Working with lastpass from the commandline

[B. Henry]

I posted a bit about this last year on the Orca list I think, but don't know if I did here.
The info is updated, so even if I posted here you might want to keep reading.
*** Lastpass-cli, AKA lpass
For those who already know about and use lastpass here are installation instructions for a nice command line tool to work with your password data.
For a bit of information about lastpass there are a few notes on my experience below the installation instructions.

** Installation
* For Vinux/Ubuntu install deps with
sudo apt-get install openssl libcurl4-openssl-dev libxml2 libssl-dev libxml2-dev pinentry-curses xclip

* For Debian:
sudo apt-get install openssl libcurl3 libxml2 libssl-dev libxml2-dev libcurl4-openssl-dev pinentry-curses xclip

Unzip the package you download from
https://github.com/lastpass/lastpass-cli/archive/master.zip
and unzip <packagename>
cd <new-dir-from-unzip>
make
sudo make install
To get a manpage you need a lot of dependencies you are not likely to have unless you use docbook, latex, etc.
It was a 700+MB download for me on my Vinux5 box, but now I wonder if recommended dependencies were installed that are not actualy required, so you may
wish to look carefully at the packages that are offered when you run the command below.
sudo apt-get install asciidoc
Then to generate the manpage
sudo make install-doc
Alternatively there is a .txt version in the build directory, so one can read that in a text editor.

* The package in the arch AUR was broken last year, but it is working correctly now.
packer -S lastpass-cli
should do the trick, or use another AUR helper.

* The README has installation instructions for other distros.

** background notes
Lastpass is perhaps the world's most popular password manager, and I've used it for years, first on Windows when it was only available as a firefox
extension, and then with firefox on Linux.
I also use the chrome flavor of the extension, and have tried the universal installers for both Linux and Windows although I usually choose to install
individually for each browser.

The browser extensions are very nicely accessible and nicely customizable making it easy to configure security to be as strict or lax is is best for
you.

I am not sure that the lastpass password vault web interface is any more or less
usable with orca than with any other screenreader, and it can be a bit confusing in my experience using firefox and orca.
While there is some reason to be concerned over the future of lastpass on Linux since this excellent password manager/formfiller browser extension was
bought by logmein, I am cautiously optimistic as I don't think any extra work is required to keep lastpass working on linux browsers, i.e firefox and
chrome for those who must have speech and or braille.
The browser extensions are nicely accessible on Linux, and also with the browsers I've tested on Windows. I've not had the chance to try the android or
iIOS versions which I think do require the payed premium version of LP.
The websiteis a bit less fun to work with as indicated above, so if one wants to edit data for a saved password,or just look at a PW one may have long
since forgotten things can be slower than they might like.
This is where lastpass-cli comes in.

While I was looking at the lastpass website to see how to do something I stumbled uppon this commandline application that saves one from having to use
the web interface to edit or export saved PW data.
It is said to work with GNU-Linux, OSX and cygwin.
This could be especially handy for folks who have a server, virtual or otherwise that they can access when they don't have their own computer available.

** A couple of starter commands
The executable is called lpass, and installs in /usr/bin by default.

* Log-in to get started.
lpass login associated-email
You will be asked for your password at this point.

* Get a list of your saved password data including how lastpass is configured to use them.
lpass export > filename
If you don't use the greater than sign and a file name then data is streamed to stdout, and if you have anywhere as many passwords as I do will not fit
on a screen.
You can pipe to a pager if you do not want a file to potentially hang around for someone to read later, e.g.
lpass export|less
Unless you use a lastpass master password agent feature that keeps your lastpass password available for a user configurable amount of time you must
reenter your PW after using the export command.

See the manpage for more commands and configuration options.
You can edit and delete passwords, syncing with the lastpass servers in configurable ways.
Enjoy!


--
B.H.
Registerd Linux User 521886

[B. Henry]

There;'s not mulch one can do in the way of preconfiguring lpass cli, but thought I'd explain one thing and give an example as the manpage is not the
clearest, especially to those newer to Linux and or manpages.
You can see what is available in the way of environment variables in the manpage if you installed it, and if not reading the doc file you find in the
directory you unzipped to install lastpass-cli.
First thing, no configuration file is created by default.
Make a text file called env in your .lpass directory, e.g.
nano ~/.lpass/env
You can not add comments it seems. Each line is read as a variable.
The one I set ws the agent time out. By default your password is saved for an hour, but I will mostly use this either to export a list of passwords or
to change or delete one or two, i.e. I probbly will be finished with what ever I'm doing in a few minutes, so I gave myself a 35 minute window to work.
Actually, I still have to enter my password to export, so not sure just which commands do and do not access the password agent.
LPASS_AGENT_TIMEOUT=2100
is the only line I have in my /home/myusername/.lpass/env file.
You can completely disable the agent, set an alternative home directory and a couple other things, but as I said, really not much can be preconfigured.
Still, this is oh so much faster than dealilng with the web interface if your browser is having a finicky day, or like me you are more in the habbit of
searching for text in files than on webpages, and it's been hard to work with the web interface on good days/accessiblity has varied some over the years
I've used lastpass.

--
B.H.
Registerd Linux User 521886

B. Henry wrote:
Tue, Mar 15, 2016 at 06:34:23PM -0600

> --
> Remember to frequently check our Wiki: http://wiki.vinuxproject.org
> Our website: http://www.vinuxproject.org
> You can search or view our group on the web: http://groups.google.com/group/vinux-support
> Talk to us on IRC irc.vinuxproject.org #Vinux
>
> Unsubscribe from Vinux by emailing vinux-suppor...@googlegroups.com
> ---
> You received this message because you are subscribed to the Google Groups "Vinux support forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to vinux-suppor...@googlegroups.com.