Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pass: The standard Unix password manager

passwordstore.org

Post reply on HN
Print view View original

71–80 of 213 posts

Re: Pass: The standard Unix password manager

#71

Post by NullUsr »

I love the simplicity of Pass, but I wanted just a few more features, like being able to store (and retrieve) extra data easily. Unstructured data below the initial password wasn't really enough for me.

I ended up taking huge inspiration from Pass, but writing my own implementation[1] with a few more features that increased it's usefulness for my use cases.

I posted it a while ago on here[2] and Reddit[3], but it basically stores each entry as a Bash script, which gives it so much flexibility: auto-typing, references, multiple fields, executable functions, etc. I also wrote a blog post on it[4].

I'd be interested to hear what people think of if if anyone did/does end up giving it a go.

[1]: https://github.com/vimist/securestore [2]: https://news.ycombinator.com/item?id=22851447 [3]: https://www.reddit.com/r/linux/comments/g0643w/a_new_passwor... [4]: https://vimist.github.io/2020/04/12/A-New-Password-Manager.h...

Re: Pass: The standard Unix password manager

#72

Post by eulenteufel »

jimmaswell wrote: post #70
PureParadigm wrote: post #38

Earlier quoted context omitted.

Ah, there is an Android app [1] which you sync the passwords to and it basically presents a list of all your websites. To use a password: tap on the website name, unlock your GPG key, and then see your password and put it in your phone's copy/paste buffer. [1] https://play.google.com/store/apps/details?id=dev.msfjarvis....

Sounds a lot less convenient than e.g. Samsung Pass. Depends what you value I guess.

On my phone the Android app also asks to fill login forms in Firefox.

Re: Pass: The standard Unix password manager

#73

Post by timvisee »

I've developed `prs` as `pass` alternative. It fixes many annoyances for daily use. It provides automatic syncing between multiple devices through git, supports multiple keys and many other things. It simply uses your existing `pass` store.

Some might find it useful.

https://github.com/timvisee/prs

Re: Pass: The standard Unix password manager

#74

Post by NullUsr »

philips wrote: post #12

I love pass but mostly use it as a tool for an encrypted journal. alias journal='pass edit journal/$(date +%Y-%m-%d)'

I wrote a pass-like password manager that's built using a layered architecture and one of the lower layers basically fits your exact use-case! The three layers that make up the password manager are:

- securestore - An encrypted file store - vcstore - A version controlled file store - pass - Password manager functionality

Each layer builds on the last, so in your case, you could just use the vcstore layer directly without the password manager functionality. I wrote a blog post on it[1] if it sounds interesting.

[1]: https://vimist.github.io/2020/04/12/A-New-Password-Manager.h...

Re: Pass: The standard Unix password manager

#75

Post by taeric »

yakubin wrote: post #53
taeric wrote: post #44

Earlier quoted context omitted.

I get why folks don't like gpg for securing email. What makes this use of it bad?

Because you still need to manage your GPG keys with an obscure CLI. When I last switched computers, I tried just copying my "~/.gpg" directory. Didn't work. GPG was confused, produced even more confusing messages, which didn't really help me understand what the problem was. I needed to google for the right incantation of commands to export my keys from one computer and import them on another. Compare that to what you…

Ah, I will make no real defence of gpg's ux. I wasn't sure if you were referring to anything else.

I'll take a look at keepassxc again someday. I'm assuming it works with yubikeys?

Re: Pass: The standard Unix password manager

#76

Post by nulbyte »

aborsy wrote: post #52
PureParadigm wrote: post #14

Earlier quoted context omitted.

git push. The Android app works with git repos from SSH. I also use Wireguard since I run my SSH server behind the VPN, but this is obviously optional since you can just expose your SSH server to the internet.

Do phone apps support Yubikey?

Most apps delegate PGP functionality to OpenKeychain, which works with Yubikeys. I use a Yubikey 5 NFC and the Password Store app from F-Droid.

Re: Pass: The standard Unix password manager

#77

Post by bogwog »

yakubin wrote: post #34

It is a file-based key-value store, where only the values are encrypted[1], with GPG to make it worse. For these reasons, I moved to KeePassXC. It is cross-platform, has a nice Qt GUI and you don't have to resort to hacks to have several values associated with a single key (i.e. not just password, but also username and others). [1]: Keys and Git history are not encrypted.

> resort to hacks to have several values associated with a single key (i.e. not just password, but also username and others).

What hacks? Just add the username/whatever under the password.

Pass only uses the first line in the file as the password when you do `pass -c` to copy to clipboard. So you could write a whole book in there if you want.

Pass for iOS also displays those values in a nice list with titles if you write the extra fields as "key: value"

Example:

    
    username: coolguy
    whatever: abc123

Re: Pass: The standard Unix password manager

#78

Post by nulbyte »

timvisee wrote: post #73

I've developed `prs` as `pass` alternative. It fixes many annoyances for daily use. It provides automatic syncing between multiple devices through git, supports multiple keys and many other things. It simply uses your existing `pass` store. Some might find it useful. https://github.com/timvisee/prs

Pass already supports multiple keys. What does prs do differently?

Re: Pass: The standard Unix password manager

#79

Post by teawrecks »

aborsy wrote: post #37

Here are some of the pros of the Pass: * It leaks meta-data. That might sound a con, but in exchange you get the ability to extract a password without decrypting and thus exposing other passwords. There is isolation. * It’s more convenient than a single file password manager. You type ‘’pass -c goo’’ for your Google account, instead of clicking on your password manager, typing password, searching in data base, findin…

I want a tool like this, but I don't think I can ever be ok with leaking meta data.
Post reply on HN