Live data from Hacker News

Pass: A standard Unix password manager

passwordstore.org

11–20 of 212 posts

Re: Pass: A standard Unix password manager

#11
post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

A few differences:

- There's no builtin GUI

- Each entry is its own file

- You control the storage format (meaning it's easy to store any kind of information, not just passwords)

- It relies on GPG, so you need to set that up first

Re: Pass: A standard Unix password manager

#13
post #11
post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

A few differences: - There's no builtin GUI - Each entry is its own file - You control the storage format (meaning it's easy to store any kind of information, not just passwords) - It relies on GPG, so you need to set that up first

[deleted]

Re: Pass: A standard Unix password manager

#15
post #11
post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

A few differences: - There's no builtin GUI - Each entry is its own file - You control the storage format (meaning it's easy to store any kind of information, not just passwords) - It relies on GPG, so you need to set that up first

[deleted]

Re: Pass: A standard Unix password manager

#17
post #11
post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

A few differences: - There's no builtin GUI - Each entry is its own file - You control the storage format (meaning it's easy to store any kind of information, not just passwords) - It relies on GPG, so you need to set that up first

> You need to handle X integration yourself by piping to xclip, or similar (or just cut and pasting from terminal)

pass -c (or --clip) does that for you.

Re: Pass: A standard Unix password manager

#18
post #11
post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

A few differences: - There's no builtin GUI - Each entry is its own file - You control the storage format (meaning it's easy to store any kind of information, not just passwords) - It relies on GPG, so you need to set that up first

>- You need to handle X integration yourself by piping to xclip, or similar (or just cut and pasting from terminal)

Wrong, pass provides the -c flag which puts it in your clipboard and clears it after a timeout.

Re: Pass: A standard Unix password manager

#19
post #11

Earlier quoted context omitted.

A few differences: - There's no builtin GUI - Each entry is its own file - You control the storage format (meaning it's easy to store any kind of information, not just passwords) - It relies on GPG, so you need to set that up first

>- You need to handle X integration yourself by piping to xclip, or similar (or just cut and pasting from terminal) Wrong, pass provides the -c flag which puts it in your clipboard and clears it after a timeout.

So it does, yes. I forgot about that, since I needed to write my own wrapper to paste both username and password (stored on separate lines) anyway. Thank you for the correction, I'll update my post.

Re: Pass: A standard Unix password manager

#20

Pass is pretty awesome, but nowadays I've switched to gopass: https://github.com/justwatchcom/gopass - much better support for teams, structured secrets, binary secrets and quite a few other improvements. Oh, and it's (mostly) drop-in compatible.

Looks nice. Unfortunately I would never use it for teams as it doesn't have audit logs. These are very useful in case a user is compromised - you can lookup which passwords he accessed and only change those. Same goes if the user left the team and u want to make sure all accesses are revoked.
Post reply on HN