypt the secrets in the key with a password.
sq key password < juliet.key.pgp > juliet.encrypted_key.pgp
And remove the password again.
sq key password --clear < juliet.encrypted_key.pgp \ > juliet.decrypted_key.pgp
See Also
For the full documentation see <https://book.sequoia-pgp.org>.
Version
0.35.0 (sequoia-openpgp 1.20.0)