A professional command-line tool for securely storing and managing sensitive information such as API keys, access tokens, and service credentials. All data is encrypted using AES-256-GCM and stored locally.

• Features
• Installation
• Quick Start
• Commands
• Security
• Examples
• Contributing
• Releases
• Support

• 🔐 AES-256-GCM encryption with scrypt key derivation (N=32768, r=8, p=1)
• 🔑 Master password protection - never stored, only hashed
• 🔄 On-demand unlock - prompts for password when needed, no manual unlock required
• 📁 Project-based organization - group secrets by application/service
• 📋 Clipboard integration with automatic clearing after TTL
• 🔍 Search functionality for quick access across all projects
• 📄 Environment file export (.env generation) for development workflows
• 🌍 Cross-platform support (macOS, Linux, Windows)
• 🔒 Secure file permissions - vault files created with 0600 permissions

• Memory safety: Sensitive data cleared from memory immediately after use
• No password storage: Only password hash stored for verification
• No session persistence: Password required for each vault operation (stateless)
• Secure vault location:
  • macOS/Linux: ~/.uzp/uzp.vault
  • Windows: %USERPROFILE%\.uzp\uzp.vault

# NPM (Recommended)
npm install -g uzp-cli

# Alternative package managers
yarn global add uzp-cli    # Yarn
pnpm add -g uzp-cli        # PNPM  
bun add -g uzp-cli         # Bun

# Manual installation
git clone https://github.com/hungnguyen18/uzp-cli.git
cd uzp-cli && go build -o uzp

# NPM Registry Configuration (if needed)
cp .npmrc.example .npmrc   # Edit for custom registries

# 1. Check installation
uzp -v                             # Verify installation

# 2. Initialize vault with master password
uzp init

# 3. Add your first secret
uzp add
# Project: myapp
# Key: api_key 
# Value: sk-1234567890abcdef

# 4. Use your secrets
uzp get myapp/api_key              # Display secret
uzp copy myapp/api_key             # Copy to clipboard
uzp inject -p myapp > .env         # Export as .env file

UZP-CLI follows security-first principles:

• 🔐 Encryption: AES-256-GCM with random salts and nonces
• 🔑 Key Derivation: scrypt with secure parameters (N=32768, r=8, p=1)
• 🛡️ Password Protection: Master password never stored, only its hash
• 🧹 Memory Safety: Sensitive data cleared from memory after use
• 📁 File Permissions: Vault files created with 0600 (user-only access)
• 📋 Clipboard Safety: Automatic clearing after configurable TTL

• ⚠️ Never share your master password
• 🔒 Keep your vault file secure and backed up
• 🔑 Use a strong, unique master password (12+ characters recommended)
• 🚫 Don't store your master password in scripts or files

For security issues, see our Security Policy.

# Check version and initialize
uzp -v                      # Check installed version
uzp init                    # Initialize vault

# Add secrets
uzp add  # myapp/api_key
uzp add  # myapp/database_url
uzp add  # aws/access_key_id

# Use secrets in development
uzp inject -p myapp > .env.local
uzp inject -p aws > aws.env
uzp copy myapp/api_key

# Search and manage
uzp list                    # View all secrets
uzp search database         # Find specific secrets
uzp update myapp/api_key    # Update existing values

# Export project secrets
uzp inject -p myapp > .env

# Multiple environments
uzp inject -p myapp > .env.local
uzp inject -p myapp-prod > .env.production

# Preview before export
uzp inject -p myapp

Generated .env format:

# Environment variables for project: myapp
# Generated by uzp
API_KEY=your_secret_value
DATABASE_URL=postgresql://user:pass@host:5432/db

New contributors: Get started quickly with the Quick Start section in our Contributing Guide! ⚡

Our Contributing Guide covers everything from 5-minute setup to comprehensive development practices, security requirements, and submission process.

Thank you for helping make UZP-CLI more secure! 🔐

Release Information:

• 🔔 Latest: Check GitHub Releases for newest version
• 📅 Schedule: Monthly minor releases, patches as needed for critical bugs
• 📦 Versioning: Follows Semantic Versioning (vMAJOR.MINOR.PATCH)
• 📝 Notes: Detailed release notes with features, fixes, and contributor credits

# Check your installed version
uzp -v          # Short form
uzp --version   # Long form

# Update to latest version  
npm update -g uzp-cli

Get Help:

• 🐛 Bug Reports - Report issues
• 💡 Feature Requests - Suggest improvements
• ❓ Questions - Ask the community
• 🔒 Security Issues - Private security reporting

Resources:

• 📖 Contributing Guidelines - Development and contribution guide
• 🔐 Security Policy - Security practices and vulnerability reporting
• 📦 NPM Package - Official package
• 🏗️ Technical Docs - Internal documentation for maintainers
• 📜 License - MIT License

UZP-CLI - Your secrets, secured locally. 🔐