README  | 11 +++++++----
 passman |  8 +++++---

diff --git a/README b/README
index 238410e88617ae7aed135492ea0c8bfca15a3e7b12933e663172e72e4c320965..331bba609abb989b2c209ff50de42261d56a5f50d269247f9b827b1368e65eef 100644
--- a/README
+++ b/README
@@ -1,8 +1,11 @@
 passman -- simple password manager
-It stores passwords in single recfile
-(https://www.gnu.org/software/recutils/), that is by default encrypted
-by age (https://github.com/FiloSottile/age) with the passphrase and
-compressed by zstd.
+It stores passwords in single recfile, that is encrypted either by age
+or cmenctool with the passphrase, and compressed by Zstandard.
+
+=> https://www.gnu.org/software/recutils/ recfile/recutils
+=> https://github.com/FiloSottile/age age
+=> http://www.keks.cypherpunks.su/cm/index.html cmenctool
+=> https://facebook.github.io/zstd/ Zstandard
 
 * passman add NAME [PASSWORD]
   Appends NAME credential with optional password to the database. If
diff --git a/passman b/passman
index 8fc94c5f1d6bb49ed6971af43f340ca1c47c503413595d2fd643d2e0150c5e05..cb7a9a873cc77f427cbabfb386aafb639351d1539f035b6f067745fdeca465ab 100755
--- a/passman
+++ b/passman
@@ -18,7 +18,8 @@ DB=${PASSMANDB:-$HOME/.passmandb}
 
 dec() {
     if [ -s $DB ] ; then
-        age -d $DB | zstd -d
+        # age -d $DB | zstd -d
+        cmenctool -p -d <$DB | zstd -d
     else
         cat <<EOF
 %rec: Credential
@@ -30,7 +31,8 @@     fi
 }
 
 enc() {
-    zstd | age -p
+    # zstd | age -p
+    zstd | cmenctool -p -embed
 }
 
 generator() {
@@ -71,7 +73,7 @@     passwd="$3"
     [ -n "$dst" ]
     [ -n "$passwd" ] || passwd=$(generator)
     echo ${dst}...
-    dec | recins -t Credential -f Name -v "$dst" -f Passwd -v "$passwd" >$tmp
+    dec | recins --verbose -t Credential -f Name -v "$dst" -f Passwd -v "$passwd" >$tmp
     commit
     ;;
 mod)