The shortcut to open the global search window is cmd + shift + p. It should be configurable. The setting should be persistent.

On OSX, the trend in menu bar icons is monochrome.

code to support dark and light mode:

const getTrayImage = () => {
    const icon = nativeTheme.shouldUseDarkColors ? 'icon-dark-mode.png' : 'icon.png'

    return path.join(__dirname, 'assets', icon)
}

Thanks for the awesome tool and the blog post. In case any other gentoo users want to use it, I've added a gentoo ebuild 1 to our portage overlay 2. It uses the released deb from the github release packages.

Integrating all commands related to management of mounts which refers to directories that Gopass manages as stores. One should be able to:

1. See a list of mounts
2. Remove mounts
3. Add mounts

gopass is configured and working on commandline. After installing following the instructions, gopass-ui doesn't start:

gopass-ui
[2682:0710/084341.870175:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/Gopass UI/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap

When setting the mode with:

chmod 4755 /opt/Gopass UI/chrome-sandbox

it still doesn't start:
gopass-ui
Trace/breakpoint trap

If Gopass finds no secrets containing passwords, the resulting status finishes successful but contains no results as nothing was to be rated.

In this case it should be displayed that nothing was available for analysis.

A short GIF could show better how gopass-ui is used and what features it supports.

Ubuntu 18.04, all updates installed
gopass configured and working on command line, environment test of gopass-ui says "Everything looks fine"
using local password store

• When adding a password using the + button, it is not displayed in the left tree
• When deleting a password, it is not removed from the left tree. When clicking on it then, the following is displayed:
  1.Loading, please wait
  2.Still doing something...
  3.It seems to takes some time... (should be "take", not "takes")
  4.Doop di doop di douuu
  5.I'm sorry that it takes longer
  6.Maybe there is a persistent problem. Sorry for that!

Workaround is to restart the gui every time a password was added or deleted, then the updated tree is displayed correctly

For secrets which are detected as passwords, a strength indicator should show how good a password is. The following rules seem to be a good starting point:

1. Minimum length: 8 characters
2. Mixed case: contains lower and upper case letters
3. Includes letters, numbers and symbols

Enhanced ones, can be covered on a later point of time:

4. Does not contain many repeated characters like AAAAAb!1
5. Not equal or similar (Levenshtein distance?) to other passwords in the store
6. Is not a keyboard walk (e.g. qWertz123!)
7. Is not inside common brute force password lists

(inspired by https://stackoverflow.com/a/2075027/5500928)

So we have deployed our gopass repository to github. I tried using the Gopass UI and updated the store. But couldn't sync it with github.

Thanks for the 0.70 update! awesome work.

Creating a new issue to further discuss this closed issue

Bummer about the app switcher hiding thing #43
Would it be possible to make it optional, so those that want to hide that app can hide it?
I use Command-Shift-P when I need to search for a password, not the app switcher, I like to keep the app-switcher with the fewest amount of apps possible.

Regarding the dock, I don't keep the app in the dock as i have set it to start up when i log in :)
Then i do Command-Shift-P when i need a password, start typing the path, then hit enter to copy the password to the clipboard. Very efficient.

Hello all,

the latest version doesn't have a deb file.

Can you please provide that?

Hi, I use arch btw.

Like this project a lot and converted the .deb package with debtap to a pacman (arch linux package manager) compatible tar.gz file.

Would be awesome to have such a package also released for fellow arch linux users which loves gopass and also want to use your gopass-ui right away.

I don't know about the process to get into the AUR (arch user repository) - but providing a package here in github is good enough.

Thank you
Steven

1. In the detail view of a secret, it should show whether this secret is a password by showing an icon if applicable
2. In the left sidebar navigation, the mechanism to show the password icon should also rely on evaluating the password secret path RegEx.

Ideas for later: In the settings, a RegEx should be configurable that determines if a secrets' path yields a password. The default value should simply detect a password if "password" is included in the secrets' path.

