Live data from Hacker News

Pass: The standard Unix password manager

passwordstore.org

61–70 of 213 posts

Re: Pass: The standard Unix password manager

#61
post #24

Earlier quoted context omitted.

What does Keepass do that pass doesn't?

I've only used keypassx on windows, but the auto fill feature was amazing. You would push a key shortcut, then based on the window title of whatever window has focus, it would simulate key presses into it. So I could type secure credentials into any program on my computer with one key stroke.

That's how I use pass on Linux. A key shortcut is bind to script that calls "xdotool getwindowfocus getwindowname", selects credentials set based on it, asks for master password with pinentry-qt if needed, then types with "xdotool type --file -".

It works and is better than placing password in clipboard and than "xdotool type $pass". Likely worse than proper integration with password consumer.

Re: Pass: The standard Unix password manager

#62

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

There is gopass for Windows which is compatible last time I checked. It also works on Linux and Mac too:

https://github.com/gopasspw/gopass

Re: Pass: The standard Unix password manager

#63

I don't use pass myself (I have severe NIH[1]), but its design has inspired me many times over: very, very few tools rise to the challenge of adhering to the Unix philosophy without cargo-culting it, and pass is one of them. I highly recommend that people looking to write engineer-friendly tools study its manpage[2]. [1]: https://github.com/woodruffw/kbs2 [2]: https://git.zx2c4.com/password-store/about/

I also wrote my own age compatible pass clone a year ago but yours is much better. You've gotten a new user.

Re: Pass: The standard Unix password manager

#65

I love the idea of Pass, but from what I've seen of the UX (not talking looks) it doesn't really compare to the ease of use of products like 1Password (which I suspect was the catalyst for this being reposted). Does anyone have any contrary experiences when shared across iOS, Linux, and macOS devices + browsers?

QtPass was descent last time I tried it but I'm not sure if it has been updated recently. Not really much need to have a separate GUI though when there are browser extensions like Browserpass.

Re: Pass: The standard Unix password manager

#66

I love the idea of Pass, but from what I've seen of the UX (not talking looks) it doesn't really compare to the ease of use of products like 1Password (which I suspect was the catalyst for this being reposted). Does anyone have any contrary experiences when shared across iOS, Linux, and macOS devices + browsers?

it couldnt be easier to keep up to date across devices: pass git push pass git pull there are also at least two browser addons both of which work very well for filling fields

um, yes, it could be easier. It could sync across devices automatically...

Re: Pass: The standard Unix password manager

#67
post #29

> The password store does not impose any particular schema or type of organization of your data, as it is simply a flat text file, which can contain arbitrary data. That whole section, the options (or lack thereof) is a mess...

Not really.. Gopass which is compatible supports YAML-based key/values. I find having to conform to a particular password management solution for extended entries to be more messy.

Re: Pass: The standard Unix password manager

#68
post #2

It feels nice and clean, but also like it is leaking the list of sites I use.

That is what something like Gocryptfs would be good at masking:

https://wiki.archlinux.org/index.php/Gocryptfs

Or there is an extension called pass-tomb:

https://github.com/roddhjav/pass-tomb

Re: Pass: The standard Unix password manager

#69

here's why this is a bad idea: - i generate random passwords for myself (yay) - i share these random passwords with my team (ugh... git i guess huh!) - i share some of these random passwords with my family (you try teaching a 6 year old git, and a 37 year old woman who already doesn't want to change her habits) - i use these passwords on my home computer (windows), work computer (osx), android, ios Yeah, not going to…

Gopass allows you to share passwords and encrypt with multiple GPG keys.

Re: Pass: The standard Unix password manager

#70

Earlier quoted context omitted.

Sorry, I meant more on the UI side. Like if I'm on a website that needs a login, do I run a pass command in a local terminal, then copy and paste?

Ah, there is an Android app [1] which you sync the passwords to and it basically presents a list of all your websites. To use a password: tap on the website name, unlock your GPG key, and then see your password and put it in your phone's copy/paste buffer. [1] https://play.google.com/store/apps/details?id=dev.msfjarvis....

Sounds a lot less convenient than e.g. Samsung Pass. Depends what you value I guess.
Post reply on HN