unix pass - passing passphrase with the usage of PASSWORD_STORE_GPG_OPTS

Question

Here's info on the pass: https://www.passwordstore.org

My key point is, that I would like to pass the passphrase key at the command line. However, the topic and solutions related to this question that I could find, are not working in my case.

When I have examined the code of Pass, I have found a parameter called PASSWORD_STORE_GPG_OPTS. As far as I can see, it should be possible to use it to pass --pinentry-mode=loopback --passphrase "<password_here>" to gpg executed by Pass. The code fragment that executes it is here:

#Line 9
GPG_OPTS=( $PASSWORD_STORE_GPG_OPTS "--quiet" "--yes" "--compress-algo=none" "--no-encrypt-to" )

#(...)

#Line 387

pass="$($GPG -d "${GPG_OPTS[@]}" "$passfile" | $BASE64)" || exit $?

However, for some reason, this is not working.

So the question is, would it be possible to use this parameter to pass passphrase to gpg and use pass without prompt? If not, then are there any other ways to do so?

EDIT: As @they suggested, here is info on what I'm doing:

Set variable:

 export PASSWORD_STORE_GPG_OPTS="--pinentry-mode=loopback --passphrase '<password_goes_here>'"

Remark: Password contains only small and big letters and digits - no whitespaces nor other characters.

Then, execute the pass with:

pass address/to/some/password

Outcome is:

gpg: decryption failed: No secret key

Answer 1

In my case, as @they suggested, problem was using (for unknown reason....) quotes. Without them, everything is working like a charm.

Answer 2

As an alternative to reading the password from a string, as suggested above, the passphrase can also be handled through some file:

export PASSWORD_STORE_GPG_OPTS="--pinentry=loopback --passphrase-file /path/to/.passphrase"

Using a hashed passphrase does not seem to be possible (for instance, with mkpasswd -m sha-512 passphrase > /path/to/.passphrase-hashed), so it needs to be given in plain text.