---
name: "kwalletaskpass"
section: "1"
platform: "linux"
package: "kwalletcli"
version: "3.03-1+b1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/kwalletaskpass"
---

# kwalletaskpass(1)

kwalletNbased passNphrase dialog for use with OpenSSH

## NAME

**kwalletaskpass** – kwalletNbased passNphrase dialog for use with OpenSSH

## SYNOPSIS

**kwalletaskpass** \[*options*\] *label*

## DESCRIPTION

**kwalletaskpass** is a kwalletN and pinentryNbased passNphrase dialog for use with OpenSSH. It is intended to be called from the sshNadd(1) program and not invoked directly.

If a passphrase is requested, **kwalletaskpass** works by first looking up the passphrase in the KWallet by means of [kwalletcli(1)](/kwalletcli/1.md); using it if found, then calling [kwalletcli\_getpin(1)](/kwalletcli_getpin/1.md) to interactively retrieve an answer from the user via **pinentry** otherwise. If the user specifies a passphrase, [kwalletcli\_getpin(1)](/kwalletcli_getpin/1.md) is run again to ask if the passphrase should be stored in the KWallet. Negative answers will be stored in the KWallet to avoid being asked each time. **kwalletaskpass** uses the KWallet folders **kwalletaskpass** and **kwalletaskpassNblacklist** with matching entry names.

If anything other than a key passphrase is requested, it is merely relayed to [kwalletcli\_getpin(1)](/kwalletcli_getpin/1.md). Some requests are known to require a boolean answer and are relayed using the boolean query flag; all others are relayed using a PIN query. [ssh(1)](/ssh/1.md) accepts either the literal word “yes” (caseNinsensitively matched) or an empty answer (both only when using the OK button) as confirmation.

There are currently no options.

## RETURN VALUES

**kwalletaskpass** exits 0 on success, 1 if the user cancelled the dialogue, or 1 if an error occurred.

## ENVIRONMENT

- DISPLAY

  The X11 display to use for child processes. If this is unset or empty, **kwalletcli** will not be called.

- PINENTRY

  The **pinentry** program to use. The default is inherited from [kwalletcli\_getpin(1)](/kwalletcli_getpin/1.md).

## SEE ALSO

[kwalletcli(1)](/kwalletcli/1.md), [kwalletcli\_getpin(1)](/kwalletcli_getpin/1.md), sshNadd(1), sshNaskpass(1)

## AUTHORS

**kwalletaskpass** was written by mirabilos  m@mirbsd.org  mostly for tarent solutions GmbH. The idea came from an *askpass.C* file found somewhere on the 4net, with no author information. Since it was licenced less freely, this is a rewrite from scratch; modular and with more functionality, too.