Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pass: A standard Unix password manager

passwordstore.org

Post reply on HN
Print view View original

121–130 of 212 posts

Re: Pass: A standard Unix password manager

#121

Post by majkinetor »

tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

Exactly my problem.

Today I found this, need to check it out: https://github.com/Baggykiin/pass-winmenu

Re: Pass: A standard Unix password manager

#122

Post by hiq »

amelius wrote: post #45
hiq wrote: post #41

Earlier quoted context omitted.

If your master password leaks you are exposed on every website where you used this scheme (and you should then change every password), so on the security side this is inferior to a master password granting access to uncorrelated passwords.

Well, you can add a salt to this scheme. I know, it's not perfect, but it beats carrying around password files between devices.

As the other commenter pointed out, you need to carry your salt with you to deduce the actual password. On top of that, you need to keep your salt secret, otherwise it is trivial to deduce your password. So your system [password = hash(master password, salt, domain)] is exactly the same as a master password protecting several other ones. Just use your salt as a password directly at this point...

Re: Pass: A standard Unix password manager

#123

Post by [deleted] »

tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

[deleted]

Re: Pass: A standard Unix password manager

#125

Post by wyager »

y4mi wrote: post #95
tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

Looks like the iOS app supports browser autofill and there's a Firefox plugin.

Re: Pass: A standard Unix password manager

#126

Post by cookiecaper »

y4mi wrote: post #95
tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

Please understand that browser integration is the Achilles' Heel of password managers. While you get the convenience of autofill, you're also bringing access to your password database into the browser's attack surface. Bugs in the browser sandbox or improper extension implementations can allow rogue sites to get the goods. There have been multiple instances of major password manager extensions leaking secrets just in the last year.

Copying and pasting may be annoying, but it's much safer, especially if you use a program that will autoclear your clipboard for you (KeePass 2 does this after 12 seconds by default).

Re: Pass: A standard Unix password manager

#127

Post by devopsproject »

aeorgnoieang wrote: post #102
y4mi wrote: post #95

Earlier quoted context omitted.

the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

If you want passwords automatically inserted why not just use the browser's features that do that? I do that for some sites.

it is not as secure

Re: Pass: A standard Unix password manager

#128

Post by tylorr »

fps wrote: post #83
jbg_ wrote: post #55

I've used this for a long time, and along with its Git integration (pushing/pulling to/from a repository on my own server, accessed over SSH) and a GPG key stored on a Yubikey Neo, I've got basically seamless sync between two laptops, a desktop and an Android phone, without using any third-party service. The "Password Store" app on Android is compatible with `pass` and supports Git and NFC for using the Yubikey Neo t…

I have the same setup, but I haven't yet been able to get the Yubikey Neo to work as a GPG key on android via NFC. It prompts for a PIN, but the PIN I use for GPG on linux isn't accepted. There's also no working windows client for this setup, so I find I have to manually copy a lot of 20 character complex passwords by hand these days.

I use Msys2 on Windows which then lets me install GPG and Pass from its package manager.

Re: Pass: A standard Unix password manager

#129

Post by moondev »

joekrill wrote: post #76
mi100hael wrote: post #70

Earlier quoted context omitted.

For teams, I almost always go with Vault ( http://vaultproject.io/ )

My impression of Vault is that it is more useful for automated situations. How useful is it as a shared password manager? Do you have non-technical folks using it? And if so, how are they interacting with the vault?

Sounds like a great idea for a side project. Build a user friendly interface that leverages a remote vault server on the backend. It's primary use case if definitely for applications.

Re: Pass: A standard Unix password manager

#130

Post by noahdesu »

painted wrote: post #31
thecopy wrote: post #28

Earlier quoted context omitted.

Password managers clear the clipboard after 1 minute or so.

there are so many clipboard listeners out there :D so the fact that you clear the clipboard doesn't really matter

I'm not particularly worried about other applications on my computer listening to the clipboard. But I 99% of the time I'm pasting into a webpage in Chrome or Firefox. Can any open tab sniff the clipboard passively?
Post reply on HN