-
vault 0.5 Stable
released this
2026-10-02 23:13:06 +02:00 | 30 commits to master since this releaseUnlock once, stop typing your passphrase:
vault unlockasks once, then remembers the key for 5 minutes (--for 30mfor longer), likessh-agent. Commands skip the prompt until a hard deadline counted from when you unlocked, so a laptop left open still locks itself;vault lockforgets the key at once. The key reaches a small helper process over a pipe and is never written to disk. The helper keeps it in memory locked against swapping, can't be core-dumped (or, on Linux, debugged), and answers only on a socket in a directory private to your user.VAULT_PASSPHRASE, when set, always wins, so scripts behave as before. While unlocked, anything running as you can use the vault, so lock before handing the machine to anyone.Copy and move like the shell:
vault mvnow moves whole folders, and as withmv, a target ending in/or naming an existing folder means into it (vault mv notes.md ideas/). Newvault cpcopies a file, or a folder with-r. A copy shares the original's encrypted data, so it is instant and takes no extra space, and deleting either leaves the other intact. Neither command overwrites an existing name.Get a whole folder back:
vault get -r FOLDER [-o DIR]decrypts everything under a folder, keeping its structure, with the same never-overwrite, verify-first checks asget.Also: an updated user guide (
vault-guide.pdf) with the new commands and screenshots, man pages (vault-man-pages.tar.gz, now withvault-cp,vault-unlockandvault-lock), andSHA256SUMSfor the binaries.Downloads