Mac OS 10.14
gopass CLI correctly encrypts & decrypts using my Encryption subkey, but gopass-UI seizes upon the master key, which was "removed" during GPG key creation. Here listed are my keys:

➜ ~ gpg --list-secret-keys
/Users/herk/.gnupg/pubring.kbx

sec# rsa4096 2020-05-16 [C]
B632FAE4E38007F7E0EAC765977BFD885398E03D
uid [ultimate] Rexford Gibbs [email protected]
uid [ultimate] RJ Gibbs [email protected]
ssb rsa4096 2020-05-16 [S]
ssb rsa4096 2020-05-16 [E]
ssb rsa4096 2020-05-16 [A]

The hash char (#) after the first key, sec#, indicates that the master key is offline.

Can gopass-UI be configured to use the encryption subkey ssb rsa4096 2020-05-16 [E]?

Thanks.
Rexford Gibbs

found 10 vulnerabilities (9 moderate, 1 high)

Currently alerts are just displayed or not. The user experience could be improved by a simple and smooth animation.

A new screen shall offer everything related to recipient management like documented from Gopass: https://github.com/gopasspw/gopass/blob/master/docs/features.md#managing-recipients

1. Show the list of recipients (gopass recipients)
2. Provide an action to update (recompute) the recipients' checksums (gopass recipients update)
3. Provide an action to add/authorize recipients (gopass add or gopass authorize)
4. Provide an action to remove/rm/deauthorize recipients (gopass remove|rm|deauthorize)

have a look here: https://www.electron.build/auto-update

Macbook Pro Mojave 10.14.6

Environment Test Fails
Oops, something went wrong!
It wasn't possible to decrypt your secrets.

1. gopass is installed, and I have run gopass init and selected a private key for encrypting secrets.
2. pinentry is installed and working correctly.
3. I have a new gpg key and an additional gpg subkey installed - but never tested.
4. I added a first secret with gopass insert personal/email-pw

1. App feels sluggish when clicking on a new entry - needs 3-5 secs to show password
2. During this time it already shows the new key with the old secret value

A already working blueprint with travis ci integration can be found here:
https://github.com/codecentric/merge-request-notifier

The password health should only be reviewed once per application usage.

A nice feature would be if it is also possible to have "file" operation support, as that would greatly enhance the usability (and which is cumbersome on the console) eg:

• renaming
• moving
• copy
• deleting (with acknowledgement "do you really want...?") => never mind, noticed that this is part of the opened secret window itself.

(edit typo)

Start Gopass UI
Close Explorer window
Start Explorer window from the Gopass UI toolbar and you get.

Uncaught Exception:
Error: Object has been destroyed
    at click (/Applications/Gopass UI.app/Contents/Resources/app.asar/dist/main.js:42:3322)
    at MenuItem.click (/Applications/Gopass UI.app/Contents/Resources/electron.asar/browser/api/menu-item.js:56:9)
    at Function.executeCommand (/Applications/Gopass UI.app/Contents/Resources/electron.asar/browser/api/menu.js:31:13)

In addition, search window will allow searching, but clicking on a password path does nothing.

Currently we always create a new window when the user clicks on the tray menu and selects on of the apps.

This needs to be fixed.

Show the outputs of gopass config in a section of the settings screen

Currently the left sidebar navigation has a fixed width. The content area on the right side will occupy the rest of the window width. Problem: on smaller devices, screens with low resolution or devices on which accessibility helper tools are used so a very high zoom factor is used, the content part becomes very small (if not even invisible).

Solution: Use automatic layouting using native power of CSS, e.g. flexbox or native CSS grid layout.

The password-creation dialog is currently rather crude in that one needs to write the complete path into the "secret name"-field. Even the cli with its completion features is much better there.

Seeing the store with the tree in the lefthand-side, I would expect to be able to see which item in the tree is currently active.
Then when clicking the plus-Icon, at least the "secret name"-field should be pre-filled with what is selected on the lefthand-side.
Even better, right-clicking in the tree could have a context-menu that allows (possibly among other things) for creation of new items, it being subfolders in the tree or passwords.

