RESTIC-KEY-PASSWD(1)

💖 restic-key-passwd(1) — the "new password, who dis" page 💖

okay bestie, welcome to the restic backup(1) manual, specifically the little corner of it that handles restic-key-passwd. this is where you change your repo key (a.k.a. your password), and honestly? it's giving ✨glow-up✨. no cap.

---

🌸 NAME 🌸

restic-key-passwd — change key (password); creates a new key ID and removes the old key ID, returns new key ID. periodt. 💅

---

🎀 SYNOPSIS 🎀

restic key passwd [flags]

---

🦋 DESCRIPTION 🦋

so the key passwd command does three iconic things in a row, main character energy fr fr:

1. creates a new key 🔑
2. validates that key ✅
3. removes the old key ID 🗑️

and then it returns the new key ID, because obviously you gotta know what your new fave is called. 💖

---

⭐ EXIT STATUS ⭐

the vibes are measurable, and here's the vibe check:

• exit status is 0 if the command was successful 🎉
• exit status is 1 if there was any error 😭
• exit status is 10 if the repository does not exist 💀
• exit status is 11 if the repository is already locked 🔒
• exit status is 12 if the password is incorrect 🙈

---

✨ OPTIONS ✨

one bullet per flag, no skipping, we don't do that here 🫶

• -h, --help[=false] — help for passwd. your lil "what does this do again" button 🌈
• --host="" — the hostname for new key 🏠
• --new-insecure-no-password[=false] — add an empty password for the repository (insecure) ⚠️

bestie. look at the word "insecure" in that flag name. it's there for a reason. an empty password is insecure, fr fr, tread carefully.

• --new-password-file="" — file from which to read the new password 📄
• --user="" — the username for new key 👤

---

💜 OPTIONS INHERITED FROM PARENT COMMANDS 💜

these are the ones you get from the parent commands, no extra work required, slay 🧚

• --cacert=[] — file to load root certificates from (default: use system certificates or $RESTIC_CACERT) 🔐
• --cache-dir="" — set the cache directory. (default: use system default cache directory) 🗂️
• --cleanup-cache[=false] — auto remove old cache directories 🧹
• --compression=auto — compression mode (only available for repository format version 2), one of (auto|off|fastest|better|max) (default: $RESTIC_COMPRESSION) 🗜️
• --http-user-agent="" — set a http user agent for outgoing http requests 🌐
• --insecure-no-password[=false] — use an empty password for the repository, must be passed to every restic command (insecure) 😬
• --insecure-tls[=false] — skip TLS certificate verification when connecting to the repository (insecure) 🚨
• --json[=false] — set output mode to JSON for commands that support it 📊
• --key-hint="" — key ID of key to try decrypting first (default: $RESTIC_KEY_HINT) 🔎
• --limit-download=0 — limits downloads to a maximum rate in KiB/s. (default: unlimited) ⬇️
• --limit-upload=0 — limits uploads to a maximum rate in KiB/s. (default: unlimited) ⬆️
• --no-cache[=false] — do not use a local cache 🚫
• --no-extra-verify[=false] — skip additional verification of data before upload (see documentation) 👀
• --no-lock[=false] — do not lock the repository, this allows some operations on read-only repositories 🔓
• -o, --option=[] — set extended option (key=value, can be specified multiple times) 🛠️
• --pack-size=0 — set target pack size in MiB, created pack files may be larger (default: $RESTIC_PACK_SIZE) 📦
• --password-command="" — shell command to obtain the repository password from (default: $RESTIC_PASSWORD_COMMAND) 💻
• -p, --password-file="" — file to read the repository password from (default: $RESTIC_PASSWORD_FILE) 📁
• -q, --quiet[=false] — do not output comprehensive progress report 🤫
• -r, --repo="" — repository to backup to or restore from (default: $RESTIC_REPOSITORY) 🗄️
• --repository-file="" — file to read the repository location from (default: $RESTIC_REPOSITORY_FILE) 📍
• --retry-lock=0s — retry to lock the repository if it is already locked, takes a value like 5m or 2h (default: no retries) 🔁
• --stuck-request-timeout=5m0s — duration after which to retry stuck requests ⏱️
• --tls-client-cert="" — path to a file containing PEM encoded TLS client certificate and private key (default: $RESTIC_TLS_CLIENT_CERT) 🪪
• -v, --verbose[=0] — be verbose (specify multiple times or a level using `--verbose=n``, max level/times is 2) 🗣️

---

🌈 SEE ALSO 🌈

• restic-key(1) — go read the rest of the key family, they're all icons 👑

---

and that's the page, bestie!! this was generated by restic generate, dated Jan 2017, from the restic backup(1) manual. stay encrypted, stay hydrated, mwah 💋💖🦋