Show HN: SpicyPass – A free and open-source minimalist password manager

Post by Xenograph » Sun, Mar 29, 2020, 1:14 AM UTC

Improvotter wrote: post #31

Spivak wrote: post #16

Earlier quoted context omitted.

I honestly might just pay the $10/yr just to support them but bitwarden_rs is dead simple to deploy if you already have a VPS sitting around for other stuff.

Too bad that the owner/maintainer doesn't really like an open API. The only way to interact with the backend seems to be using the cli or trying to figure out the API yourself.

Post by megous » Sun, Mar 29, 2020, 1:31 AM UTC

ultrafilter wrote: post #14

animalnewbie wrote: post #3

Sometimes you don't want minimalist- you want to quickly find and visualise things. What I'd love is a Tui "curses" interface to keepassdb with quick vim like navigation. GUI is both too heavy and not too keyboard friendly. In fact, unless there's a specific (and specified) reason, all password managers should be based on the somewhat de facto standard of keepassdb

If I have a keyboard, then for a relatively small dataset, such as my saved passwords, I prefer a text file over any database. Lookup workflow: decrypt file (with, say, gpg), find what I want (with, say, grep), delete decrypted file. (Not safe if you don't use disk encryption!) Update workflow: decrypt file, edit file, encrypt file, commit encrypted file to local git repo, git push to backup storage.

Post by angry_cactus » Sun, Mar 29, 2020, 1:39 AM UTC

yingw787 wrote: post #9

This is really cool, thanks for sharing! I personally use Bitwarden, also because it's free and open source software, and because the cloud managed option is $10 / year. I've found the GUI to be very well-made for a heavy keyboard user like me. I also second a curses-based terminal interface for password management, I think it'll be really useful!

Post by DEADBEEFC0FFEE » Sun, Mar 29, 2020, 1:42 AM UTC

bscphil wrote: post #5

rudolph9 wrote: post #2

I’ve been looking for something like this for awhile but not enough of a security expert to know if this is something I can trust

Not an expert, but I think I'm decently knowledgeable. The design as outlined in the security section of the readme looks just fine to me, assuming the key is securely derived from the password. I would hope for more emphasis on the importance of choosing a secure master password. Ideally you should be able to treat its hash (which is prepended to the database) as public knowledge, even if in practice you'll keep the…

Post by siwatanejo » Sun, Mar 29, 2020, 2:01 AM UTC