core: add note about option sec.crypt.passphrase_file in /help secure (issue #1286)

20 files changed, 141 insertions, 108 deletions

diff --git a/doc/de/autogen/user/weechat_commands.adoc b/doc/de/autogen/user/weechat_commands.adoc
index 55142a5ea..89ecaf2a8 100644
--- a/doc/de/autogen/user/weechat_commands.adoc
+++ b/doc/de/autogen/user/weechat_commands.adoc
@@ -789,38 +789,38 @@ Standardmäßig werden alle Konfigurationsdateien beim Ausführen des /quit Befe
          set <name> <value>
          del <name>
 
-passphrase: ändern der Passphrase (ohne Passphrase, werden die Daten in der Datei sec.conf in Klartext gesichert)
-   -delete: löscht Passphrase
-   decrypt: entschlüsselt Daten nachträglich (dies passiert nur falls die Passphrase beim Start nicht angegeben wurde)
-  -discard: verwirft alle verschlüsselten Daten
-       set: fügt eine schutzwürdige Information hinzu oder ändert eine bestehende
-       del: entfernt eine schutzwürdige Information
-
-Ohne Angabe von Argumenten wird ein neuer Buffer geöffnet und die schutzwürdigen Informationen können dort eingesehen werden.
-
-Tastenbefehle für den secure-Buffer:
-  alt+v Werte werden ein-ausgeblendet
-
-Wird eine Passphrase verwendet (Daten liegen verschlüsselt vor), fragt WeeChat beim Start die Passphrase ab.
-Es ist möglich eine Umgebungsvariable "WEECHAT_PASSPHRASE" zu setzen um die Eingabeaufforderung beim Programmstart zu vermeiden (diese Variable wird auch von WeeChat beim /upgrade verwendet).
-
-schutzwürdige Daten mit dem Format ${sec.data.xxx} können wie folgt genutzt werden:
-  - Befehl /eval.
-  - Argument in der Befehlszeile für "--run-command"
-  - Einstellung weechat.startup.command_{before|after}_plugins
-  - weitere Optionen die Passwörter oder sensible Daten beinhalten (zum Beispiel: proxy, irc server und relay); nutze /help mit der entsprechenden Option um zu überprüfen ob die Daten evaluiert werden.
-
-Beispiele:
-  festlegen eine Passphrase:
-    /secure passphrase Dies ist meine Passphrase
-  verschlüsselt freenode SASL Passwort:
-    /secure set freenode meinPasswort
+passphrase: change the passphrase (without passphrase, data is stored as plain text in file sec.conf)
+   -delete: delete passphrase
+   decrypt: decrypt data still encrypted (it happens only if passphrase was not given on startup)
+  -discard: discard all data still encrypted
+       set: add or change secured data
+       del: delete secured data
+
+Without argument, this command displays secured data in a new buffer.
+
+Keys on secure buffer:
+  alt+v  toggle values
+
+When a passphrase is used (data encrypted), it is asked by WeeChat on startup.
+It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade), or to set option sec.crypt.passphrase_file to read the passphrase from a file (see /help sec.crypt.passphrase_file).
+
+Secured data with format ${sec.data.xxx} can be used in:
+  - command /eval
+  - command line argument "--run-command"
+  - options weechat.startup.command_{before|after}_plugins
+  - other options that may contain a password or sensitive data (for example proxy, irc server and relay); see /help on the options to check if they are evaluated.
+
+Examples:
+  set a passphrase:
+    /secure passphrase this is my passphrase
+  encrypt freenode SASL password:
+    /secure set freenode mypassword
     /set irc.server.freenode.sasl_password "${sec.data.freenode}"
-  verschlüsselt oftc Passwort für nickserv:
-    /secure set oftc meinPasswort
+  encrypt oftc password for nickserv:
+    /secure set oftc mypassword
     /set irc.server.oftc.command "/msg nickserv identify ${sec.data.oftc}"
-  Alternativbefehl um den eigenen Nick zu ghosten:
-    /alias add ghost /eval /msg -server freenode nickserv ghost meinNick ${sec.data.freenode}
+  alias to ghost the nick "mynick":
+    /alias add ghost /eval /msg -server freenode nickserv ghost mynick ${sec.data.freenode}
 ----
 
