Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pass: The standard Unix password manager

passwordstore.org

Post reply on HN
Print view View original

191–200 of 213 posts

Re: Pass: The standard Unix password manager

#191

Post by zaphirplane »

PureParadigm wrote: post #38
spicybright wrote: post #30

Earlier quoted context omitted.

Sorry, I meant more on the UI side. Like if I'm on a website that needs a login, do I run a pass command in a local terminal, then copy and paste?

Ah, there is an Android app [1] which you sync the passwords to and it basically presents a list of all your websites. To use a password: tap on the website name, unlock your GPG key, and then see your password and put it in your phone's copy/paste buffer. [1] https://play.google.com/store/apps/details?id=dev.msfjarvis....

a bunch of apps busted (tiktok) that polled the iphone’s clipboard, isn’t android also susceptible to that ?

Re: Pass: The standard Unix password manager

#192

Post by taeric »

GoblinSlayer wrote: post #154
taeric wrote: post #109

Earlier quoted context omitted.

Not clear how that has any relevance here. If the encryption is broken, pretty sure most encryption is busted.

Encryption is broken, just not in all scenarios, that's why security without threat model is meaningless.

My point was that if this model is broken, I'm not sure I would trust any other for storing data at rest, either.

Specifically, why would you still trust any other password manager?

Re: Pass: The standard Unix password manager

#193

Post by rhardih »

tasuki wrote: post #175
rhardih wrote: post #159

For any LastPass users out there contemplating a switch to pass, I just recently did so myself. Wrote a bit about it here: https://rhardih.io/2021/03/migrating-from-lastpass-to-pass/

I'm a LastPass user contemplating a switch. Your article doesn't say why I should switch . You mention "more control", and that's my thinking as well, but it just appears... not worth it to switch for something so nebulous? Perhaps I'm too lazy?

My own reason was mostly, that do to the dance with mobile; non-free/free/non-free, I thought it was about time to look into self hosting. The post is not really meant to convince you, just that it's definitely doable, with a bit of effort.

Re: Pass: The standard Unix password manager

#195

Post by mjgs »

spuz wrote: post #170
mjgs wrote: post #167

I discovered a couple of years ago that iTerm2 has a password manager, as well as other cool features like live text highlighting via regex. Anyway it was the first time I had ever used a password manager that you can call directly in the shell. It’s awesome, and once you memorise a few simple key combos it’s super easy to input stored passwords in the shell.

Why would you want a password manager in your shell? How many times do you need to access password authenticated services from your shell?

Mostly for running commands with sudo, and changing to different users, it really made my workflow a lot faster especially because I have several environments, and each one has different passwords.

Re: Pass: The standard Unix password manager

#196

Post by 2ion »

gspr wrote: post #155

It took me way too long in life to finally start using a password manager (a few years ago). Pass was what finally convinced me. Seldom is a tool perfect, but pass is pretty damn close to!

Same. My previous solution --- LUKS container mounted from a file with just directories and plaintext files in it --- was pretty secure too but pass is really convenient in comparison.

I'm currently playing with integrating bitwarden self hosted into my flow, eyeing a switch, but it's way more complicated to understand than pass...it does not make it easier to trust it.

Re: Pass: The standard Unix password manager

#197

Post by freedomben »

FrenchyJiby wrote: post #105
aborsy wrote: post #52

Earlier quoted context omitted.

Do phone apps support Yubikey?

Yes! Termux[0] does supports gpg and pass but no yubikey by default, but okc-agent[1] is a third party binding of OpenKeyChain, providing barebones gpg via yubikey. I use this to decrypt passwords via NFC: [0]: https://termux.org [1]: https://github.com/DDoSolitary/OkcAgent Simple password decrypt: okc-gpg -d ~/.password-store/mypass.gpg I made a termux shortcut (button on homescreen) to emulate pass-dmenu via this (…

Slightly OT but this is yet another example of why Termux is the killer app for Android. I didn't use to think there was much difference between iOS and Android until I discovered Termux.

Re: Pass: The standard Unix password manager

#198

Post by hk1337 »

ahnick wrote: post #162
hk1337 wrote: post #47

Earlier quoted context omitted.

You could also store it in a Keybase [1] repo. [1] https://keybase.io/

We made an extension for encpass.sh (similar in some ways to pass) that stores secrets in Keybase ( https://github.com/plyint/encpass.sh/blob/master/extensions/... ) if that sort of thing is of interest to you. Outside of personal secrets, it can be used as a sort of low cost stand in for shared secrets that you might use something like Vault for in a team environment.

That's interesting. I started storing my dotfiles repository in Keybase. There's not any secrets in there really other than how my home directory is setup but I figured there's no reason I couldn't keep my AWS keys and ssh key pairs in there too.

Re: Pass: The standard Unix password manager

#199

Post by voidfunc »

jaredsohn wrote: post #134
voidfunc wrote: post #114

I love pass but I have been having very weird issues lately with gpg agent taking ages to ask me my password to decrypt the database. Really annoying and googling has not yielded fixes. Worse the dev doesn’t use GitHub so getting in touch is a giant pain in the ass.

I've had this problem and would solve by killing gpg-agent as described at https://unix.stackexchange.com/questions/382279/gpg-hangs-wh... Ideally there would be a better solution.

Unfortunately that solution did not work for me :<

Re: Pass: The standard Unix password manager

#200

Post by mzur »

efiecho wrote: post #124

To backup the passwords a copy of ~/.password-store/ is enough, but to completely recover, a backup of the gpg keys is also required. What's your strategy for this? Do you just backup the entire ~/.gnupg/ directory?

I have my key on multiple devices (e.g. my phone where I use the Password Store app). Then I have backups of the key as .asc on USB drives as well as printed on paper at two different physical locations.
Post reply on HN