/docs/commands/audit.md

audit command

The audit command will decrypt all secrets and scan for weak passwords or other common flaws.

Synopsis

$ gopass audit

Excludes

You can exclude certain secrets from the audit by adding a .gopass-audit-exclude file to the secret. The file should contain a list of RE2 patters to exclude, one per line. For example:

# Lines starting with # are ignored. Trailing comments are not supported.
# Exclude all secrets in the pin folder.
# Note: These are RE2, not Glob patterns!
pin/.*
# Literal matches are also valid RE2 patterns
test_folder/ignore_this
# Gopass internally uses forward slashes as path separators, even on Windows. So no need to escape backslashes.

Exit codes

Code	Meaning
0	No issues found
14	One or more weak passwords or issues detected

See docs/exit-codes.md for the full table.

Password strength backends

Backend	Description
crunchy	Crunchy password strength checker
name	Checks if password equals the name of the secret