 [[command_weechat_set]]
diff --git a/doc/en/autogen/user/weechat_commands.adoc b/doc/en/autogen/user/weechat_commands.adoc
index 461c3c2a8..13f0ff030 100644
--- a/doc/en/autogen/user/weechat_commands.adoc
+++ b/doc/en/autogen/user/weechat_commands.adoc
@@ -802,7 +802,7 @@ Keys on secure buffer:
   alt+v  toggle values
 
 When a passphrase is used (data encrypted), it is asked by WeeChat on startup.
-It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade).
+It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade), or to set option sec.crypt.passphrase_file to read the passphrase from a file (see /help sec.crypt.passphrase_file).
 
 Secured data with format ${sec.data.xxx} can be used in:
   - command /eval
diff --git a/doc/fr/autogen/user/weechat_commands.adoc b/doc/fr/autogen/user/weechat_commands.adoc
index d33b08d7b..42ac24555 100644
--- a/doc/fr/autogen/user/weechat_commands.adoc
+++ b/doc/fr/autogen/user/weechat_commands.adoc
@@ -802,7 +802,7 @@ Les touches sur le tampon des données sécurisées :
   alt+v  afficher/cacher les valeurs
 
 Lorsqu'une phrase de chiffrement est utilisée (données chiffrées), elle est demandée au démarrage de WeeChat.
-Il est possible de définir la variable d'environnement WEECHAT_PASSPHRASE pour éviter la demande (cette même variable est utilisée par WeeChat sur le /upgrade).
+Il est possible de définir la variable d'environnement WEECHAT_PASSPHRASE pour éviter la demande (cette même variable est utilisée par WeeChat sur le /upgrade) ou de définir l'option sec.crypt.passphrase_file pour lire la phrase de chiffrement depuis un fichier (voir /help sec.crypt.passphrase_file).
 
 Les données sécurisées avec le format ${sec.data.xxx} peuvent être utilisées dans :
   - la commande /eval
diff --git a/doc/it/autogen/user/weechat_commands.adoc b/doc/it/autogen/user/weechat_commands.adoc
index 9faedb3ab..cd1be9af2 100644
--- a/doc/it/autogen/user/weechat_commands.adoc
+++ b/doc/it/autogen/user/weechat_commands.adoc
@@ -802,7 +802,7 @@ Keys on secure buffer:
   alt+v  toggle values
 
 When a passphrase is used (data encrypted), it is asked by WeeChat on startup.
-It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade).
+It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade), or to set option sec.crypt.passphrase_file to read the passphrase from a file (see /help sec.crypt.passphrase_file).
 
 Secured data with format ${sec.data.xxx} can be used in:
   - command /eval
diff --git a/doc/ja/autogen/user/weechat_commands.adoc b/doc/ja/autogen/user/weechat_commands.adoc
index 2b666ee28..bd1350084 100644
--- a/doc/ja/autogen/user/weechat_commands.adoc
+++ b/doc/ja/autogen/user/weechat_commands.adoc
@@ -789,37 +789,37 @@ file: 保存する設定ファイル (拡張子 ".conf" は不要)
          set <name> <value>
          del <name>
 
-passphrase: パスフレーズを変更 (パスフレーズがない場合、sec.conf ファイルに平文でデータを保存します)
-   -delete: パスフレーズを削除
-   decrypt: 暗号化されているデータを復号化 (起動時にパスフレーズが設定されていない場合に起きます)
-  -discard: 全ての暗号化データを破棄
-       set: 保護データを追加または変更
-       del: 保護データを削除
+passphrase: change the passphrase (without passphrase, data is stored as plain text in file sec.conf)
+   -delete: delete passphrase
+   decrypt: decrypt data still encrypted (it happens only if passphrase was not given on startup)
+  -discard: discard all data still encrypted
+       set: add or change secured data
+       del: delete secured data
 
-引数がない場合、新しいバッファに保護データを表示します。
+Without argument, this command displays secured data in a new buffer.
 
