[pass] [ANNOUNCE] pass v1.5 released, with support for 'team pass'

Jason A. Donenfeld Jason at zx2c4.com
Sat Apr 12 21:32:53 CEST 2014

Hash: SHA1

Hi folks,

Pass is the standard unix password manager. We have just finished version 1.5.

This is a massive release, coming around 18 months since our last. We've
incorporated tons of fixes and added some nice new features, including the
much demanded "team pass" support, allowing pass to be used with multiple gpg
keys in a variety of settings.

== Password Store on the Web ==

* Our homepage:

* Man page:

* Git repository:

* Mailing list:
  <mailto:password-store at lists.zx2c4.com>

Without further ado, here's what's new in version 1.5.

== Features ==

* Team pass is now possible! At last! Each .gpg-id file may contain multiple
  IDs, separated by a new line, and `pass init` now takes multiple options for
  specifying multiple keys with which to populate .gpg-id.

* Different directories may now have their own .gpg-id, and `pass init` has
  now learned a -p/--path switch for writing this file. This may be used to
  have different access permissions for different sub-folders.

* All temporary files, even ones that exist merely in a tmpfs ram disk, are
  overwritten with random data before deletion, using shread or wipe,
  depending on the platform.

* If git is in use, all commits can be signed with the "user.signingkey" ID if
  "pass.signcommits" is enabled in git-config. This protects against remote

* Clipboard selection can now be overwritten using the
  PASSWORD_STORE_X_SELECTION environment variable, and the timeout time before
  restoring the clipboard can be overwritten using PASSWORD_STORE_CLIP_TIME.

* The umask can now be overwritten with the PASSWORD_STORE_UMASK environment

* gpg v1 can be used, in addition to the already supported v2

== Bug Fixes ==

* Do not race between clipboard restoration instances at once
* We now properly follow symlinks with tree and with reencryption
* Fix conflict between passwords and directories with the same name
* Bash completion goes in the correct folder
* Many bash and sed simplifications and optimizations
* `mktemp` now uses the correct argument order
* We no longer use GPG compression, due to security concerns
* Documentation improvements
* Bash, zsh, and fish completion clean-ups
* Lots of import script fixes
* Non-recursive makefile
* On re-encryption in `pass init`, a pipe failure no longer blanks file

== New Import Scripts from Contributors ===

* KED password manager
* Revelation password manager
* Keepass2 password manager
* Gorilla password manager
* Pwsafe password manager

== Other Contributed Projects ==

* A firefox plugin
* An iOS app
* A dmenu script

Moving forward we've got some nice things planned, such as finally adding a
`pass search` command, and other commonly requested features.

== Downloading v1.5 ==

* <http://git.zx2c4.com/password-store/snapshot/password-store-1.5.tar.xz>
  766915f15ad7b5e94b720d62fca5bf4acae961c2 (sha1)
  ca094372e1eec8c857b2f6ace09fb723 (md5)

* The tag 1.5 is signed with my gpg key:

Thanks to all the contributors who made this release happen! There's been a
lot of churn this release, so if I've broken anything, expect a .1 soon. In
either case, packagers: bump your packages.

Version: GnuPG v2.0.22 (GNU/Linux)


More information about the Password-Store mailing list