Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

Post reply on HN
Print view View original

291–300 of 320 posts

Re: Ask HN: What is your password management solution?

#291

Post by eswat »

tylorr wrote: post #212
onetom wrote: post #32

Subscription to 1Password is not mandatory. Or at least it was not in the past. Without a subscription, you can create local vaults which can be synced via Dropbox, iCloud or over WiFi within the same subnet (which means over VPN too). Here is some documentation on the Dropbox sync for example: https://support.1password.com/sync-with-dropbox/

I can't find how to purchase the single license for Windows. I found the download for Windows v4 and the single license purchase for Mac here: https://agilebits.com/store but not the Windows license.

1Password 6 for Windows is subscription only. You’d need 1Password 4 to work with local/Dropbox vaults.

Funny enough, 1P6 worked fine with my local/Dropbox vault during beta, then the app stopped letting me update my vault when it left beta. :\

Re: Ask HN: What is your password management solution?

#292

Post by pigpigs »

JoshuaRLi wrote: post #284
nikital wrote: post #65

Earlier quoted context omitted.

> The only downside is no access from my phone. On Android, I use Password Store to sync my `pass` directory and use it from the phone. It a very high quality app, I had no issues after years of usage. https://github.com/zeapo/Android-Password-Store

Keepass user here wanting to switch over to pass, this is exactly the missing piece of the puzzle I needed - thank you!

I'm looking into using pass / keepass, any particular reason you are switching over to pass?

Re: Ask HN: What is your password management solution?

#294

Post by dewey »

m1keil wrote: post #288
dewey wrote: post #12

1Password & gopass ( https://www.justwatch.com/gopass/ , it's "pass" compatible if you are using that already). I don't really mind the subscription service as it works fine across all platforms I use.

Do you sync 1password and gopass? or one for home and other for work? I love 1Password but the lack of linux support is irritating. (I know about the web client)

1Password for all my private stuff and I also have a vault for work credentials (websites, external services, third party APIs etc where autofill in the browser comes in handy)

I use gopass for everything that's company internal.

Re: Ask HN: What is your password management solution?

#295

Post by tluyben2 »

sidcypher wrote: post #235
tluyben2 wrote: post #78

Earlier quoted context omitted.

Maybe you have something that calculates what is strong enough? Is there some online calculator?

Online calculator for password strength, what a great idea! I've got to offer one on my website (gimme all your passwords, mwahahaha!)

Yeah because that is what meant...

Re: Ask HN: What is your password management solution?

#297

Post by PeterisP »

ameister14 wrote: post #50

I just use lines of poetry for my passwords. They're long enough, complex enough, but extremely easy for humans to memorize.

Phrases from published works aren't strong passwords no matter how long they are.

Here's a nice example from a few years ago - https://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_walle... where "a line from an obscure poem in Afrikaans" was considered secure.

Granted, your password hash isn't going to get as much effort as BTC brainwallet cracking, but phrases/lines from common poems are going to be in bruteforcer lists.

Also, for any targeted attacks, everything from every poet or band you've ever liked on facebook or mentioned in any online resource are going to be used against you, so you better use poetry from authors that you don't like or ensure that you have never talked about which authors you like (easier said than done). Checking every line from e.g. Shakespeare is easy.

Re: Ask HN: What is your password management solution?

#298

Post by jchw »

Interestingly enough, I immediately moved from LastPass to 1password when I heard about the subscription service. Why? Because I trust AgileBits but last time I wanted to run 1password I was going to need to pay a shit ton of money just to get it on Most of my platforms. Now, overall I'll pay more money, but I don't have to worry about how many platforms I use or upgrading periodically.

Plus, syncing is done right automatically. Sure, AgileBits could go out of business and I'd not be able to use 1password anymore. That's fine. It took one day to switch from LastPass. The lock-in is minimal. I'd rather not continue using a piece of security software without updates being released.

(Even if they did, I have a gut feeling they are classy enough to open source the server, though. It looks like the app already is built with the possibility of connecting to 3rd party sync servers.)

And it looks like a real solution is in the works for Linux finally, so there's that.

Re: Ask HN: What is your password management solution?

#299

Post by davchana »

retor wrote: post #56

Google passwords. I trust their engineering, it's free, passwords are accessible as long as I have a browser and it comes with Chrome. Negatives: I can't do backups, easily migrate to another supplier and it won't work automatically with other browsers. And it's Google (feels privacy invasive)

If you are logged into chrome, with all google passwords synced, you could use NirSoft Chrome Password Export Utility to get a CSV/TXT file of all data; i.e. URL Username Password. Then import it into your other favourite password manager; backup it any secure way you wish.

Re: Ask HN: What is your password management solution?

#300

Post by fgcbs »

I have used for year a KISS (Keep it simple) solution: I have a directory encrypted with encfs where I keep all sensitive data. The directory is shared through dropox by all my devices. In this directory I keep a plain text file with all passwords, domain, used email.... It is actually a YAML file cause I also have a simple groovy scripts that pastes the password (given domain or key) in my clipboard, but any text file would do the job. As simple as that.
Post reply on HN