-保護バッファ内で利用可能なキー:
-  alt+v  値を切り替えます
+Keys on secure buffer:
+  alt+v  toggle values
 
-パスフレーズを利用する場合 (データが暗号化されている場合)、WeeChat は起動時にパスフレーズを尋ねます。
-環境変数 "WEECHAT_PASSPHRASE" を利用すれば入力を回避できます (WeeChat は /upgrade の時に同じ変数を利用します)。
+When a passphrase is used (data encrypted), it is asked by WeeChat on startup.
+It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade), or to set option sec.crypt.passphrase_file to read the passphrase from a file (see /help sec.crypt.passphrase_file).
 
-${sec.data.xxx} の形で書かれた保護データは以下の様に利用できます:
-  - /eval コマンド
-  - コマンドライン引数 "--run-command"
-  - weechat.startup.command_{before|after}_plugins オプション
-  - パスワードや機密データを含むと思われるその他のオプション (例えば、プロキシ、irc サーバ、リレー); 保護データが評価されるかを確認するには各オプションの /help を参照してください。
+Secured data with format ${sec.data.xxx} can be used in:
+  - command /eval
+  - command line argument "--run-command"
+  - options weechat.startup.command_{before|after}_plugins
+  - other options that may contain a password or sensitive data (for example proxy, irc server and relay); see /help on the options to check if they are evaluated.
 
-例:
-  パスフレーズを設定:
+Examples:
+  set a passphrase:
     /secure passphrase this is my passphrase
-  freenode の SASL パスワードを暗号化:
+  encrypt freenode SASL password:
     /secure set freenode mypassword
     /set irc.server.freenode.sasl_password "${sec.data.freenode}"
-  oftc の nickserv 用パスワードを暗号化:
+  encrypt oftc password for nickserv:
     /secure set oftc mypassword
     /set irc.server.oftc.command "/msg nickserv identify ${sec.data.oftc}"
-  ニックネーム "mynick" を取り戻すためのエイリアス ghost を設定
+  alias to ghost the nick "mynick":
     /alias add ghost /eval /msg -server freenode nickserv ghost mynick ${sec.data.freenode}
 ----
 
diff --git a/doc/pl/autogen/user/weechat_commands.adoc b/doc/pl/autogen/user/weechat_commands.adoc
index f8bcc9bfc..2b1ce16e6 100644
--- a/doc/pl/autogen/user/weechat_commands.adoc
+++ b/doc/pl/autogen/user/weechat_commands.adoc
@@ -789,38 +789,38 @@ Domyślnie zapisywane na dysku są wszystkie pliki konfiguracyjne podczas wykony
          set <nazwa> <wartość>
          del <nazwa>
 
-passphrase: zmienia hasło (bez hasła dane są przechowywane w postaci tekstu w pliku sec.conf)
-   -delete: kasuje hasło
-   decrypt: rozszyfrowuje dane będące ciągle zaszyfrowane (zdarza się to tylko jeśli hasło nie zostało podane przy uruchomieniu)
-  -discard: odrzuca wszystkie nadal zaszyfrowane dane
-       set: dodaje lub zmienia zaszyfrowane dane
-       del: kasuje zaszyfrowane dane
+passphrase: change the passphrase (without passphrase, data is stored as plain text in file sec.conf)
+   -delete: delete passphrase
+   decrypt: decrypt data still encrypted (it happens only if passphrase was not given on startup)
+  -discard: discard all data still encrypted
+       set: add or change secured data
+       del: delete secured data
 
-Bez argumentu, komenda wyświetli zabezpieczone dane w nowym buforze.
+Without argument, this command displays secured data in a new buffer.
 
-Kombinacje klawiszy w bezpiecznym buforze:
-  alt+v  przełącza wartości
+Keys on secure buffer:
+  alt+v  toggle values
 
-Jeśli używane jest hasło (dane zaszyfrowane), należy je podać podczas startu WeeChat.
-Jest możliwe ustawienie zmiennej środowiskowej "WEECHAT_PASSPHRASE", aby nie podawać hasła przy uruchomieniu (ta sama zmienna jest używana przez WeeChat podczas wykonywania /upgrade).
+When a passphrase is used (data encrypted), it is asked by WeeChat on startup.
+It is possible to set environment variable "WEECHAT_PASSPHRASE" to prevent the prompt (this same variable is used by WeeChat on /upgrade), or to set option sec.crypt.passphrase_file to read the passphrase from a file (see /help sec.crypt.passphrase_file).
 