It's not working yet but should not be that much effort. It could also use some basic security and dependency checks.

It would be great to add a new menu entry to switch into some "testdata" mode. So it's easy to take screenshots without any production gopass store.

One solution could be:

• Load the renderer app with a query parameter like ?test-data=1 when the "test-data"-mode is active.
• In the app we could simple check for this query param with the following snipped and always return some static list of secrets.

const url = new URL(document.location.href)
const SHOW_TEST_DATA = url.searchParams.has('test-data')

With QtPass it is possible to edit/retrieve multiline content. This does not seem to be possible with the current version of Gopass UI (0.4.0). It would be nice to have this feature also in the Gopass UI!

BUG:
By clicking on "EDIT" Button - then click on any other entry in the stores tree = the input stays in edit mode with the information of the last active entry but shows the new clicked entrys name. This is confusing and leads to input mistakes from a ux perspective.

EXPECTED BEHAVIOUR:
Modal which askes if i want to cancel the operation or to save it on leaving this view.
OR
If there have been no changes simple quit the edit mode.

Thanks in advance.

when safecontent is enabled, the password shown is No safe content to display, you can force display with show -f.Copying password instead.✔ Copied XXX to clipboard. Will clear in 45 seconds. and the edit button shows the exact same text.

This adds functionality on top of managing only mounts. In addition one shall be able to init stores and clone existing stores from Git repositories.

Cloning and initialising

The other part related to this would be cloning existing (from Git repository) and initialising new password stores from the UI. Features to add to the UI:

1. Initialise a new store (gopass init <gpg-key-reference> --path <path> --store <name>)
2. Clone an existing store from Git with a name (e.g. gopass clone [email protected]/pass-work.git work) to init the store in a non-default directory (e.g. $HOME/.password-store-work)

Thanks for 0.60, it's fixed the issue #31 in Mojave and Catalina.

The following feature would be great though:

In the explorer, have the passwords hidden by default, with one extra button like this:

[COPY TO CLIPBOARD] [SHOW] [EDIT] [DELETE]

On OSX, the trend in menu bar icons is monochrome. Can we get a menu bar icon to match the dark or light themes of OSX?

Currently a click on the sync button will only execute gopass sync without an effect on the UI. Since the store could have been changed by remote, the tree navigation shall be updated.

Code related information

State containing tree navigation and secret names does currently sit in the top component of the application within the React component state. It is already passed down to other components. Doing it in the same matter (passing it down) would require it to be passed another additional way down, which would be very ugly.
It should be extracted into a context so that the context can be used throughout all components in the hierarchy.

• A view indicating an overall password health score in the range from 0-100% health
• A list of all rules and how much passwords do comply out of the total
• A list of passwords having <100% health, ordered by their health descending and being linked to (so that users can see the detailed password health on the secret detail view)

When having Chars like "(", ")" or Backtick inside the file or password gopass-ui is not able to save or access the file because of sh errors as those Chars are not escaped and are valid sh syntax.

When I create a new store item with
$ gopass create

the label with the passwort shows something like this:
m.y.s.e.c.r.e.t.p.a.s.s.w.d.comment: url: github.comusername: [email protected]

Add a configuration to automatically hide the secret values in the explorer.

In this mode the user has to click a "show" button next to the "copy to clipboard" button to show the value of the secret.

MacOS version : 10.15.3
Gopass version : 1.8.6
Gopass UI version : 0.6.0
I am able to see the store and the list of it's contents but unable to see individual secrets. when I clcik on any entry in store the UI hangs on loading screen

The history of a secret can become very long since onboarding new team members results in removing and re-adding participants, technically. A simple pagination with configureable page size is useful.

As this is an application that I launch at boot and is running constantly in the background, it would be nice to be able to remove it from the Dock in OSX when it is running, as we can access from the Task Bar icon. All the gopass-ui settings are accessed through the UI.

This would further streamline this excellent tool.