Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

novamostra.com

Post reply on HN
Print view View original

41–50 of 93 posts

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#41

Post by nordsieck »

bm3719 wrote: post #9

This is an interesting tech stack, but seems heavy-handed for managing such a small amount of raw data (the l/p list itself). My solution for the past 14 years has been a simple GPG-encrypted org-mode (text) file. I can get to a password multiple ways from any device. The main way I check one is to open the file in Emacs which prompts for the master password via pinentry. You could also use a keyfile. Usually I just…

> My solution for the past 14 years has been a simple GPG-encrypted org-mode (text) file.

Have you ever taken a look at pass?

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#42

Post by qwerpy »

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm going somewhere without internet and need a backup mechanism of getting to my passwords, I can copy the database onto a memory stick.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#43

Post by mbreese »

syntaxing wrote: post #36

An alternative to this is to expose this to your local network and use tailscale to connect to it so you do not have to carry it around while being secure.

That similar to what I was thinking too… instead of carrying around a device, why not have a server that is physically secured somewhere and connect with Wireguard? It could be at home or on a cloud, if you trust that.

Tailscale and wireguard are available for all major devices, including mobile. So, if you do this, your password manager can live anywhere and doesn’t need to be exposed to the main internet at all. You don’t even need SSH/network access to the remote machine, just HTTPS over Wireguard (and local or console access). Everything else can be locked down tight.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#44

Post by 3np »

16mb wrote: post #32
slowhand09 wrote: post #28

That's such a tease. I check RPI-locator daily. Buying a Pi anything in the US is hard now.

I ended up getting some ROCK64 boards instead. They’re a great price One downside is the PoE hats are massive https://pine64.com/product/rock64-4gb-single-board-computer/

Just get 5V 3A PoE China splitters from Aliexpress.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#46

Post by zmxz »

qwerpy wrote: post #42

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm…

What happens when there's more than you who uses the Keepass file and how do you store new passwords to the file when you create new accounts on the web (for various services)?

What's the usage flow? Is there browser extension that allows you to interact with it without opening Keepass program?

Maintenance you described is easy, but what about the actual usage and sharing passwords?

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#47

Post by Semaphor »

qwerpy wrote: post #42

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm…

It’s the same for me. And I don’t even need to copy the DB, as the Android app long-term caches the file even when it’s normally read via nextcloud.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#48

Post by Semaphor »

zmxz wrote: post #46
qwerpy wrote: post #42

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm…

What happens when there's more than you who uses the Keepass file and how do you store new passwords to the file when you create new accounts on the web (for various services)? What's the usage flow? Is there browser extension that allows you to interact with it without opening Keepass program? Maintenance you described is easy, but what about the actual usage and sharing passwords?

Not OP. Sharing is not a thing, but I never had the need to share passwords.

Storing new accounts syncs just like everything else.

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#49

Post by pmontra »

zmxz wrote: post #46
qwerpy wrote: post #42

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm…

What happens when there's more than you who uses the Keepass file and how do you store new passwords to the file when you create new accounts on the web (for various services)? What's the usage flow? Is there browser extension that allows you to interact with it without opening Keepass program? Maintenance you described is easy, but what about the actual usage and sharing passwords?

Not OP. I add only from my laptop, I share with Syncthing to my other devices. Nobody else use my passwords. If a customer has a per team password they either never change it or in the very rare cases they do, they tell me the new password when I ask why the old one doesn't work anymore. They don't let me in their shared password manager anyway (only one customer has one.)

Re: Bring Your Own Password Manager: Portable BitWarden on a Pi Zero

#50

Post by antisthenes »

zmxz wrote: post #46
qwerpy wrote: post #42

I've seen so many interesting password manager solutions over the years, but I have yet to move away from a Keepass file hosted on cloud storage. I can read and write to it using apps from every device I use: windows and linux PCs, iOS and Android devices. The file is versioned so accidentally clobbering it isn't a concern. There is zero maintenance, and if my home server goes down my passwords are unaffected. If I'm…

What happens when there's more than you who uses the Keepass file and how do you store new passwords to the file when you create new accounts on the web (for various services)? What's the usage flow? Is there browser extension that allows you to interact with it without opening Keepass program? Maintenance you described is easy, but what about the actual usage and sharing passwords?

What's the use case for sharing passwords? I've never had the need to share one in 20+ years of being a power user. If I end up dead, my master password will be shared in my will with appropriate parties.

> Is there browser extension that allows you to interact with it without opening Keepass program?

I sure hope not.

Post reply on HN