-Zabezpieczone dane w formacie ${sec.data.xxx} można użyć w:
-  - komendzie /eval
-  - argumencie w linii poleceń "--run-command"
-  - opcjach weechat.startup.command_{before|after}_plugins
-  - innych opcjach, które mogą zawierać hasło lub wrażliwe dane (na przykład proxy, serwer irc i relay); zobacz /help na opcjach żeby sprawdzić czy są przetwarzane.
+Secured data with format ${sec.data.xxx} can be used in:
+  - command /eval
+  - command line argument "--run-command"
+  - options weechat.startup.command_{before|after}_plugins
+  - other options that may contain a password or sensitive data (for example proxy, irc server and relay); see /help on the options to check if they are evaluated.
 
-Przykłady:
-  ustawienie hasła:
-    /secure passphrase to jest moje hasło
-  zaszyfrowanie hasła dla freenode SASL:
-    /secure set freenode mojehasło
+Examples:
+  set a passphrase:
+    /secure passphrase this is my passphrase
+  encrypt freenode SASL password:
+    /secure set freenode mypassword
     /set irc.server.freenode.sasl_password "${sec.data.freenode}"
-  zaszyfrowanie hasła dla nickserva na serwerze oftc:
-    /secure set oftc mojehasło
+  encrypt oftc password for nickserv:
+    /secure set oftc mypassword
     /set irc.server.oftc.command "/msg nickserv identify ${sec.data.oftc}"
-  alias dla polecenia ghost dla nicka "mójnick":
-    /alias ghost /eval /msg -server freenode nickserv ghost mójnick ${sec.data.freenode}
+  alias to ghost the nick "mynick":
+    /alias add ghost /eval /msg -server freenode nickserv ghost mynick ${sec.data.freenode}
 ----
 
 [[command_weechat_set]]
diff --git a/po/cs.po b/po/cs.po
index ad24aa84a..75be10cc8 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Ondřej Súkup <mimi.vx@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2347,7 +2347,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/de.po b/po/de.po
index c1255010c..42b72f7f7 100644
--- a/po/de.po
+++ b/po/de.po
@@ -24,7 +24,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-12-13 22:32+0100\n"
 "Last-Translator: Nils Görs <weechatter@arcor.de>\n"
 "Language-Team: German <kde-i18n-de@kde.org>\n"
@@ -2771,6 +2771,7 @@ msgstr ""
 "passphrase <passphrase>|-delete || decrypt <passphrase>|-discard || set "
 "<name> <value> || del <name>"
 
+#, fuzzy
 msgid ""
 "passphrase: change the passphrase (without passphrase, data is stored as "
 "plain text in file sec.conf)\n"
@@ -2789,7 +2790,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/es.po b/po/es.po
index 5d36af1c0..fb25e6aa8 100644
--- a/po/es.po
+++ b/po/es.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Elián Hanisch <lambdae2@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2456,7 +2456,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/fr.po b/po/fr.po
index 459a44875..c3d5399c5 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -21,8 +21,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
-"PO-Revision-Date: 2018-11-29 23:18+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
+"PO-Revision-Date: 2018-12-22 09:34+0100\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
 "Language: fr\n"
@@ -2719,7 +2719,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
@@ -2761,7 +2763,9 @@ msgstr ""
 "demandée au démarrage de WeeChat.\n"
 "Il est possible de définir la variable d'environnement WEECHAT_PASSPHRASE "
 "pour éviter la demande (cette même variable est utilisée par WeeChat sur le /"
-"upgrade).\n"
+"upgrade) ou de définir l'option sec.crypt.passphrase_file pour lire la "
+"phrase de chiffrement depuis un fichier (voir /help sec.crypt."
+"passphrase_file).\n"
 "\n"
 "Les données sécurisées avec le format ${sec.data.xxx} peuvent être utilisées "
 "dans :\n"
diff --git a/po/hu.po b/po/hu.po
index 8150432b1..7be1f9a7e 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Andras Voroskoi <voroskoi@frugalware.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2081,7 +2081,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/it.po b/po/it.po
index cfce15aa4..d744a7fc2 100644
--- a/po/it.po
+++ b/po/it.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Esteban I. Ruiz Moreno <exio4.com@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2502,7 +2502,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/ja.po b/po/ja.po
index c28857167..cb8b75d40 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-12-09 09:00+0900\n"
 "Last-Translator: AYANOKOUZI, Ryuunosuke <i38w7i3@yahoo.co.jp>\n"
 "Language-Team: Japanese <https://github.com/l/weechat/tree/master/"
@@ -2625,6 +2625,7 @@ msgstr ""
 "passphrase <passphrase>|-delete || decrypt <passphrase>|-discard || set "
 "<name> <value> || del <name>"
 
