Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Password manager with best experience on Linux?

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 80 posts

Re: Ask HN: Password manager with best experience on Linux?

#21

Post by jperry »

mruts wrote: post #6

Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.

Huh? How is this a solution?

If your password gets leaked I can just: recognise that it's base64, decode it, see your salt and then all of your other passwords are essentially open to me?

Edit: Oh, is the salt different for each site? I don't get why you'd ever do this instead of generating an entirely new password though, you aren't solving the storage problem.

Re: Ask HN: Password manager with best experience on Linux?

#22

Post by rwz »

mruts wrote: post #6

Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.

I actually tried doing this at some point before 1Password. One obvious problem with this approach is when you’re forced to change your password. You can’t change salt, or hash function for obvious reasons, so you have to change site name.

At some point guessing the original input becomes tedious, when you’re trying to remember if your github password has name “github.com2” or “github.com-3”

Edit:

Completely forgot about another huge usability issue. Some sites enforce weird rules for what symbols are allowed, or what length your password should be. Every time your function generates something that doesn’t pass validation, you’re forced to pretty much revert to your pre-password-management behavior. Obviously you won’t remember that a year later when you suddenly realize that generated password doesn’t work.

Re: Ask HN: Password manager with best experience on Linux?

#23

Post by dmacvicar »

KeepassXC (https://keepassxc.org) combined with:

* It's browser plugin (https://addons.mozilla.org/firefox/addon/keepassxc-browser/)

* Syncthing (https://syncthing.net/) to synchronize across devices and mobile

* Keepass2Android Offline for Mobile access (https://play.google.com/store/apps/details?id=keepass2androi...)

Then the experience is close to Lastpass but only using opensource components.

Re: Ask HN: Password manager with best experience on Linux?

#25

Post by unfunco »

imran3740 wrote: post #9

I use pass[0], which is essentially just a wrapper on top of Git and GPG. All your secrets are stored in text files that are then encrypted by your GPG key, which is then tracked in a Git repo that you can store anywhere. I use the PassFF extension[1] for Firefox, and Password Store for Android[2]. There are plenty of pass-compatible clients for all platforms and extensions for pass on the first site. If I need to ge…

I originally used pass too and it's excellent, there's gopass too which is an improvement on pass and works well for teams.

https://www.gopass.pw

Re: Ask HN: Password manager with best experience on Linux?

#26

Post by dchest »

mruts wrote: post #6

Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.

https://crypto.stackexchange.com/questions/5689/a-single-pas...

Re: Ask HN: Password manager with best experience on Linux?

#27

Post by _23sd »

imran3740 wrote: post #9

I use pass[0], which is essentially just a wrapper on top of Git and GPG. All your secrets are stored in text files that are then encrypted by your GPG key, which is then tracked in a Git repo that you can store anywhere. I use the PassFF extension[1] for Firefox, and Password Store for Android[2]. There are plenty of pass-compatible clients for all platforms and extensions for pass on the first site. If I need to ge…

The passmenu script for dmenu makes it even easier - just hit a keyboard shortcut, start typing “git”, hit enter and it’s on the clipboard.

Re: Ask HN: Password manager with best experience on Linux?

#28

Post by awill »

I used to use KeypassX. They Keypass switched to C# and mono, and I wasn't interested in running that on Linux. Then I found enpass. The Linux app is high quality, it syncs with my cloud of choice, and has Win/Mac and Android/iOS apps for a seamless cross platform experience. I can't recommend them enough. Plus it's $10 per app with no other fees and no fee to upgrade to new versions. Much better than paying subscription fees, or a fee for each new major version.

Re: Ask HN: Password manager with best experience on Linux?

#30

Post by Hamuko »

unfunco wrote: post #25
imran3740 wrote: post #9

I use pass[0], which is essentially just a wrapper on top of Git and GPG. All your secrets are stored in text files that are then encrypted by your GPG key, which is then tracked in a Git repo that you can store anywhere. I use the PassFF extension[1] for Firefox, and Password Store for Android[2]. There are plenty of pass-compatible clients for all platforms and extensions for pass on the first site. If I need to ge…

I originally used pass too and it's excellent, there's gopass too which is an improvement on pass and works well for teams. https://www.gopass.pw

What makes it better for teams than just pass?
Post reply on HN