Credentials
Beanscrape stores bank login credentials in your OS-native secure storage.
Storage locations
| OS | Storage |
|---|---|
| macOS | Login Keychain |
| Windows | DPAPI-encrypted file at %LOCALAPPDATA%/beanscrape/credentials.dat |
| Linux | freedesktop Secret Service, or AES-256-encrypted file at ~/.local/share/beanscrape/credentials.dat |
Credentials never leave your machine.
Add credentials
$ beanscrape credential add <bank-id> -u <username>
Password: ********
The password is read from stdin (not echoed).
List stored credentials
$ beanscrape credential list
Shows which bank IDs have stored credentials (passwords are not displayed).
Update credentials
$ beanscrape credential update <bank-id> -u <new-username>
Password: ********
Remove credentials
$ beanscrape credential remove <bank-id>
Environment variables
As an alternative to the credential store, set environment variables:
export [email protected]
export AMEX_PASSWORD=mysecretpassword
Variable names follow the pattern {BANKID}_USERID and {BANKID}_PASSWORD (uppercase, hyphens replaced with underscores).
You can also use a .env file in the current working directory.
Priority order: Environment variables > .env file > credential store.