password-manager

What This Skill Does

The password-manager skill provides a comprehensive, fully local security solution for OpenClaw users, eliminating the need to rely on insecure clipboard practices or external third-party password vault services. By leveraging AES-256-GCM encryption, it ensures that your credentials remain encrypted on your local machine, accessible only through a master password. Beyond storage, it acts as an intelligent agent, utilizing sensitive information detection to identify potential credentials in your conversations and proactively offering to secure them. This skill includes robust features such as version control, operational logs for auditing, and a built-in cryptographically secure password generator to help you maintain high-strength unique credentials across all your accounts.

Installation

To add this skill to your OpenClaw environment, execute the following command in your terminal:

clawhub install openclaw/skills/skills/jixsonwang/password-manager

Once installed, you must initialize the vault by running password-manager init. During this setup, you will be prompted to create a master password. It is highly recommended to select a strong, unique passphrase of at least 12 characters that includes a mix of alphanumeric and special characters.

Use Cases

• Unified Credential Storage: Store API keys, tokens, and login credentials in a centralized, encrypted location that is easily queryable by your OpenClaw agent.
• Proactive Security: Automatically detect when you paste sensitive keys or passwords into the agent and trigger an automated request to save them securely.
• High-Strength Security: Generate cryptographically secure passwords for new registrations or security updates directly through natural language commands.
• Auditability: Maintain a local record of all secret operations, allowing you to track when credentials were accessed or modified.

Example Prompts

1. "Save my AWS access key to the vault as 'aws-prod-key' with the tag 'infrastructure'."
2. "Generate a 32-character secure password and save it for my new Netflix account."
3. "Search for the login details I saved for GitHub and display the password."

Tips & Limitations

• Master Password: The master password is the only key to your data. Since this skill is fully local, there is no 'reset password' functionality if you lose the master password. Store it safely.
• Caching: The 48-hour master password cache balances convenience and security. For high-security environments, ensure your local workstation is physically secure.
• Updates: Always use the built-in version history feature before performing bulk deletions or updates to your entries to ensure you can roll back if needed.