I use own tool written in bash: https://github.com/rekcufniarb/pswrd#readme
Ask HN: Password manager with best experience on Linux?
71–80 of 80 posts
Re: Ask HN: Password manager with best experience on Linux?
#72Earlier quoted context omitted.
I originally used pass too and it's excellent, there's gopass too which is an improvement on pass and works well for teams. https://www.gopass.pw
What makes it better for teams than just pass?
Pass has no out of the box multi user support. Gopass allows encryption for multiple keys, hence better for teams.
I use it for the same reason to encrypt different folders with different keys (work vs. private).
Re: Ask HN: Password manager with best experience on Linux?
#73I use pass[0], which is essentially just a wrapper on top of Git and GPG. All your secrets are stored in text files that are then encrypted by your GPG key, which is then tracked in a Git repo that you can store anywhere. I use the PassFF extension[1] for Firefox, and Password Store for Android[2]. There are plenty of pass-compatible clients for all platforms and extensions for pass on the first site. If I need to ge…
I originally used pass too and it's excellent, there's gopass too which is an improvement on pass and works well for teams. https://www.gopass.pw
I use gopass a lot, but they direction in which they took the pass API is absolutely horrible. The ammount of irrelevant commands they added made it an UX nightmare.
Re: Ask HN: Password manager with best experience on Linux?
#74Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.
Standard issues with these derived password schemes: * Are you sure your algorithm can't be reversed? * What do you do if your normal username is taken? * What do you do when the site's name changes? * How do you handle forbidden and mandatory characters? * How do you handle forced rotation? * What about extraneous crap like security questions, phone PINs, emails, related sites, &c.? * How do you access it on other d…
Re: Ask HN: Password manager with best experience on Linux?
#75Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.
For one, you only get a single password per site, so you can't rotate them, or have multiple accounts unless you add the account name to the inputs. Secondly, different sites have different requirements, so your generated passwords might not work everywhere. Finally, a password manager lets you store more than just a password for each site, and it can let you store passwords and secrets for things other than websites…
> For one, you only get a single password per site, so you can't rotate them
Well I know Lesspass[0] has a 'counter' so that if you need to change a pass you simply increment it by one and you get a new hash
Re: Ask HN: Password manager with best experience on Linux?
#76Earlier quoted context omitted.
This! I’ve moved from LastPass to BitWarden and I like the clients way better. Browser extensions, Desktop, Mobile (iOS), CLI all work pretty great. It’s core is opensource and you can run your own server if you want. For my less critical accounts even the 2FA token is stored in it.
I was actually under the impression the whole thing was open source. Out of curiosity, what is closed?
I think all of it is open source
Re: Ask HN: Password manager with best experience on Linux?
#77http://www.masterpasswordapp.com/
I use this. Check it out to see if it meets your requirements.
Re: Ask HN: Password manager with best experience on Linux?
#78I use pass[0], which is essentially just a wrapper on top of Git and GPG. All your secrets are stored in text files that are then encrypted by your GPG key, which is then tracked in a Git repo that you can store anywhere. I use the PassFF extension[1] for Firefox, and Password Store for Android[2]. There are plenty of pass-compatible clients for all platforms and extensions for pass on the first site. If I need to ge…
Also using pass here.
Someone has an opinion/solution for the problem of exposing the list of everything you are using a password for? The fact that pass doesn't encrypt that makes me somewhat uncomfortable about hosting the remote git repo on an Internet accessible machine / service. Keeping the data "offline" (if such a thing exists) makes the sync across devices more challenging...
Re: Ask HN: Password manager with best experience on Linux?
#79For all-around use I like https://keeweb.info/ It uses Keepass formats. Save your DB to WebDAV, Dropbox, Google Drive, and One Drive. You can download an app and run it or run it in your browser. I run the app version and use KeePassHttp-Connector and auto-type (works in other apps beyond a browser) to fill in username and password. You can also store Google Auth TOTP (HMAC-based OTP) as a backup too. I would store it in a separate DB.
Re: Ask HN: Password manager with best experience on Linux?
#80KeepassXC ( https://keepassxc.org ) combined with: * It's browser plugin ( https://addons.mozilla.org/firefox/addon/keepassxc-browser/ ) * Syncthing ( https://syncthing.net/ ) to synchronize across devices and mobile * Keepass2Android Offline for Mobile access ( https://play.google.com/store/apps/details?id=keepass2androi... ) Then the experience is close to Lastpass but only using opensource components.
Take a look at https://keeweb.info/ too. It has built-in support for Dropbox, Google Drive, and One Drive. I also recommend Keepass2Android and sync to Dropbox. With the addition of a secret key file as an added requirement to unlock. So, in theory, you would need that key file and your master password to unlock the Keepass DB.