281–290 of 347 posts
Earlier quoted context omitted.
https://www.passwordstore.org/ command-line, encrypts passwords with gpg, synchronises using git and by default only copies the password to the clipboard and automatically wipes the clipboard after a minute
Last time I checked this it would store metadata about the passwords in plain text (file and directory names). Did that get fixed yet?
Does anyone know anything about Dashlane? I had a free commercial account from a previous employer and it seemed nice, other than the popup every time you logged in to an unknown website asking you to save your credentials. I'm pretty sure that was configurable, though. I don't see Dashlane spoken about much in these conversations (I have no affiliation).
Earlier quoted context omitted.
Given the change to their business model I am concerned they can push an update, where the next time I unlock my vault it syncs my master password and/or decrypted vault to their cloud. Maybe time for an open source password manager?
There are lots of them out there to choose from. And being able to audit the secure portions is great, but a password manager is the perfect example of what free solutions often don't do well— you need to have a seamless experience across multiple platforms including mobile, and you need to have fairly deep integrations into multiple web browsers, which are notoriously fickle and need to be tracked closely. The kille…
That way, your password manager would show a "login" button on the browser's toolbar when you visited any page in a site, you'd click it, and you'd be logged in (or possibly be asked for a two-factor code or be redirected to a two-factor page) immediately and certainly.
Is there anyone here who's working on a password manager who'd like to develop this with me? I've been wanting to write a spec and Django/Python implementation of it.
* I have no problem with subscription pricing, software that is maintained needs to be sold in a subscription model, period. Anyone who thinks otherwise is deceiving themselves.
* I do have a problem with entering my password (that is used to encrypt my data) into a JavaScript environment.
Give me native apps, charge me in a subscription model, don't force me into a web site version, and all will be fine.
Are there any good password managers that don't have enforce going to the cloud, but work nicely with larger teams? A few people in the comments are recommending using keepass with a shared Dropbox file, but that doesn't work as well when you want different people having access to different passwords on teams. Anyone know of a good alternative to 1Password or LastPass for teams?
Those are the only two that I have used with teams. I like both of them; certainly having a password manager is better than not having a password manager... LastPass gets so much right for teams. It's still what we use at work as a result. It's not perfect, but I'm not willing to move my team off it for something that is marginally better in one area, and less good in 4 others.
Waiting for a clearly better solution and haven't found one yet.
This is only tangentially related, but I believe it's time to have a unified login standard for the web. Not in the OAuth sense, as that's hard to do, but just a small, machine-readable file that tells your password manager "to log this user in, just submit credentials to /whatever/url/". That way, your password manager would show a "login" button on the browser's toolbar when you visited any page in a site, you'd cl…
No, No. We shouldn't send credentials to anywhere. We should be using things like client certs or SRP. We need to solve the UI and UX problems and actually create better systems, not keep patching over the same broken system.
Does anyone know anything about Dashlane? I had a free commercial account from a previous employer and it seemed nice, other than the popup every time you logged in to an unknown website asking you to save your credentials. I'm pretty sure that was configurable, though. I don't see Dashlane spoken about much in these conversations (I have no affiliation).
From all the discussions that I have seen here on Hacker News or on Reddit, I don't think Dashlane is popular.
Does anyone know anything about Dashlane? I had a free commercial account from a previous employer and it seemed nice, other than the popup every time you logged in to an unknown website asking you to save your credentials. I'm pretty sure that was configurable, though. I don't see Dashlane spoken about much in these conversations (I have no affiliation).