This seems less "minimalist" than Unix pass[0] - but maybe author has specific issues that are addressed?
I'm curious to see a comparison.
Show HN: SpicyPass – A free and open-source minimalist password manager
51–60 of 113 posts
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#52Sometimes you don't want minimalist- you want to quickly find and visualise things. What I'd love is a Tui "curses" interface to keepassdb with quick vim like navigation. GUI is both too heavy and not too keyboard friendly. In fact, unless there's a specific (and specified) reason, all password managers should be based on the somewhat de facto standard of keepassdb
If I have a keyboard, then for a relatively small dataset, such as my saved passwords, I prefer a text file over any database. Lookup workflow: decrypt file (with, say, gpg), find what I want (with, say, grep), delete decrypted file. (Not safe if you don't use disk encryption!) Update workflow: decrypt file, edit file, encrypt file, commit encrypted file to local git repo, git push to backup storage.
You're describing the behavior of https://www.passwordstore.org/ almost exactly! Give it a try.
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#53This is really cool, thanks for sharing! I personally use Bitwarden, also because it's free and open source software, and because the cloud managed option is $10 / year. I've found the GUI to be very well-made for a heavy keyboard user like me. I also second a curses-based terminal interface for password management, I think it'll be really useful!
I use bitwarden too, but I can't figure out how to get the cert to automatically update. I have port 443 served by Caddy2 and use that as a reverse proxy to Bitwarden, but Bitwarden wants to bind to 443 to update the cert. So, for now, it is a case of manually stopping Caddy, updating Bitwarden, and starting Caddy back up. The downtime is only acceptable because I only host personal stuff.
I’ve been running it in a docker container plugged into the nginx reverse proxy and letsencrypt companion containers. The latter claims to automatically update certs though I haven’t had it running long enough to test it. Unless you’re set on using Caddy, it’s a pretty straightforward option.
Instructions here: https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-compan...
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#54I switched from 1Password to pass with my gpg private key sitting on a Yubikey (with backup keys). I don’t think anything else comes close to this setup in terms of security.
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#55A new wheel.
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#56I switched from 1Password to pass with my gpg private key sitting on a Yubikey (with backup keys). I don’t think anything else comes close to this setup in terms of security.
1Password with WebAuthn 2FA is probably better (harder for generic malware to steal), and leagues more convenient.
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#57This is really cool, thanks for sharing! I personally use Bitwarden, also because it's free and open source software, and because the cloud managed option is $10 / year. I've found the GUI to be very well-made for a heavy keyboard user like me. I also second a curses-based terminal interface for password management, I think it'll be really useful!
I honestly might just pay the $10/yr just to support them but bitwarden_rs is dead simple to deploy if you already have a VPS sitting around for other stuff.
After using it for a month or so, the $10 was a no-brainer for me. Great piece of software!
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#58Earlier quoted context omitted.
Bitwarden gets recommended so much on Hacker News that it feels kind of like astroturfing. That being said, I use Bitwarden and it's great.
I evaluated LastPass, OnePassword, and Bitwarden personally for my devices (Windows / macOS / Linux / iOS). Bitwarden supports all these plus more, is cheap, lightweight, reliable, UX-decent, and open-source. If you build a great product people need, it's not a headspinner why people would use it and buy it. Hopefully going into this recession we'll see more products with that lesson baked in.
Other than being open source, what does Bitwarden offer over Lastpass on the free tier?
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#59How would this compare with pass[1], the "standard UNIX password manager"? Is it simply that SpicyPass uses newer cryptography than pass? Pass uses gpg along with the filesystem and git, so it is lightweight, and super-easy to backup offsite, as long as you guard your gpg keys separately. For those who want a GUI, QtPass[2] provides a simple GUI while using pass in the background. [1] https://www.passwordstore.org/ […
Yeah I don't see the advantages of this compared to `pass` as well. The whole source code of bash pass [1] is almost as long as a single header file [2] from this C++ software. Plus pass already handles backup... Minimalist heh. [1] https://git.zx2c4.com/password-store/tree/src/password-store... [2] https://github.com/JFreegman/SpicyPass/blob/master/src/spicy...
[deleted]
Re: Show HN: SpicyPass – A free and open-source minimalist password manager
#60Very unrelated—SpicyPass looks quite attractive—one feature that is missing from some of these managers—possibly because the host OS does not allow it—is typing of the passwords as if from a keyboard rather than using the clipboard, which is potentially readable by malware.