Command-line client for Nextcloud’s Passman.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Go to file
Damien Goutte-Gattat 1f53dfcaba
Handle possible corruption of the `info` file.
It may happen (it actually happened at least once) that the `info` file
exists in the on-disk cache, but is somehow corrupt and does not contain
the expected data.

If the contents of the file cannot be decoded as valid JSON, or if it is
decoded as nothing, we act as if the file did not exist and get the data
straight from the server.
7 months ago
docs Prepare 1.0.0 release. 2 years ago
incenp Handle possible corruption of the `info` file. 7 months ago
.gitignore Update for Eclipse/PyDev. 3 years ago
AUTHORS Update distribution files. 2 years ago
COPYING Initial commit. 5 years ago Include the documentation in the source archive. 3 years ago
NEWS Prepare new release. 1 year ago Remove obsolete notice about BSD-licensed code. 1 year ago
pyproject.toml Switch to Black-enforced code style. 1 year ago Switch to Black-enforced code style. 1 year ago

Pebble - Command-line Passman client

Pebble is a command-line client for the Passman password manager.

It supports read and write access to Passman vaults: it can list, show, create, modify or delete entries in a vault. It cannot, however, create or delete the vaults themselves.


Pebble requires a configuration file describing the vault(s) to use. The configuration file uses the INI syntax and is expected to be at $XDG_CONFIG_HOME/pebble/config by default; another location may be specified using the -c option.

A vault is described in the configuration file by a section like in the following example:

user: alice
password: mypassword
vault: MyVault

The file may contain several sections, one for each different vault. Use the -s option to specify the name of the section to use (and thus, which vault to connect to). By default, a section named default will be used.

Inside a vault section, the password field may be omitted, in which case the password will be asked interactively. Note: This is the Nextcloud password, not the vaults password! The vault password is always asked interactively.


With at least one vault configured, Pebble may then be used through the pbl command and its subcommands. Current available subcommands are:

  • list to list credentials in the vault;
  • show to display a credentials details;
  • new to add a new credential;
  • edit to modify a credential;
  • delete to remove a credential from the vault;
  • export to dump all credentials to a file;
  • conf to create or edit the configuration file;
  • refresh to forcefully refresh the local cache;
  • clear to empty the local cache.

In addition, calling pbl without any subcommand will start an interactive shell in which subcommands can be invoked successively without quitting the program.

Calling pbl with the -h option will display the general help; calling a given subcommand with the -h option will display the help for that subcommand.

The program will interactively for the vault passphrase when it is needed to decrypt or encrypt a credential.


Pebble is distributed under the terms of the GNU General Public License, version 3 or higher. The full license is included in the COPYING file of the source distribution.

Homepage and repository

The project is located at with the manual at The source code is available in a Git repository at