RESTIC-KEY-ADD(1)

💖 restic-key-add(1) 💖

okay bestie, welcome to the restic backup(1) manual page — yes that's the manual name, don't ask, it's giving brand identity crisis but we move 💅 — and today we're doing restic key add.

---

✨ NAME ✨

restic-key-add — add a new key (password) to the repository; returns the new key ID 🎀

---

🌸 SYNOPSIS 🌸

restic key add [flags]

---

🦋 DESCRIPTION 🦋

The "key add" command creates a new key and validates the key. Returns the new key ID. That's it, that's the whole thing — new key, checked, ID handed back to you. slay. ✨

---

💀 EXIT STATUS 💀

bestie, read this part, it's literally the vibe check on whether things worked:

• Exit status is 0 if the command was successful. 🫶
• Exit status is 1 if there was any error. 😭
• Exit status is 10 if the repository does not exist. 💀
• Exit status is 11 if the repository is already locked. 🔒
• Exit status is 12 if the password is incorrect. 🙈

---

👑 OPTIONS 👑

• -h, --help[=false] — help for add
• --host="" — the hostname for new key
• --new-insecure-no-password[=false] — add an empty password for the repository (insecure)
• --new-password-file="" — file from which to read the new password
• --user="" — the username for new key

⚠️ yes bestie, --new-insecure-no-password literally says insecure in the name. it's not being cute, it's a warning. an empty password means anyone can walk in. periodt.

---

💜 OPTIONS INHERITED FROM PARENT COMMANDS 💜

these are the ones your parent command passed down, like hand-me-downs but actually useful:

• --cacert=[] — file to load root certificates from (default: use system certificates or $RESTIC_CACERT)
• --cache-dir="" — set the cache directory. (default: use system default cache directory)
• --cleanup-cache[=false] — auto remove old cache directories
• --compression=auto — compression mode (only available for repository format version 2), one of (auto|off|fastest|better|max) (default: $RESTIC_COMPRESSION)
• --http-user-agent="" — set a http user agent for outgoing http requests
• --insecure-no-password[=false] — use an empty password for the repository, must be passed to every restic command (insecure)
• --insecure-tls[=false] — skip TLS certificate verification when connecting to the repository (insecure)
• --json[=false] — set output mode to JSON for commands that support it
• --key-hint="" — key ID of key to try decrypting first (default: $RESTIC_KEY_HINT)
• --limit-download=0 — limits downloads to a maximum rate in KiB/s. (default: unlimited)
• --limit-upload=0 — limits uploads to a maximum rate in KiB/s. (default: unlimited)
• --no-cache[=false] — do not use a local cache
• --no-extra-verify[=false] — skip additional verification of data before upload (see documentation)
• --no-lock[=false] — do not lock the repository, this allows some operations on read-only repositories
• -o, --option=[] — set extended option (key=value, can be specified multiple times)
• --pack-size=0 — set target pack size in MiB, created pack files may be larger (default: $RESTIC_PACK_SIZE)
• --password-command="" — shell command to obtain the repository password from (default: $RESTIC_PASSWORD_COMMAND)
• -p, --password-file="" — file to read the repository password from (default: $RESTIC_PASSWORD_FILE)
• -q, --quiet[=false] — do not output comprehensive progress report
• -r, --repo="" — repository to backup to or restore from (default: $RESTIC_REPOSITORY)
• --repository-file="" — file to read the repository location from (default: $RESTIC_REPOSITORY_FILE)
• --retry-lock=0s — retry to lock the repository if it is already locked, takes a value like 5m or 2h (default: no retries)
• --stuck-request-timeout=5m0s — duration after which to retry stuck requests
• --tls-client-cert="" — path to a file containing PEM encoded TLS client certificate and private key (default: $RESTIC_TLS_CLIENT_CERT)
• -v, --verbose[=0] — be verbose (specify multiple times or a level using `--verbose=n``, max level/times is 2)

💀 two options up in here are literally named insecure. --insecure-no-password and --insecure-tls. they are telling on themselves. if you use them, know what you're doing. no cap.

---

🌈 SEE ALSO 🌈

• restic-key(1)

---

okay and for the cute sign-off bestie: this lil masterpiece was generated by restic generate, dated Jan 2017, and it lives under the manual name restic backup(1) (again. iconic of it). love that for us. go add your key, stay secure, mwah 💖✨🎀🦋🌸💅🫶