Secret - Encrypt anything with a password

Ever wanted to hide a file? Now you can do it really easily!

Usage

secret {-e/--encrypt | -d/--decrypt} <source> [<destination>]
secret [-h/--help | -v/--version]

For example, run:

echo "foobardata" > foo.txt
secret --encrypt foo.txt

You will be prompted for a password that you can use to recover data later.

Password:

After you input your password, Secret will make an encrypted foo.txt.secret file.

Then, when you want to decrypt foo.txt.secret, you can run:

secret --decrypt foo.txt.secret bar.txt

You must enter the same password you had when you encrypted the data.

Secret then decrypts foo.txt.secret and writes the data to a new file, bar.txt.

If you didn't specify bar.txt, Secret would try to write to foo.txt. However, Secret will never overwrite files and so it would print an error.

Now bar.txt and foo.txt are exactly the same! (you can check this with diff)

For larger files, Secret shows progress bars that indicate how much data has been encrypted or decrypted and even provides estimates for how much time is remaining.

Decrypting  33% ████████████                    (687 MB/2.0 GB, 304.783 MB/s) [2s:4s]

You can also use pipes to specify the password (this can be useful in scripts):

echo "mypass" | secret -e foo   # use "mypass" as password and encrypt foo

Details

Options:
   -e, --encrypt   Encrypt the source file and save to destination. If no
                   destination is specified, secret makes a new file with a
                   .secret extension. This option reads for a password.
   -d, --decrypt   Decrypt the source file and save to destination. If no
                   destination is specified, secret makes a new file without
                   the .secret extension. This option reads for a password.
   -h, --help      Display this help message
   -v, --version   Show secret's version

Installing

brew install quackduck/tap/secret # works for Linuxbrew too!

or get an executable from releases.

Uninstalling

brew uninstall quackduck/tap/secret

or on Unix,

rm $(which secret)

or just delete it from wherever you installed the binary.

Implementation details

Secret uses AES, GCM, Scrypt with N = 2^15, r = 8, p = 1 and a high quality, 32 byte random salt for deriving a key.