YB-STORE(1)

💾 YB-STORE(1) — the store girlies' moment ✨

okay so bestie, welcome to yb-store — the actual manual page for the store command, aka the one that puts your little blobs on the YubiKey. it's giving "packing my emotional baggage into hardware" 🎀 and honestly? iconic.

---

✨ NAME ✨

store — Store a blob on the YubiKey 💅

---

🦋 SYNOPSIS 🦋

store [-n|--name] [-e|--encrypted] [-u|--unencrypted] [--no-compress]
[-h|--help] [FILES]

---

🌸 DESCRIPTION 🌸

so what does it do? you write one or more binary blobs to the YubiKey. that's it. that's the vibe. each blob gets its own little short name — at most 32 bytes babes, don't push it 😭 — and when a blob with the same name already exists, it gets replaced atomically. no half-written mess, no "oops my key is corrupt now", just a clean swap. slay.

blobs are compressed before storage by default. yb literally tries both brotli (level 11) and xz (preset 9) and keeps whichever came out smaller 🏆. and if neither algorithm actually shrinks the thing? it just stores the blob uncompressed. no drama, no wasted effort. pass --no-compress to skip compression entirely — super useful for already-compressed data like JPEG, ZIP, or existing brotli/xz archives (compressing those is giving "studying for a test you already passed" 💀).

blobs are also encrypted by default using AES-256-GCM, with a key derived via ECDH from the public key stored in the configured PIV slot. very main character security energy 🔐. pass --unencrypted to skip encryption — but like, use with care, bestie. for real.

---

💖 OPTIONS 💖

• -n, --name <NAME> — override the blob name. required when reading from stdin, and only valid with a single file. one file, one name, periodt 🫶
• -e, --encrypted — encrypt the blob. this is the default behavior anyway, but hey, sometimes you just want to say it out loud.
• -u, --unencrypted — store the blob unencrypted. no cap, be careful with this one 🙈
• --no-compress — skip compression. useful for already-compressed data. (this is your "don't squeeze the zip file" flag 🍓)
• -h, --help — print help 💜
• [FILES] — source files to store. the blob name defaults to each file's basename. if no files are given, the payload is read from stdin — which requires --name. no name, no entry, iykyk ✨

---

🧚 EXAMPLES 🧚

store a file (blob name = basename):

yb store secret.key

store with an explicit name:

yb store -n mykey /path/to/key.pem

store several files at once:

yb store a.key b.key c.key

pipe from stdin:

pass show mysite | yb store --name mysite

store unencrypted (plain-text blob):

yb store --unencrypted config.toml

store without compression (e.g. already-compressed binary):

yb store --no-compress archive.tar.xz

---

👀 SEE ALSO 👀

yb(1), yb-fetch(1), yb-remove(1), yb-fsck(1) — go read those too, they're literally the whole friend group 🌈

---

vibe check passed ✅ — the compression + encryption defaults are doing a lot of heavy lifting for you, so like… maybe don't turn them off without a reason? no pressure tho 😌

---

and that's the page!! brought to you by yb, version 2026-03, dated 2026-03 — go store something iconic bestie 🎀💖✨