AlmondPass 0.2.0 for Linux
==========================

A password manager that keeps your passwords in an encrypted database on
your computer and, if you like, synchronizes it between your devices through
almondpass.com. The database can only be read with your passphrase, the
synchronization service only ever stores it encrypted.

This is a single executable for 64 bit x86 Linux. It needs no libraries or
drivers, only an X11 display, which every desktop provides, X.Org or
Wayland with XWayland.


Installing
----------

almondpass.com/downloads/ has the SHA-256 checksum of each package next to
it. Download both, check the package and install it:

    sha256sum -c almondpass_0.2.0_amd64.deb.sha256
    sudo apt install ./almondpass_0.2.0_amd64.deb

AlmondPass is then in the applications menu, or run it as

    almondpass [--database PATH] [--server URL]

Installing a newer package updates it, also over the Electron client:
AlmondPass opens its database and keeps its online sync login.
sudo apt remove almondpass removes it again and keeps your database.


Your data
---------

The database is ~/.local/share/almondpass/secrets.db, the one the other
AlmondPass desktop clients use. Keep a copy of it somewhere safe: without
your passphrase nobody can open it, not even AlmondPass.

With online sync, signing in from the Online Sync screen makes this computer
one of your account's devices, which almondpass.com lists, renames and signs
out. Its key is stored next to the database, encrypted.


Security
--------

- The passphrase only derives the database key and is wiped afterwards.
  Secrets are kept in guarded memory and wiped when the database locks:
  after five minutes without input, on Ctrl+L and when AlmondPass closes.
- Copied passwords are cleared from the clipboard after 30 seconds and
  marked so that clipboard managers that honour it do not keep them.
- AlmondPass talks to almondpass.com only over TLS, verified against the
  Mozilla certificate authorities built into the executable.

Report security issues to contact@support.almondpass.com.


Licences
--------

AlmondPass is copyright Manticus Research Ltd and released under the MIT
licence in copyright. It contains the software listed in licenses/README.txt,
under the licences in the licenses directory. BUILDINFO.txt records how this
release was built.
