Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pass: The standard Unix password manager

passwordstore.org

Post reply on HN
Print view View original

161–170 of 213 posts

Re: Pass: The standard Unix password manager

#161

Post by mnemnc »

oxplot wrote: post #113

I've just recently started to use 1password and here're my thoughts: - Amazing support and fast response on their forums from the reps - Works across Linux (my desktop), Mac and iPhone and Safari and Chrome browsers - Has CLI - Syncs instantly (unlike Chrome and iCloud Keychain) - Supports TOTP (no - it does not completely defeat the purpose of 2FA, there are multiple aspects to it) I am also aware of the risk I'm ta…

They at least offer local network syncing, instead of requiring a cloud account (which is a deal breaker for me). This lets you keep your passwords in sync between your Computer (master) and mobile devices without them ever leaving your home.

All that does of course still require trust in the company, but at least not in their cloud infrastructure and, well, the internet...

Re: Pass: The standard Unix password manager

#162

Post by ahnick »

hk1337 wrote: post #47
PureParadigm wrote: post #4

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

You could also store it in a Keybase [1] repo. [1] https://keybase.io/

We made an extension for encpass.sh (similar in some ways to pass) that stores secrets in Keybase (https://github.com/plyint/encpass.sh/blob/master/extensions/...) if that sort of thing is of interest to you. Outside of personal secrets, it can be used as a sort of low cost stand in for shared secrets that you might use something like Vault for in a team environment.

Re: Pass: The standard Unix password manager

#163

Post by approxim8ion »

taeric wrote: post #75
yakubin wrote: post #53

Earlier quoted context omitted.

Because you still need to manage your GPG keys with an obscure CLI. When I last switched computers, I tried just copying my "~/.gpg" directory. Didn't work. GPG was confused, produced even more confusing messages, which didn't really help me understand what the problem was. I needed to google for the right incantation of commands to export my keys from one computer and import them on another. Compare that to what you…

Ah, I will make no real defence of gpg's ux. I wasn't sure if you were referring to anything else. I'll take a look at keepassxc again someday. I'm assuming it works with yubikeys?

Yes, keepassxc works with yubikeys.

Re: Pass: The standard Unix password manager

#164

Post by sails »

iudqnolq wrote: post #88
PureParadigm wrote: post #4

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

I'm glad it's working well for you. I used to use pass, but when I lost my gpg key I was able to recover most of my passwords through a mistake I'd made. After that I decided to switch to something where I wouldn't be able to screw up as easily, and bought 1password. I still had an earlier gpg key, and had not reset all my passwords when I switched keys. I'd just re-encrypted them. This let me check out an old commit…

Important point on usability for people who may have overlooked this, like me.

Re: Pass: The standard Unix password manager

#165

Post by eloeffler »

fouuler wrote: post #153
PureParadigm wrote: post #4

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why: - I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is n…

> I usually use the -c option to copy/paste my passwords In X11 it's also possible to get passwords typed automatically with xdotool, which I call through an xmonad package. The only thing I'm missing is more powerful autocompletion.

Are you aware of passmenu, which is part of pass? The autocompletion/selection process works quite well for me

Re: Pass: The standard Unix password manager

#166

Post by hpfr »

adrium wrote: post #152

Used KeePass and pass in the past. KeePass is nice, but has much more features than I really need. I wanted something lighter and simpler, so I migrated to pass in 2015. Even though it is nice that it relies on tools like gpg and git, it complicated things more than not. It is (was?) hard to use on every OS except Linux. And in addition to backing up the database, the gpg key now needs to be backed up, too. Password…

If you can stomach some more features, KeePassXC is well-maintained and has an excellent browser extension as well as FDO secret service integration on Linux for CLI access via secret-tool.

Re: Pass: The standard Unix password manager

#167

Post by mjgs »

I discovered a couple of years ago that iTerm2 has a password manager, as well as other cool features like live text highlighting via regex.

Anyway it was the first time I had ever used a password manager that you can call directly in the shell. It’s awesome, and once you memorise a few simple key combos it’s super easy to input stored passwords in the shell.

Re: Pass: The standard Unix password manager

#170

Post by spuz »

mjgs wrote: post #167

I discovered a couple of years ago that iTerm2 has a password manager, as well as other cool features like live text highlighting via regex. Anyway it was the first time I had ever used a password manager that you can call directly in the shell. It’s awesome, and once you memorise a few simple key combos it’s super easy to input stored passwords in the shell.

Why would you want a password manager in your shell? How many times do you need to access password authenticated services from your shell?
Post reply on HN