Your terminal clipboard, always within arm's reach. Save anything - tokens, connection strings, commands, snippets - and paste it anywhere in one command. No more hunting through notes or browser tabs. Sensitive values are encrypted and never leave your machine, so what's yours stays yours.
Secure by default. No cloud, no daemon, no drama.
Every secure entry is encrypted at rest with AES-256-GCM. Keys are derived with Argon2id and a unique per-entry salt — a compromised database reveals nothing without your master password.
psst never accepts secret values as CLI flags. Secure entries are entered through a hidden prompt or read directly from the clipboard — your terminal history stays clean.
psst get writes directly to the system clipboard without printing to stdout. Set clipboard_clear_after to auto-wipe the clipboard after a configurable number of seconds.
Avoid re-typing your master password on every command. Set a session_timeout and psst caches the password locally for that window — stored at chmod 600, deleted on expiry.
psst list github filters entries by substring. Make a typo with psst get? psst suggests the closest matching keys using Levenshtein distance — no more copy-paste of exact names.
No cloud, no network calls, no telemetry. Everything lives in ~/.persist/data.db on your machine. Works fully offline and responds instantly.
A minimal, auditable stack — no hidden dependencies.