lastpass/lastpass-cli
Lastpass Cli
LastPass CLI is a command-line tool for managing secure credentials, authenticating user identities, and synchronizing encrypted password vaults directly from the terminal. It provides a terminal interface for storing, retrieving, and organizing sensitive account data with local encryption and remote synchronization, functioning as an encrypted vault management tool for handling credential storage across devices using remote authorization endpoints.
The application communicates with remote servers over HTTPS while securing user credentials locally and in transit using client-side symmetric encryption applied before transmission. It supports stateful session management to persist authentication tokens across command invocations, utilizes local file system caching to store encrypted vault blobs for offline access, and reads sensitive inputs securely through standard input streams without echoing characters to the terminal display.
Additional capabilities cover authenticating user accounts, managing session states, organizing and moving vault entries into different folders, and deleting stored account records while synchronizing updates across devices. Users can also manage runtime configuration flags stored securely in local encrypted storage.
Features
- Synced Credential Vaults - Fetches encrypted user account vaults from remote servers, caches local encrypted buffers, and parses secure data blobs.
- Local Data Caches - Stores encrypted vault blobs and session tokens on local disk to minimize network requests and enable offline access.
- Command Line Interfaces - Provides a terminal interface using traditional command-line parsing conventions to execute identity and vault tasks.
- Client-Side Encryption - Secures user credentials locally and in transit using client-side symmetric encryption before transmitting data to servers.
- Encrypted Vaults - Fetches, parses, and updates secure credential storage across devices using remote authorization endpoints.
- Session and Credential Management - Verifies user credentials against remote authorization servers and manages active session tokens from the command line.
- Organizational Vault Administration - Organizes, moves, and deletes encrypted account entries within a password vault from a script or terminal interface.
- Password Management - Manages secure credentials, authenticates user sessions, and syncs encrypted password vaults directly from the terminal.
- Password Managers - Manages secure login credentials, keys, and personal notes directly from the terminal without opening a browser.
- Encrypted Password Management - Provides a terminal interface for storing, retrieving, and organizing sensitive account data with local encryption and sync.
- Session Authentication - Authenticates user identities and manages active secure sessions directly through command line workflows and scripts.
- Session-Cookie Persistences - Persists authentication cookies and tokens across command invocations to avoid repeated password prompts during workflows.
- Account Deletion - Removes account entries from the remote vault and queues synchronization updates to propagate changes across devices.
- Vault Synchronization - Deletes specific account records from the remote vault and synchronizes updated data storage across connected devices.
- libcurl Wrappers - Communicates with remote servers over HTTPS using libcurl to execute REST API requests and secure data transfers.
- Folder Organization - Reorganizes stored credentials into different folders while automatically updating encryption keys and synchronizing remote data.
- Sensitive Input Prompts - Reads sensitive passwords and master keys securely from standard input streams without echoing characters to the terminal.
