CLI‑password command

--password-command

Run a shell command to get the iCloud password on each auth attempt.

Usage

kei sync --password-command "op read 'op://vault/icloud/password'"
kei sync --password-command "vault kv get -field=password secret/icloud"
kei sync --password-command "pass icloud/password"

Details

• Default: none
• Type: shell command string
• Env var: KEI_PASSWORD_COMMAND
• TOML key: [auth].password_command
• Conflicts with --password and --password-file

The command runs through the system shell. stdout becomes the password; trailing newlines are stripped. A non-zero exit makes auth fail and includes stderr in the error.

The command is run every time kei needs to authenticate, so temporary tokens and rotated secrets work without restarting watch mode.

Related

• --password
• --password-file
• --save-password
• Credentials