diff --git a/cmd/spectre/main.go b/cmd/spectre/main.go
index e457293d61c5920c88d728cdcce953a785a51a3b..25bffd4c39bd4c0be8b3a77113dcae31f7c02888 100644
--- a/cmd/spectre/main.go
+++ b/cmd/spectre/main.go
@@ -28,6 +28,8 @@ 	usernameFlag := fs.String("username", "", "username")
 	fs.StringVar(usernameFlag, "u", *usernameFlag, "--username")
 	secretFlag := fs.String("secret", "", "secret")
 	fs.StringVar(secretFlag, "s", *secretFlag, "--secret")
+	secretFileFlag := fs.String("secret-file", "", "Path to a file containing --secret")
+	fs.StringVar(secretFileFlag, "f", *secretFileFlag, "--secret-file")
 	counterFlag := fs.Int("counter", 1, "counter")
 	fs.IntVar(counterFlag, "c", *counterFlag, "--counter")
 	baseFlag := fs.String("base", "com.lyndir.masterpassword", "scoper base")
@@ -56,6 +58,14 @@ 	}
 
 	if templateFlag == "" {
 		templateFlag = scopeFlag.DefaultTemplate()
+	}
+
+	if *secretFileFlag != "" {
+		secret, err := os.ReadFile(*secretFileFlag)
+		if err != nil {
+			return "", err
+		}
+		*secretFlag = strings.TrimSpace(string(secret))
 	}
 
 	if *usernameFlag == "" || *secretFlag == "" || fs.NArg() < 1 {