+#, fuzzy
 msgid ""
 "passphrase: change the passphrase (without passphrase, data is stored as "
 "plain text in file sec.conf)\n"
@@ -2643,7 +2644,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/pl.po b/po/pl.po
index bd8d4b4da..2db92898f 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Krzysztof Korościk <soltys@soltys.info>\n"
 "Language-Team: Polish <kde-i18n-doc@kde.org>\n"
@@ -2677,6 +2677,7 @@ msgstr ""
 "passphrase <hasło>|-delete || decrypt <hasło>|-discard || set <nazwa> "
 "<wartość> || del <nazwa>"
 
+#, fuzzy
 msgid ""
 "passphrase: change the passphrase (without passphrase, data is stored as "
 "plain text in file sec.conf)\n"
@@ -2695,7 +2696,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/pt.po b/po/pt.po
index d059a5efc..f4a2e410e 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Vasco Almeida <vascomalmeida@sapo.pt>\n"
 "Language-Team: Portuguese <>\n"
@@ -2635,6 +2635,7 @@ msgstr ""
 "passphrase <fase de acesso>|-delete || decrypt <frase de acesso>|-discard || "
 "set <nome> <valor> || del <nome>"
 
+#, fuzzy
 msgid ""
 "passphrase: change the passphrase (without passphrase, data is stored as "
 "plain text in file sec.conf)\n"
@@ -2653,7 +2654,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/pt_BR.po b/po/pt_BR.po
index 95dd5955c..5d93e7370 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Eduardo Elias <camponez@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2480,7 +2480,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/ru.po b/po/ru.po
index 07fd73b65..52f8b9337 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Aleksey V Zapparov AKA ixti <ixti@member.fsf.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -2104,7 +2104,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/tr.po b/po/tr.po
index 25f4f066a..4f7591e67 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2018-11-17 10:36+0100\n"
 "Last-Translator: Hasan Kiran <sunder67@hotmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -1898,7 +1898,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/po/weechat.pot b/po/weechat.pot
index 88439b00f..2f8817d0d 100644
--- a/po/weechat.pot
+++ b/po/weechat.pot
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2018-11-29 23:17+0100\n"
+"POT-Creation-Date: 2018-12-22 09:33+0100\n"
 "PO-Revision-Date: 2014-08-16 10:27+0200\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -1897,7 +1897,9 @@ msgid ""
 "When a passphrase is used (data encrypted), it is asked by WeeChat on "
 "startup.\n"
 "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" to prevent "
-"the prompt (this same variable is used by WeeChat on /upgrade).\n"
+"the prompt (this same variable is used by WeeChat on /upgrade), or to set "
+"option sec.crypt.passphrase_file to read the passphrase from a file (see /"
+"help sec.crypt.passphrase_file).\n"
 "\n"
 "Secured data with format ${sec.data.xxx} can be used in:\n"
 "  - command /eval\n"
diff --git a/src/core/wee-command.c b/src/core/wee-command.c
index 56cb24021..7e12712a8 100644
--- a/src/core/wee-command.c
+++ b/src/core/wee-command.c
@@ -8023,7 +8023,8 @@ command_init ()
            "on startup.\n"
            "It is possible to set environment variable \"WEECHAT_PASSPHRASE\" "
            "to prevent the prompt (this same variable is used by WeeChat on "
-           "/upgrade).\n"
+           "/upgrade), or to set option sec.crypt.passphrase_file to read "
+           "the passphrase from a file (see /help sec.crypt.passphrase_file).\n"
            "\n"
            "Secured data with format ${sec.data.xxx} can be used in:\n"
            "  - command /eval\n"