List and Manage Credentials

List Stored Credentials

To view everything in your vault:

kosh list

You can also list credentials using fuzzy filters:

kosh list github

Or use more precise field filters:

kosh list --label github
kosh list --user pluto
kosh list --label github --user pluto

These filters apply substring-based matching on labels and usernames.

---

Delete a Stored Credential

Deletion Is Permanent

When you delete a credential in Kosh, it is irreversibly removed.

Kosh uses SQLite’s secure-delete mode, meaning:

• The deleted row’s storage space is overwritten with zeroes.
• No residual data remains in the file.
• Recovery is not possible, even with forensic tools.

Be absolutely sure before confirming a deletion.

To remove a credential, use its ID (visible in kosh list):

kosh delete 42

You will be prompted to:

1. Enter your master password, and
2. Type a confirmation phrase (e.g., delete <label> <user>) to finalize deletion.

---

What’s Next?

• Browse the Command Reference
• Learn how Kosh’s encryption system works
• Explore the adaptive search algorithm
• Understand the SQLite vault design