Live data from Hacker News

Show HN: masterkey – secure interactive password manager using Go and NACL

github.com

1–10 of 12 posts

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#2
I'm always interested in seeing new open source password management solutions. Unfortunately being limited to user/pass/location is a deal-breaker for me. The only decent tool I've found that provides additional fields is KeePassX.

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#3

I'm always interested in seeing new open source password management solutions. Unfortunately being limited to user/pass/location is a deal-breaker for me. The only decent tool I've found that provides additional fields is KeePassX.

pass lets you add any field you want: https://www.passwordstore.org/

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#4

I'm always interested in seeing new open source password management solutions. Unfortunately being limited to user/pass/location is a deal-breaker for me. The only decent tool I've found that provides additional fields is KeePassX.

I agree unfortunately.

There is one web app that has this potential, Siptrackweb.

I've looked closely at the code and it clearly has potential to add attributes, or additional fields, to password nodes in its database. But right now it does not offer this feature for passwords, only for other types of nodes like devices and device categories.

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#5

I'm always interested in seeing new open source password management solutions. Unfortunately being limited to user/pass/location is a deal-breaker for me. The only decent tool I've found that provides additional fields is KeePassX.

1Password allows for additional fields

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#6

I'm always interested in seeing new open source password management solutions. Unfortunately being limited to user/pass/location is a deal-breaker for me. The only decent tool I've found that provides additional fields is KeePassX.

pass lets you add any field you want: https://www.passwordstore.org/

pass is very nice, but has some annyoing useability quirks.

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#7
> Passwords are always encrypted using a scrypt key derived from the input passphrase

If this is correct then I'm not sure if it's best approach. My understanding is that in for example keepass there is a separate random key that is used to encrypt the data, and then this key is encrypted using whatever method user uses.

Re: Show HN: masterkey – secure interactive password manager using Go and NACL

#8
post #7

> Passwords are always encrypted using a scrypt key derived from the input passphrase If this is correct then I'm not sure if it's best approach. My understanding is that in for example keepass there is a separate random key that is used to encrypt the data, and then this key is encrypted using whatever method user uses.

Yes, this is so you can change the password without needing to encrypt everything again.
Post reply on HN