pass, the standard unix password manager: https://www.passwordstore.org/
This is very much a case of "don't invent your own cryptosystem", especially not in bash.
51–60 of 75 posts
pass, the standard unix password manager: https://www.passwordstore.org/
This is very much a case of "don't invent your own cryptosystem", especially not in bash.
Earlier quoted context omitted.
Fwiw, the biggest downside of it is multiple user functionality. It's doable, but you have to import the public gpg key of everybody who needs to access the secrets. Effectively, every secret ends up encrypted with the public key of every user who needs access - not sure how scalable it would be if you have more than a small team of people accessing it this way.
For that you can go with gopass: https://www.gopass.pw/ It has first-class support for multiple stores and it's 100% compatible with pass databases.
Even “opensource” apps such as strongbox and keepassium have no way of asserting that whatever code they publish on GitHub is the same that I’m installing through the AppStore.
Am I just overly paranoid?
This is the main hindrance for me to using KeePassXC everywhere. If I’m going to blindly trust anyone I prefer to trust apple keychain.
For cloud-synched across devices: BitWarden. For maximum security (no cloud sync): KeePassXC In both cases an essential feature applies: if you forget your master password you've lost access to your password database.
pass, the standard unix password manager: https://www.passwordstore.org/
pass has issues: https://rot256.dev/post/pass/ This is very much a case of "don't invent your own cryptosystem", especially not in bash.
Dashlane has never failed me once since 2017. I even got my family to do the family plan. It rocks.
Back when 1password, 90% sure it was that, had no Linux client I was searching for a solution to store passwords and settled for Enpass. I sync via WebDAV on my Synology NAS and I’m not really worried to lose anything since every synced device has a full copy of the data. Thought about switching to 1password a few months back since we’re using it at work and the client is better but they don’t have an Enpass import.…