I think pass is awesome if you have the workflow that supports it, but for the vast majority (myself included) it's entirely too difficult to setup and maintain. Particularly if you're using Windows regularly.
Pass: A standard Unix password manager
91–100 of 212 posts
Re: Pass: A standard Unix password manager
#92I've used this for a long time, and along with its Git integration (pushing/pulling to/from a repository on my own server, accessed over SSH) and a GPG key stored on a Yubikey Neo, I've got basically seamless sync between two laptops, a desktop and an Android phone, without using any third-party service. The "Password Store" app on Android is compatible with `pass` and supports Git and NFC for using the Yubikey Neo t…
I have the same setup, but I haven't yet been able to get the Yubikey Neo to work as a GPG key on android via NFC. It prompts for a PIN, but the PIN I use for GPG on linux isn't accepted. There's also no working windows client for this setup, so I find I have to manually copy a lot of 20 character complex passwords by hand these days.
Why doesn't it work? From the top of my head, QtPass with gpg4win should work.
Re: Pass: A standard Unix password manager
#93I don't like the fact someone with access to my hard-drive can figure out all the services I'm using just by looking at the filenames. It's convenient yes, but I prefer one encrypted file that contains it all.
This "issue" has been fixed with the pass extension 'pass-tomb' that keep the whole tree of password encrypted inside a tomb See https://github.com/roddhjav/pass-tomb However keep in mind it's not always a big "issue", for instance only looking at your browser history will retrieve the same knowledge.
Oh well... I wonder why they didnt make something like this the default.
Re: Pass: A standard Unix password manager
#94No, no it's not.
Ed is the standard password manager.
Re: Pass: A standard Unix password manager
#95I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…
the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck
i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.
Re: Pass: A standard Unix password manager
#96I've used this for a long time, and along with its Git integration (pushing/pulling to/from a repository on my own server, accessed over SSH) and a GPG key stored on a Yubikey Neo, I've got basically seamless sync between two laptops, a desktop and an Android phone, without using any third-party service. The "Password Store" app on Android is compatible with `pass` and supports Git and NFC for using the Yubikey Neo t…
The only problem I got with the password store application is that the Git integration seem to be a bit broken.
It often refuse to push, pull or sync depsite having no conflict.
But you just have to delete the store and pull everything again, so it's not a huge problem.
I definitly have to try the yubikey integration !
Re: Pass: A standard Unix password manager
#97Earlier quoted context omitted.
I haven't used the iOS client, but on Android the most common way to sync is to use your own Git repository accessed over SSH. You could use a private GitHub repo or one on your own server.
same on iOS it authenticates to your git repo either with password or SSH key. The only "complexity" in setting the app up is giving your public and private GPG keys to the iOS app (you can transfer them using itunes - there's also a facility to scan a QR code, but I don't know how you generate that from your GPG credentials)
> there's also a facility to scan a QR code, but I don't know how you generate that from your GPG credentials
Search for qr on the python package index using pip. There's a module that you can pipe text to and then it'll render a qr code in your terminal using Unicode glyphs. Worked well last I tried. Don't remember what the module was called but you'll be able to find it I som sure.
Re: Pass: A standard Unix password manager
#98I've been using password managers for while now, but I've recently discovered pass-rotate: https://github.com/SirCmpwn/pass-rotate It's basically a rotation manager ! Very powerful and lets you properly change your passwords regularly on many websites (like the proprietary Dashlane Password Changer or Lastpass' similar feature).
I'm glad you like it! Please send patches with support for new services :)
Re: Pass: A standard Unix password manager
#99Earlier quoted context omitted.
This shouldn't really be an issue if you're using full disk encryption.
That seems like saying why use an encrypting password manager at all if you're using full disk encryption, isn't it okay to just keep your passwords in plaintext on your encrypted disk?
Not if you use cloud backup or get a virus.
Re: Pass: A standard Unix password manager
#100I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…
It's somewhat easier with Bash on Ubuntu on Windows, tho kinda broken (because the copy to clipboard feature doesn't work out of the box unless you're running an X server).
But yeah, I kinda don't like using Gpg4Win with Cygwin, which is what I'm guessing you've used too.
With the "Creators Update" there's now a `clip.exe` to which one can pipe so maybe it's not too hard to update Pass, which is itself just a Bash script.