pacli is a secure, local-first secrets manager that stores your passwords, API keys, and SSH credentials with encryption and master password protection - no cloud dependencies required.
- Securely store and manage secrets locally
- Master password protection
- Support separate options for token, password, and SSH connections
- Add, retrieve, update, and delete secrets
- Copy secrets directly to your clipboard
- SSH connection management with key file support
- URL shortening with LinklyHQ integration
- Export list of secrets into JSON or CSV file
- Easy-to-use command-line interface
- Web UI for managing secrets through a modern web interface
pip install pacli-toolTo see all available commands and options:
pacli --help| Command | Description |
|---|---|
init |
Initialize pacli and set a master password |
add |
Add a secret with a label |
get |
Retrieve secrets by label |
get-by-id |
Retrieve a secret by its ID |
update |
Update old secret by label |
update-by-id |
Update old secret by its ID |
list |
List all saved secrets |
delete |
Delete a secret by label |
delete-by-id |
Delete a secret by its ID |
ssh |
Connect to SSH server using saved credentials |
short |
Shorten URLs using LinklyHQ service |
cc |
Copy stdin content to clipboard |
change-master-key |
Change the master password without losing data |
export |
Export secrets to JSON or CSV format |
web |
Launch the Web UI for managing secrets |
version |
Show the current version of pacli |
# Initialize pacli (run once)
pacli init
# Add a password
pacli add --pass github
# Add a token
pacli add --token api-key
# Add SSH connection
pacli add --ssh ec2-vm user:192.168.1.100
# Add SSH connection with key file
pacli add --ssh ec2-vm user:192.168.1.100 --key ~/.ssh/id_rsa
# Retrieve a secret
pacli get github
# Connect via SSH
pacli ssh ec2-vm
# Export secrets to JSON
pacli export --format json --output my_secrets.json
# Export secrets to CSV
pacli export --format csv --output my_secrets.csv
# Shorten a URL
pacli short https://example.com/very/long/url
# Shorten with custom name and copy to clipboard
pacli short https://example.com -n "My Link" --clip
# Copy file content to clipboard
cat file.txt | pacli cc
# Copy command output to clipboard
echo "Hello World" | pacli cc
# Copy API response to clipboard
curl -s https://api.example.com/data | pacli ccLaunch the Web UI to manage your secrets through a modern, user-friendly interface:
# Start the Web UI (opens in your default browser)
pacli web
# Start on a custom host and port
pacli web --host 0.0.0.0 --port 8080
# Start without opening browser
pacli web --no-browserThe Web UI provides:
- 🔐 Master password authentication
- 📋 View, add, edit, and delete secrets
- 🔍 Search and filter secrets by type
- 📋 Display secrets with creation/update timestamps
- 👁️ Toggle secret visibility
- 📋 Copy secrets to clipboard
- 🎨 Responsive design for desktop and mobile
- Credentials are shown as:
username:password - SSH connections are shown as:
user:iporuser:ip (Key: /path/to/key)
To copy a secret directly to your clipboard, use the --clip option:
pacli get google --clipUse pacli cc to copy any command output or file content to clipboard:
# Copy file contents
cat ~/.ssh/id_rsa.pub | pacli cc
# Copy command output
ls -la | pacli cc
# Copy JSON response
curl -s https://api.github.com/user | pacli ccFor more information, use pacli --help or see the documentation.
To avoid entering your master password repeatedly, you can set it as an environment variable:
# For current session only
export PACLI_MASTER_PASSWORD="your-master-password"
# Or add to your shell profile for permanent use
echo 'export PACLI_MASTER_PASSWORD="your-master-password"' >> ~/.bashrc # For bash
echo 'export PACLI_MASTER_PASSWORD="your-master-password"' >> ~/.zshrc # For zshSecurity Note: Adding the password to your shell profile makes it persistent but less secure. Use the session-only approach for better security.
To use the URL shortening feature, set up your LinklyHQ credentials as environment variables:
# Set LinklyHQ credentials
export PACLI_LINKLYHQ_KEY="your_api_key"
export PACLI_LINKLYHQ_WID="your_workspace_id"
# Add to your shell profile for permanent use
echo 'export PACLI_LINKLYHQ_KEY="your_api_key"' >> ~/.bashrc
echo 'export PACLI_LINKLYHQ_WID="your_workspace_id"' >> ~/.bashrcVisits here to get your credentials.