SQ(1) User Commands SQ(1)

sq key password - Change password protecting secrets

sq key password [OPTIONS] FILE

Change password protecting secrets.

Secret key material in keys can be protected by a password. This subcommand changes or clears this encryption password.

To emit the key with unencrypted secrets, either use `--clear` or supply a zero-length password when prompted for the new password.

Emit binary data
Emit a key with unencrypted secrets
File containing password to encrypt key
Note that the entire key file will be used as the password, including surrounding whitespace like for example a trailing newline
Write to FILE or stdout if omitted
[default: -]
File containing password to decrypt key
Note that the entire key file will be used as the password, including surrounding whitespace like for example a trailing newline
Read from FILE or stdin if omitted
[default: -]

See sq(1) for a description of the global options.

First, generate a key

sq key generate --userid '<juliet@example.org>' \
--output juliet.key.pgp

Then, encrypt the secrets in the key with a password.

sq key password < juliet.key.pgp > juliet.encrypted_key.pgp

And remove the password again.

sq key password --clear < juliet.encrypted_key.pgp \
> juliet.decrypted_key.pgp

sq(1), sq-key(1).

For the full documentation see https://book.sequoia-pgp.org.

0.35.0 (sequoia-openpgp 1.20.0)

0.35.0 Sequoia PGP