We’ve often heard from our community that making Proton Pass data easily accessible in the terminal would significantly improve workflows, especially for development, scripting, and automation.
That’s now possible in our new Proton Pass command-line interface (CLI), which enables you to securely retrieve secrets and other items across scripts, deployments, and continuous integration/ continuous delivery (CI/CD) pipelines. The CLI is now in beta version and available for Visionary supporters, with a broader availability across paid plans coming soon. If you have a visionary plan, you can access the CLI beta(yeni pencere) now.
Proton Pass CLI is a secure command-line interface that makes your Proton Pass items and vaults available directly from the terminal, including the ability to manage permissions for items and vaults. Working with Proton Pass in the terminal enables automation and productivity while maintaining Proton’s end-to-end encryption and privacy guarantees. Instead of relying on the graphical user interface, you can access your Proton Pass data securely in the environments where you already operate, allowing you to automate tasks and work faster without compromising security.
How the Proton Pass CLI works
Proton Pass CLI provides a simple, reliable way to integrate encrypted vaults into your workflows without changing how you work or adding extra steps. In environments where the graphical UI cannot be used, such as servers or CI/CD pipelines, the CLI provides a secure way to access Proton Pass. You can manage items and vaults, and manage user access to them directly from the terminal, enabling automation that speeds up work while keeping everything secure.
What can you use Proton Pass CLI for?
The Proton Pass CLI gives you much of the same functionality as the graphical UI, including the ability to:
- Securely access items directly in the terminal
- View, create, update, and delete items including passwords, secure notes, credit cards, identities, WiFi entries, custom items, and stored SSH-key items
- Create, read, update, and delete vaults
- Manage member access and permissions to shared vaults and items
- Work in CI/CD, servers, containers, and headless environments via app-password authentication
- Create simple scripted workflows and task automation
What are the benefits of using the Proton Pass CLI?
Speed and productivity with automation and scripting
Proton Pass CLI lets you work directly from the terminal, making it easy to automate everyday credential-management tasks. You can script the creation, updating, and deletion of items and vaults, eliminating manual copy-paste or UI steps and helping you move faster without compromising security.
Secure and simple shared credential management
Managing access to shared items and vaults can be automated. Instead of switching to a web admin console or another tool, you can work with shared items and vaults and manage permissions directly from the CLI.
Secure secret injection
With Proton Pass CLI, credentials can be injected directly into scripts, deployments, and CI/CD pipelines without exposing secrets in plaintext, shell, logs, or command history. This enables automation while maintaining Proton’s end-to-end encryption model.
Reduce the complexity of automation
Automation can be complicated, with many service accounts and tokens required to access secrets in scripts or CI/CD pipelines. Proton Pass supports simple, secure app-password authentication usable across all environments, without extra complexity or add-on products. Deployments and automated tasks can run without additional infrastructure or overhead.
By implementing Proton Pass into your existing workflows, you can enable faster workflows, reduce context switching, and implement secure automation across local development, servers, and CI/CD environments. It’s designed to help you work faster and more securely, fitting into your workday with ease.
