.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH SQ 1 0.31.0 Sequoia-PGP "User Commands"
.SH NAME
sq key password \- Changes password protecting secrets
.SH SYNOPSIS
.br
\fBsq\fR [\fIGLOBAL OPTIONS\fR] \fBkey password\fR [\fIOPTIONS\fR] \fIFILE\fR
.SH DESCRIPTION
Changes password protecting secrets.
.PP
Secret key material in keys can be protected by a password.  This
subcommand changes or clears this encryption password.
.PP
To emit the key with unencrypted secrets, either use `\-\-clear` or
supply a zero\-length password when prompted for the new password.
.PP


.SH OPTIONS
.SS "Global options"
.TP
\fB\-\-cert\-store\fR=\fIPATH\fR
Specifies the location of the certificate store
.TP
\fB\-f\fR, \fB\-\-force\fR=\fIFORCE\fR
Overwrites existing files
.TP
\fB\-\-keyring\fR=\fIPATH\fR
Specifies the location of a keyring to use
.TP
\fB\-\-known\-notation\fR=\fINOTATION\fR
Adds NOTATION to the list of known notations
.TP
\fB\-\-no\-cert\-store\fR=\fINO_CERT_STORE\fR
Disables the use of a certificate store
.TP
\fB\-\-output\-format\fR=\fIFORMAT\fR
Produces output in FORMAT, if possible
.TP
\fB\-\-output\-version\fR=\fIVERSION\fR
Produces output variant VERSION.
.TP
\fB\-\-pep\-cert\-store\fR=\fIPATH\fR
Specifies the location of a pEp certificate store
.TP
\fB\-\-time\fR=\fITIME\fR
Sets the reference time as ISO 8601 formatted timestamp
.TP
\fB\-\-trust\-root\fR=\fIFINGERPRINT|KEYID\fR
Considers the specified certificate to be a trust root
.SS "Subcommand options"
.TP
\fB\-B\fR, \fB\-\-binary\fR=\fIBINARY\fR
Emits binary data
.TP
\fB\-\-clear\fR=\fICLEAR\fR
Emit a key with unencrypted secrets
.TP
\fB\-o\fR, \fB\-\-output\fR=\fIFILE\fR
Writes to FILE or stdout if omitted
.SH EXAMPLES
.PP

.PP
First, generate a key
.PP
.nf
.RS
sq key generate \-\-userid "<juliet@example.org>" \-\-output juliet.key.pgp
.RE
.fi
.PP

.PP
Then, encrypt the secrets in the key with a password.
.PP
.nf
.RS
sq key password < juliet.key.pgp > juliet.encrypted_key.pgp
.RE
.fi
.PP

.PP
And remove the password again.
.PP
.nf
.RS
sq key password \-\-clear < juliet.encrypted_key.pgp > juliet.decrypted_key.pgp
.RE
.fi
.SH "SEE ALSO"
.nh
\fBsq\fR(1).
.hy
.PP
For the full documentation see <https://docs.sequoia\-pgp.org/sq/>.
.SH VERSION
0.31.0 (sequoia\-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))
