Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

On Password Managers

tbray.org

Post reply on HN
Print view View original

91–100 of 347 posts

Re: On Password Managers

#91

Post by jgrowl »

kebolio wrote: post #24
peterkshultz wrote: post #9

Any password manager recommendations such that people don't need to deal with 1Password's cloud-based storage?

https://www.passwordstore.org/ command-line, encrypts passwords with gpg, synchronises using git and by default only copies the password to the clipboard and automatically wipes the clipboard after a minute

This is what I've used for quite a while. It's not the fanciest, but it is simple and easy to use.

For backup, I use duplicity to encrypt my .password-store and all other private files. I have it spit the output to my dropbox folder so it syncs automatically.

This keeps what sites I have passwords for hidden from the outside world.

I've looked a little into keeping the entire .password-store folder encrypted locally until I try to use it, but I guess I'm not paranoid enough for the hassle.

Re: On Password Managers

#92

Post by pixelcloud »

greggyb wrote: post #23
LordHeini wrote: post #7

At our company we use keepass2 with a db file synced by dropbox. Works nicely. Keepass can save all sorts of stuff alongside passwords (like credentials, api-tokens...) and there is an app too (for android at least). Might get a bit clunky if lots of people change a lot of stuff all the time but for us it is not a problem.

Can Keepass2 have different passwords for different users? Or are you sharing one master password among multiple employees?

KeePass isnt really designed for multiuser usage, RBAC, etc

]

Re: On Password Managers

#93

Post by evantahler »

tedmiston wrote: post #4

Just to be clear, it's still 100% possible to keep your 1Password vault in Dropbox etc and not use the SaaS version [1]. I felt like this fact was buried in the article. Edit: Here's the link to buy the standalone license [2] which is hard to find on the site now. In a post from the founder one week ago [3] he said, "We know that not everyone is ready to make the jump yet, and as such, we will continue to support cus…

And you can use other Sync methods, like iCloud or move the files around yourself.

Re: On Password Managers

#94

Post by cat199 »

greggyb wrote: post #23
LordHeini wrote: post #7

At our company we use keepass2 with a db file synced by dropbox. Works nicely. Keepass can save all sorts of stuff alongside passwords (like credentials, api-tokens...) and there is an app too (for android at least). Might get a bit clunky if lots of people change a lot of stuff all the time but for us it is not a problem.

Can Keepass2 have different passwords for different users? Or are you sharing one master password among multiple employees?

Each store is a file with a single, changable password (+ option for additional external keyfile).

Create as many or few of these as you need accordingly.

Re: On Password Managers

#95

Post by pyre »

kchoudhu wrote: post #31
tptacek wrote: post #5

The 1Password situation is complicated, and is a lot less sketchy than Bray's summary would lead you to believe. 1Password has not in fact phased out their native applications or required people to use 1Password.com to store passwords (it would be insane for them to do so). There are four issues that I'm currently aware of with 1Password: 1. They've converted from flat to subscription pricing. 2. They're pushing peop…

> [t]here's currently no other commercial password manager that I recommend. I'm sorry I can't go into more detail than that Sounds like there's something about to blow?

There's a couple of ways to translate that. There's the way you did:

> "I know about some security flaws (or behind-the-scenes issues with the dev teams) in other products, but I can't reveal them publicly because of NDAs, etc"

But there is also:

> "I know enough to recommend this product, but I don't know enough about the other products -- not necessarily because I lack the skill, but because I haven't spent the time -- to endorse/recommend them."

Re: On Password Managers

#96

Post by cat199 »

netrap wrote: post #13
LordHeini wrote: post #7

At our company we use keepass2 with a db file synced by dropbox. Works nicely. Keepass can save all sorts of stuff alongside passwords (like credentials, api-tokens...) and there is an app too (for android at least). Might get a bit clunky if lots of people change a lot of stuff all the time but for us it is not a problem.

That's what I use as well. Only thing missing I guess is a mobile workflow, though there are some options.

as mentioned above, saving to synced cloud storage gives multi device access, and so long as your mobile platform has clients for both your storage and keepass, you are good. Although you do need to reopen/resync after any changes since the client at location 2 might not be aware of the changes propagated through cloud storage by the client at location 1

Re: On Password Managers

#97

Post by cat199 »

tedmiston wrote: post #70
AlexandrB wrote: post #66

Earlier quoted context omitted.

Why did the old model suddenly become unprofitable? If it's team bloat I'm not really sympathetic.

> "Today, over 95% of our revenues are coming from subscribers" https://blog.agilebits.com/2017/07/13/why-we-love-1password-...

That doesn't explain why the old model became or didn't become unprofitable...

Re: On Password Managers

#98

Post by n4r9 »

evantahler wrote: post #93
tedmiston wrote: post #4

Just to be clear, it's still 100% possible to keep your 1Password vault in Dropbox etc and not use the SaaS version [1]. I felt like this fact was buried in the article. Edit: Here's the link to buy the standalone license [2] which is hard to find on the site now. In a post from the founder one week ago [3] he said, "We know that not everyone is ready to make the jump yet, and as such, we will continue to support cus…

And you can use other Sync methods, like iCloud or move the files around yourself.

I recently moved to using SyncThing for syncing my keepass database. I realised that syncing it with Dropbox was not that much better than using a Web-based service.

Re: On Password Managers

#99

Post by corybrown »

beckler wrote: post #73
moskie wrote: post #52

The one place that 1Password doesn't meet my needs is in ChromeOS. The browser plugin requires the machine you're on to have the 1Password app running in the background, which is how it gets its data from the local (and synced) vault. But there is no 1Password ChromeOS app (and I don't think it's really even possible for there to be something like that in ChromeOS), so the browser plugin does not work in Chrome on Ch…

I don't use it personally because I have some reservations about it, but Enpass ( https://www.enpass.io/ ) supports ChromeOS. I wish 1Password supported ChromeOS as well.

> REQUIREMENTS: Any Chromebook supporting Play store.

Only works because you run the Android app on your Chromebook, not supported everywhere.

Re: On Password Managers

#100

Post by bqe »

sprice wrote: post #33
tptacek wrote: post #5

The 1Password situation is complicated, and is a lot less sketchy than Bray's summary would lead you to believe. 1Password has not in fact phased out their native applications or required people to use 1Password.com to store passwords (it would be insane for them to do so). There are four issues that I'm currently aware of with 1Password: 1. They've converted from flat to subscription pricing. 2. They're pushing peop…

> I recommend 1Password, and there's currently no other commercial password manager that I recommend. Are there any open source password manager products that you would recommend?

I use pass, written by zx2c4 of WireGuard fame: https://www.passwordstore.org/

My favorite thing about it is that it uses standard tools I understand, and I can back it up and version it with git.

Post reply on HN