---
name: "secret-query"
section: "1"
platform: "linux"
package: "quintuple-agent"
version: "1.0.4-7"
release: "Debian 4.0 (Etch)"
platforms: ["linux"]
url: "https://new.carta.tech/secret-query"
---

# secret-query(1)

Ask for a secret in a secure way

## NAME

secret-query - Ask for a secret in a secure way

## SYNOPSIS

**secret-query** \[ *OPTION ...* \] \[ *QUESTION* \]

## DESCRIPTION

The **secret-query** program will pop up a window, asking for the entry of a secret. It is usually called by **q-agent**, or **q-client** when no terminal interaction with the user is possible. You can use it for other things, too, as the interface is very simple, and in the default mode not specific to the Quintuple Agent suite.

If *QUESTION* is given, it will be used as the prompt text in the window.

All the necessary precautions are taken so that your secret stays that way while under control of **secret-query**: the keyboard is grabbed to prevent sniffing, an amount of memory is locked (if possible) so that paging will not write the secret to disk.

After a secret has been entered and the OK button is pressed, **secret-query** will output the secret to stdout, and exit with code 0.

Cancelling entry with the appropriate button or by closing the window will produce an exit code of 1.

- **-g, --no-global-grab**

  usually, as soon as the query window appears the keyboard is grabbed, diverting any keyboard input to **secret-query** - this option will prevent grabbing until the query window gets keyboard focus by normal means. This retains security, while doing away with the somewhat obnoxious snatching-from-under-your-fingers aspect

- **-e, --enhanced**

  turns on the enhanced interface, normally only useful to **q-agent**: time-to-live and other options are queried along with the secret, and later output in rfc822-like *Keyword*: *Value* style

- **-d, --debug**

  turn on debugging output

- **--help**

  print a usage synopsis, then exit

- **--version**

  print version information, then exit

## SEE ALSO

[**q-agent**(1)](/q-agent/1.md)

[**q-client**(1)](/q-client/1.md)

## AUTHOR

Robert Bihlmeyer \<robbe@orcus.priv.at\>

## COPYRIGHT

Copyright © 2000 Robert Bihlmeyer

This is free software; see the source for copying conditions. There is **no** warranty; not even for **merchantability** or **fitness for a** **particular purpose**.