Live data from Hacker News

Pass: The standard Unix password manager

passwordstore.org

11–20 of 213 posts

Re: Pass: The standard Unix password manager

#11

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

How do you get your passwords out of the repo on your phone?

Re: Pass: The standard Unix password manager

#14

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

How do you get your passwords out of the repo on your phone?

git push. The Android app works with git repos from SSH. I also use Wireguard since I run my SSH server behind the VPN, but this is obviously optional since you can just expose your SSH server to the internet.

Re: Pass: The standard Unix password manager

#15
post #5

Earlier quoted context omitted.

Leaking to where?

compared to other password managers which is just an encrypted database. pass uses normal folders to store your website/username information so in that way it is less protected.

Something to consider, sure.

But the exposure is to anyone with access to your encrypted pass data. Which in the normal use case is going to be anyone with access to your user account, which means they could likely already see your shell and browser history.

Re: Pass: The standard Unix password manager

#16

I love the idea of Pass, but from what I've seen of the UX (not talking looks) it doesn't really compare to the ease of use of products like 1Password (which I suspect was the catalyst for this being reposted). Does anyone have any contrary experiences when shared across iOS, Linux, and macOS devices + browsers?

I really like pass, but I switched to Bitwarden for this reason. Bitwarden has first party support everywhere I need it. Pass has clients everywhere, but other than the CLI I have not been impressed.

Re: Pass: The standard Unix password manager

#17

I've used pass for a while, but I switch to bitwarden, since it has official apps for all platforms. Also with bitwarde I only have to trust them, with pass I have to trust all the different app developers.

What different app developers? Isn’t pass basically a wrapper around GPG?

Re: Pass: The standard Unix password manager

#18

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

How do you get your passwords out of the repo on your phone?

Not having access to your passwords on your phone is considered by some of us as a feature.

Re: Pass: The standard Unix password manager

#19
I used to use this, and then I moved to a real password manager. Like seriously, this doesn’t hold a candle to an actual well-engineered password manager. I use Keepass right now, with MacPass and Keepassium; both excellent apps.

Re: Pass: The standard Unix password manager

#20
here's why this is a bad idea:

- i generate random passwords for myself (yay)

- i share these random passwords with my team (ugh... git i guess huh!)

- i share some of these random passwords with my family (you try teaching a 6 year old git, and a 37 year old woman who already doesn't want to change her habits)

- i use these passwords on my home computer (windows), work computer (osx), android, ios

Yeah, not going to switch away from 1password any time soon.

Post reply on HN