[GH-ISSUE #3411] Allow noninteractive and silent usage (or stderr) for `vaultwarden hash` #1558

New issue

Closed

opened 2026-03-03 02:10:14 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 02:10:14 +03:00

Owner

Originally created by @dionysius on GitHub (Apr 3, 2023).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/3411

Subject of the issue

vaultwarden hash currently ask interactively for the password and there is no option to be silent. In my packaging environment there is a way to interactively ask the admin for a password at the right time of the installation. And I would like use this input to generate the argon2 hash and automatically place it in the right place of the config file.

Suggestion: I'd like to pass in the password via STDIN and get only the hash out via STDOUT. (Although prefixed with ADMIN_TOKEN= is also fine, to make life easier for you)

Deployment environment

vaultwarden version: 1.28.1

Install method: debian-packaging (built from source)

Originally created by @dionysius on GitHub (Apr 3, 2023). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/3411   ### Subject of the issue  `vaultwarden hash` currently ask interactively for the password and there is no option to be silent. In my packaging environment there is a way to interactively ask the admin for a password at the right time of the installation. And I would like use this input to generate the argon2 hash and automatically place it in the right place of the config file. Suggestion: I'd like to pass in the password via STDIN and get only the hash out via STDOUT. (Although prefixed with `ADMIN_TOKEN=` is also fine, to make life easier for you) ### Deployment environment     * vaultwarden version: 1.28.1  * Install method: debian-packaging (built from source)

kerem closed this issue

2026-03-03 02:10:14 +03:00

kerem commented

2026-03-03 02:10:15 +03:00

Author

Owner

@BlackDex commented on GitHub (Apr 3, 2023):

I'm not a big fan of piping passwords actually.
While it maybe would be fine for your use case, people tend to use the easy stuff and then passwords end up in the history.

Not sure if you can depend on the argon2 cli tool and use that? That does support what you want.

@BlackDex commented on GitHub (Apr 3, 2023): I'm not a big fan of piping passwords actually. While it maybe would be fine for your use case, people tend to use the easy stuff and then passwords end up in the history. Not sure if you can depend on the argon2 cli tool and use that? That does support what you want.

kerem commented

2026-03-03 02:10:15 +03:00

Author

Owner

@dionysius commented on GitHub (Apr 3, 2023):

I totally understand you have different goals with the command, just asking. Using vaultwarden would've saved me declaring this dependency and maintaining the recommended settings, but it's not a big deal.

@dionysius commented on GitHub (Apr 3, 2023): I totally understand you have different goals with the command, just asking. Using vaultwarden would've saved me declaring this dependency and maintaining the recommended settings, but it's not a big deal.