pass-ssh-unpack
| Crates.io | pass-ssh-unpack |
| lib.rs | pass-ssh-unpack |
| version | 0.6.0 |
| created_at | 2026-01-04 16:39:09.355028+00 |
| updated_at | 2026-01-07 05:35:08.335088+00 |
| description | A utility for unpacking proton's pass-cli ssh keys into usable ssh and rclone configurations. |
| homepage | |
| repository | https://github.com/Frosthaven/pass-ssh-unpack |
| max_upload_size | |
| id | 2022166 |
| size | 191,174 |
Shane Stanley (Frosthaven)
documentation
README
pass-ssh-unpack
[!IMPORTANT] This tool is still in the PROTOTYPE phase. Expect breaking changes. It is not recommended for use in production environments.
A utility for unpacking SSH keys and generating SSH/rclone configurations from Proton Pass and Teleport.
Guides
| Guide | Description |
|---|---|
| Proton Pass | Extract SSH keys from Proton Pass to local files |
| Teleport | Import Teleport nodes for rclone access |
Features
- Interactive mode: Menu-driven interface when run without arguments
- Cross-platform: Works on Linux, macOS, and Windows
- Automatic SSH config generation: Creates host entries with aliases
- Machine-specific keys: Filter keys by hostname suffix (e.g.,
github/my-laptop) - Incremental updates: Only processes changed items by default
- Rclone integration: Automatically creates SFTP remotes for each SSH host
- Wildcard filtering: Filter vaults and items using glob patterns
- Progress indicators: Visual feedback with spinners and progress bars
- Encrypted rclone config: Supports encrypted rclone configs with password from Proton Pass
- Teleport support: Import Teleport nodes as rclone-compatible items
Requirements
- Proton Pass CLI (
pass-cli) - OpenSSH (
ssh-keygen) - rclone (optional, for SFTP remote sync)
- Teleport CLI (
tsh) (optional, for--from-tsh)
Installation
From crates.io
cargo install pass-ssh-unpack
From source
git clone https://github.com/Frosthaven/pass-ssh-unpack.git
cd pass-ssh-unpack
cargo build --release
# Binary will be at ./target/release/pass-ssh-unpack
Add to PATH
# Linux/macOS
sudo cp target/release/pass-ssh-unpack /usr/local/bin/
# Or symlink
ln -s "$(pwd)/target/release/pass-ssh-unpack" ~/.local/bin/pass-ssh-unpack
Quick Start
Interactive Mode
Run without arguments for a menu-driven interface:
pass-ssh-unpack
The interactive menu provides options to:
- Export Proton Pass SSH keys to local machine
- Import Teleport nodes into Proton Pass
- View current status (managed keys, remotes, locations)
- Purge managed resources
Proton Pass
Extract SSH keys and generate configs:
# From all vaults
pass-ssh-unpack
# From specific vault
pass-ssh-unpack --vault Personal
# Preview changes
pass-ssh-unpack --dry-run
See the Proton Pass Guide for full documentation.
Teleport
Import Teleport nodes for rclone access:
# Import nodes to a vault
pass-ssh-unpack --from-tsh --vault "Teleport Servers"
# Then generate rclone remotes
pass-ssh-unpack --rclone
See the Teleport Guide for full documentation.
License
MIT License - see LICENSE for details.