Live data from Hacker News

Show HN: SpicyPass – A free and open-source minimalist password manager

github.com

1–10 of 113 posts

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#3
Sometimes you don't want minimalist- you want to quickly find and visualise things.

What I'd love is a Tui "curses" interface to keepassdb with quick vim like navigation. GUI is both too heavy and not too keyboard friendly.

In fact, unless there's a specific (and specified) reason, all password managers should be based on the somewhat de facto standard of keepassdb

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#5
post #2

I’ve been looking for something like this for awhile but not enough of a security expert to know if this is something I can trust

Not an expert, but I think I'm decently knowledgeable. The design as outlined in the security section of the readme looks just fine to me, assuming the key is securely derived from the password. I would hope for more emphasis on the importance of choosing a secure master password. Ideally you should be able to treat its hash (which is prepended to the database) as public knowledge, even if in practice you'll keep the database as private as you can.

That said, barring an audit by a respectable security firm, I think a lot of eyeballs on an open source project who can confirm that the implementation is correct is the most important thing. For that reason, I don't plan to switch away from Keypass in the near future.

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#6
post #4

Why might I want to use this over something like pass ( https://www.passwordstore.org/ )?

The benefit of Pass is it already has Chrome/Firefox plugins so all you need to do is press a keyboard shortcut and it automatically fills it in on the site.

Given SpicyPass doesn't have that, I think I'll still be with Pass, because it's free and simply amazing.

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#7
post #2

I’ve been looking for something like this for awhile but not enough of a security expert to know if this is something I can trust

Are you familiar with Bitwarden and KeePassXC? If so, I"m curious why neither of those meet your use case.

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#9
This is really cool, thanks for sharing!

I personally use Bitwarden, also because it's free and open source software, and because the cloud managed option is $10 / year. I've found the GUI to be very well-made for a heavy keyboard user like me. I also second a curses-based terminal interface for password management, I think it'll be really useful!

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#10

Sometimes you don't want minimalist- you want to quickly find and visualise things. What I'd love is a Tui "curses" interface to keepassdb with quick vim like navigation. GUI is both too heavy and not too keyboard friendly. In fact, unless there's a specific (and specified) reason, all password managers should be based on the somewhat de facto standard of keepassdb

It's not a TUI but I have used kpcli (http://kpcli.sourceforge.net/) as a method to access keepass databases over SSH and text interfaces. I've thought about building a more TUI-based option but have yet to get around to it.
Post reply on HN