One Seed to Rule Them All>

SeedPass deterministically derives every key and password from a single 12-word phrase.

[ALPHA BRAVO CHARLIE DELTA ECHO FOXTROT GOLF HOTEL INDIA JULIET KILO LIMA]

│

├─► Passwords

├─► 2FA Codes

├─► SSH Keys

├─► PGP Key

├─► Nostr Keys

├─► Documents

└─► Managed Accounts

# Install SeedPass - Includes checksum verification

❯ bash -c "$(curl -sSL https://raw.githubusercontent.com/PR0M3TH3AN/SeedPass/main/scripts/install.sh)"

# System_Features

Deterministic Gen

BIP-85 deterministic password generation. No server needed.

Encrypted Vault

Local storage for seeds and sensitive data, heavily encrypted.

Nostr Sync

Relay integration with chunked snapshots (50KB) & deltas.

Profile Switching

Manage multiple seed profiles & fingerprints securely.

Interactive TUI

A fast, keyboard-first terminal interface for advanced users.

Secret Mode

Copy to clipboard directly, clearing automatically after delay.

Document Entries

Store rich text content with file types like md, txt, py, and edit in-terminal.

Entry Timestamps

All entry kinds include date_added and date_modified for deterministic auditability.

Entry Graph Links

Create typed relationships between entries using target_id, relation, and note.

# For_Agents

Machine-readable discovery, non-interactive auth, scoped access, and audit-first automation.

# Bootstrap context before autonomous execution

❯ seedpass capabilities --format json && seedpass agent bootstrap-context

Brokered Auth

Use keyring or command brokers for non-interactive unlock without plaintext env secrets.

Policy as Code

Lint, review, and apply policy files with deterministic output and risk-gated changes.

Scoped Identity & Tokens

Issue revocable TTL-bound tokens tied to agent identities, kinds, scopes, and use limits.

Safe Output & Leases

Default redaction plus one-time or N-use secret leases for reduced exposure in logs and pipelines.

Approval + Isolation

Step-up approvals and separate high-risk unlock factors for seed/SSH/PGP/Nostr retrieval paths.

Audit, Posture, Recovery

Chained audit logs, posture checks/remediation, Shamir split-drills, and deterministic export validation.

Agent Document I/O

Policy-gated agent document-import and agent document-export for controlled filesystem workflows.

Graph-Aware Entry Ops

Automate knowledge links with entry link-add, entry links, and entry link-remove.

# Architecture_Overview

// The BIP-85 standard derives multiple child seeds from a single master seed.

Master_Seed

├── Child_Seed_0 [Index 0]

│ └── Password_A

├── Child_Seed_1 [Index 1]

│ └── Password_B

└── Child_Seed_2 [Index 2]

└── Password_C

> Knowledge Graph Example

[12] Ops Runbook (document)
  ├─ references ──> [7] API Token (key_value)
  ├─ depends_on ──> [3] Deploy SSH (ssh)
  └─ rotates_with -> [9] Prod MFA (totp)

Query: "depends_on" or "deploy ssh" -> returns entry 12

> Recovery via Nostr

Restoring a vault on a new device requires the 12-word master seed and the master password. Without the correct password the downloaded archive is unreadable.

> Security Disclaimer

[WARNING] Memory management & logs not formally audited. Loss of parent seed places all derived passwords at risk.