Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

Post reply on HN
Print view View original

151–160 of 320 posts

Re: Ask HN: What is your password management solution?

#151

Post by linopolus »

eddieroger wrote: post #140
copperx wrote: post #132

Earlier quoted context omitted.

The OP stated "I'm a bit unhappy with 1Password".

OP also asked what people are using. They're not mutually exclusive statements. I use 1Password and I don't pay a subscription. I pay them outright, per platform, and call it a day until they give me a reason to do something else. I've also set up other recently in similar patterns. If OP's only issue is the subscription, they may now be aware that there are non-subscription options.

Also, they're the only ones with relatively wide-spread support in Apps (on iOS). In many apps, I can just tap 1P like I do in the browser to log in. And they have a decent user interface.

Re: Ask HN: What is your password management solution?

#152

Post by afshin »

dheera wrote: post #115
afshin wrote: post #96

Earlier quoted context omitted.

One problem I had when using a similar technique is how to change passwords. Some services require regular password changes, security breaches require it, etc. So I needed some additional piece of information, namely how many times I've had to change passwords, so a new function argument. Eventually I gave up and started using a password manager.

That's what 'n' is for in the code above. There are only a small handful of sensitive websites I use that require frequent password changes and I usually sync them all to the same incremented value of n every few months.

Gotcha. I think that the manual effort of that was what put me off managing passwords myself.

Re: Ask HN: What is your password management solution?

#156

Post by G3E9 »

dheera wrote: post #55

This is my password manager. password = b64encode(hashlib.pbkdf2_hmac( 'sha256', (master_password + '/' + domain).encode(), b'', 100000 + n )).decode()[0:16] + 'Aa$1' master_password = some master password that you never write or store anywhere domain = domain name for the service in question, e.g. 'facebook.com' n = the nth password being generated for the domain (typically 0) The 'Aa$1' is to ensure satisfaction of…

Wouldn't combining the "master_password", "domain" and your username/email save you from worrying about the "n" variable?

You are using "n" to differentiate from multiple accounts on "domain", right?.. or am I misunderstanding?

Re: Ask HN: What is your password management solution?

#157

Post by dheera »

G3E9 wrote: post #156
dheera wrote: post #55

This is my password manager. password = b64encode(hashlib.pbkdf2_hmac( 'sha256', (master_password + '/' + domain).encode(), b'', 100000 + n )).decode()[0:16] + 'Aa$1' master_password = some master password that you never write or store anywhere domain = domain name for the service in question, e.g. 'facebook.com' n = the nth password being generated for the domain (typically 0) The 'Aa$1' is to ensure satisfaction of…

Wouldn't combining the "master_password", "domain" and your username/email save you from worrying about the "n" variable? You are using "n" to differentiate from multiple accounts on "domain", right?.. or am I misunderstanding?

No, I'm using 'n' to deal with websites that periodically require you to change password and enforce that you use a new password

I suppose I could also do it as master_password + '/' + domain + str(n) or something like that.

Re: Ask HN: What is your password management solution?

#159

Post by jolmg »

tuxxy wrote: post #117
raamdev wrote: post #31

Earlier quoted context omitted.

+1 for `pass`. I wrote a handy Bash script [1] that lets me easily search my passwords without having an exact match (e.g., `fpass fin cap one` quickly finds my password info for "Financial/CapitalOne.gpg"). It makes pulling up passwords so much easier as I only need to remember fragments of how I stored it instead of trying to remember exact folders and names using auto-complete to find the password. I also use iTer…

Instead of hiding the window, why don't you look into using terminal colors to hide the password? That way the passwords aren't visible until you highlight them.

Better to use the '-c' option to put the password in the clipboard and not display it in the terminal.

Re: Ask HN: What is your password management solution?

#160

Post by adamskiftw »

richardpetersen wrote: post #7

Enpass all the way. Free and works with dropbox

I'm a huge fan of Enpass, simple and does exactly what it says on the tin. I've convinced friends and coworkers to switch over to it and they're all very happy with it from what I've heard. What I don't like, and one of the reasons I'm looking at moving away from it, is that the code isn't open source. It also conveniently enables the sending of analytics/data usage by default and hides the option to turn it off at the very bottom of the Preferences / Advanced tab. The only reason I even noticed this was from Little Snitch popping up to tell me. Maybe not a massive problem, but I'd rather a password manager didn't phone home every time I open the damn thing up.
Post reply on HN