redenv/Docs

change-password

Change the Master Password for a project.

Edit this page

The change-password command updates the Master Password for a project, re-encrypting the Project Encryption Key (PEK).

Usage#

redenv change-password [project]

Arguments#

NameRequiredDescription
projectNoProject name (prompts interactively if omitted)

Examples#

# Change password interactively
redenv change-password

# Change password for specific project
redenv change-password my-app

Interactive Flow#

$ redenv change-password

? Select project to change password for: my-app
Changing Master Password for project "my-app".
? Enter your CURRENT Master Password: ********
⠋ Verifying password and unlocking project...
✔ Current password verified.
? Enter your NEW Master Password: ********
? Confirm your NEW Master Password: ********
⠋ Re-encrypting project key...
✔ Successfully changed Master Password for project "my-app".
  Your new password is now in effect. The old password will no longer work.

How It Works#

  1. Verifies your current Master Password
  2. Decrypts the PEK using your current password
  3. Re-encrypts the PEK using your new password
  4. Updates the encrypted PEK in Redis
  5. Clears the cached password from your keychain

Info

Your secrets are not re-encrypted. Only the PEK is re-encrypted with the new password. This makes password changes fast and efficient.

Requirements#

  • New password must be at least 8 characters long
  • You must know the current Master Password

Important Notes#

  • All team members with the old password will need the new one
  • Existing service tokens remain valid (they don't use the Master Password)
  • Store your new password in a secure password manager

Error

Remember your new password! It cannot be recovered if lost. There is no password reset mechanism.

Related Commands#