kosh init

Initialize the vault of the active profile with a master password.

kosh init

Arguments: none.

You are prompted for a master password twice. The password itself is never stored: it is combined with a random salt to derive the key that encrypts the vault’s private key, and re-derived every time you unlock the vault.

Notes

• Safe to re-run. If the vault is already initialized it reports vault already initialized and exits without touching any existing data.
• Only needed for the first profile. Profiles made with kosh profile create are initialized as part of creating them.
• Losing the master password permanently locks the vault — there is no recovery mechanism and no way to reset it.

Example

kosh init

See also

• Quick Start — the full first-run walkthrough
• Encryption Architecture — what initialization actually creates