This commit is contained in:
2025-05-28 14:06:29 -07:00
parent efedbe405f
commit 354681b298
14 changed files with 1749 additions and 239 deletions

View File

@@ -12,15 +12,15 @@
the first and initial vault is titled `default`.
* `secret init` initializes a new vault. this will create a new profile and
generate a new long-term keypair. the long-term keypair is used to
encrypt and decrypt secrets. the long-term keypair is stored in the
vault. the private key for the vault is encrypted to a short-term
keypair. the short-term keypair private key is encrypted to a passphrase.
to generate the long-term keypair, a random bip32 seed phrase is
generated, then the process proceeds exactly as `secret import private`.
* `secret init` initializes a new vault and imports a user-provided BIP39
mnemonic phrase. The user must provide their own mnemonic phrase. The
long-term keypair is derived from this mnemonic. The long-term keypair is
used to encrypt and decrypt secrets. The long-term keypair is stored in the
vault. The private key for the vault is encrypted to a short-term keypair.
The short-term keypair private key is encrypted to a passphrase.
the randomly generated bip32 seed phrase is shown to the user.
Use `secret generate mnemonic` to create a new BIP39 mnemonic phrase if you
need one.
if there is already a vault, `secret init` exits with an error.