{"id":28256452,"url":"https://github.com/rrbarrero/pass-web","last_synced_at":"2025-06-16T17:31:41.028Z","repository":{"id":291726302,"uuid":"978569757","full_name":"rrbarrero/pass-web","owner":"rrbarrero","description":"A Web Interface for pass (Password Store)","archived":false,"fork":false,"pushed_at":"2025-05-18T20:09:01.000Z","size":315,"stargazers_count":8,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-25T16:49:15.207Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"CSS","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rrbarrero.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-06T07:30:33.000Z","updated_at":"2025-05-24T18:32:53.000Z","dependencies_parsed_at":"2025-05-06T08:45:51.185Z","dependency_job_id":"1747ef59-efa8-4eb8-9c5f-e1de578b43e4","html_url":"https://github.com/rrbarrero/pass-web","commit_stats":null,"previous_names":["rrbarrero/pass-web"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rrbarrero/pass-web","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rrbarrero%2Fpass-web","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rrbarrero%2Fpass-web/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rrbarrero%2Fpass-web/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rrbarrero%2Fpass-web/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rrbarrero","download_url":"https://codeload.github.com/rrbarrero/pass-web/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rrbarrero%2Fpass-web/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260204366,"owners_count":22974122,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-19T22:16:50.366Z","updated_at":"2025-06-16T17:31:41.018Z","avatar_url":"https://github.com/rrbarrero.png","language":"CSS","funding_links":[],"categories":[],"sub_categories":[],"readme":"# WebPass - A Web Interface for pass (Password Store)\n\n**WebPass** is a modern and user-friendly web interface for [pass](https://www.passwordstore.org/), the standard Unix password manager. It combines a React frontend with a FastAPI backend to provide secure and convenient access to your password store from the browser.\n\n![alt text](docs/theme0.png)\n(default theme)\n\n\u003e ⚠️ This project is provided as-is. Use at your own risk. I am not responsible for any damage or data loss caused by the usage of this application.\n\n## 🔐 Focus on Security\n\nWebPass prioritizes security at every step:\n\n- **JWT (JSON Web Tokens)** for user authentication and session management.\n- **GPG** integration to maintain full compatibility with `pass`.\n- **Crucially, the GPG master password is never saved or cached at any time or location by WebPass.** It is used only temporarily during the decryption process.\n\n\n---\n\n🚨 **IMPORTANT SECURITY NOTICE: USE HTTPS** 🚨\n\nFor any production or even personal use where WebPass is accessible over a network (including `localhost` if other users or processes on your machine could intercept traffic, or any non-localhost access), **it is STRONGLY RECOMMENDED to deploy WebPass behind a reverse proxy configured with HTTPS (SSL/TLS).**\n\n- **Why?** Without HTTPS, your login credentials (username/password for WebPass) and the GPG passphrase (if entered in the frontend) will be transmitted in **plain text** between your browser and the WebPass backend. This makes them vulnerable to interception by anyone.\n- **How?** Configure a web server like Nginx, Caddy, or Apache as a reverse proxy to handle incoming HTTPS connections, terminate SSL/TLS, and then forward the requests to WebPass (which can then run on HTTP locally on the server). Services like Let's Encrypt offer free SSL certificates.\n\n**Never expose WebPass directly to the internet or an untrusted network over plain HTTP if you are concerned about the security of your credentials.**\n\n---\n\n## 🎨 Extensible and Themed\n\nWebPass is designed to be easily extensible:\n\n- Add new **themes** with minimal effort to match your personal style or organization branding.\n- Built with modularity in mind, allowing future enhancements or custom features.\n\n![alt text](docs/theme1.png)\n(retro theme)\n![alt text](docs/theme2.png)\n(cyberpunk theme)\n\n* You can select the desired theme on frontend/.dev and rebuild frontend container.\n\n## 📁 Host Requirements\n\nBefore running WebPass, ensure the following are properly set up on the host machine:\n\n- A cloned repository of your personal `pass` store (e.g., `~/.password-store`).\n- The corresponding **GPG keys** must already be available.\n- The `docker-compose` service mounts these directories **as read-only**, meaning your data remains untouched and secure by design.\n\nThese requirements are critical for WebPass to function correctly, as it relies on the host’s `pass` and GPG environment to operate securely.\n\n## 🚀 Quick Start\n\n### Prerequisites\n\n- `curl`\n- `bash`\n- `docker` and `docker-compose`\n\n### Installation \u0026 Run\n\n```bash\ncurl -sSL https://raw.githubusercontent.com/rrbarrero/pass-web/main/ops/install.sh | bash\n```\n\n🧪 Development Status\nThis project is under active development. Expect rapid iterations, breaking changes, and new features. Contributions and feedback are welcome!\n\n📄 Disclaimer\nThis software is provided without any warranty. You are solely responsible for how you use it. Make sure you understand the implications of exposing password management to a web interface.\n\n📄 License: GNU GPLv3","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frrbarrero%2Fpass-web","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frrbarrero%2Fpass-web","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frrbarrero%2Fpass-web/lists"}