turtle-cpm is a command line tool to manage passwords, a replacement of the now gone cpm project.

The latest version is v6.0, released on 2022-08-17. See the release notes.

Notable features:

  • Simple database format: encrypted SQLite (via gpg), tracking machines, services, users and passwords
  • Supports plain passwords and also Time-based one-time password (TOTP) shared secrets, calculating the actual TOTP code via oathtool
  • Can import the original cpm's XML database
  • A little bit better than trivial search: you can search for e.g. ldap or mybank without telling if you are searching for a service type or machine name

The turtle

The turtle-cpm codebase is independent from the original cpm. It's turtle because this project is not in C, so might be a little bit slower (though not significantly in practice).


turtle-cpm is free and open source. You can find the source code on GitHub and issues and feature requests can be posted on the issue tracker. If you'd like to contribute, please consider opening a pull request.


Use of this source code is governed by a BSD-style license that can be found in the LICENSE file.