Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Manage passwords with GPG

github.com

Post reply on HN
Print view View original

21–30 of 52 posts

Re: Show HN: Manage passwords with GPG

#21

Post by [deleted] »

aidenn0 wrote: post #10
nmrm2 wrote: post #4

http://www.passwordstore.org/ is a similar solution, and I prefer it to this solution for a few reasons: * git integration. * Separate file for each secret, so that I can store the password on the first line and then other sensitive account details on subsequent lines. * -c flag for copying passwords to clipboard (but only copies the first line of the file, so it doesn't interfere with the usecase above) * tab comple…

Separate files for each secret is a downside for me, particularly since it exposes the lookup key. [edit] deleted paragraph that was supposed to be added to a different comment.

[deleted]

Re: Show HN: Manage passwords with GPG

#22

Post by raldu »

nmrm2 wrote: post #4

http://www.passwordstore.org/ is a similar solution, and I prefer it to this solution for a few reasons: * git integration. * Separate file for each secret, so that I can store the password on the first line and then other sensitive account details on subsequent lines. * -c flag for copying passwords to clipboard (but only copies the first line of the file, so it doesn't interfere with the usecase above) * tab comple…

This nice solution is minimal, well scripted and very UNIXy. However, one tradeoff is that filenames for the stored password are plain. Running the tree command on the directory where encrypted files are stored would give us something like,

    $ tree .password-store
    irc
    ├── efnet
    └── freenode

Re: Show HN: Manage passwords with GPG

#23

Post by DDub »

davej wrote: post #15
nmrm2 wrote: post #4

http://www.passwordstore.org/ is a similar solution, and I prefer it to this solution for a few reasons: * git integration. * Separate file for each secret, so that I can store the password on the first line and then other sensitive account details on subsequent lines. * -c flag for copying passwords to clipboard (but only copies the first line of the file, so it doesn't interfere with the usecase above) * tab comple…

These tools really need a browser plugin for them to be useful to me.

Has anyone tried using these?

- https://github.com/gustaebel/passext (Chrome)

or

- https://github.com/jvenant/passff (firefox)

Re: Show HN: Manage passwords with GPG

#24

Post by mnem »

jrcii wrote: post #5
nmrm2 wrote: post #4

http://www.passwordstore.org/ is a similar solution, and I prefer it to this solution for a few reasons: * git integration. * Separate file for each secret, so that I can store the password on the first line and then other sensitive account details on subsequent lines. * -c flag for copying passwords to clipboard (but only copies the first line of the file, so it doesn't interfere with the usecase above) * tab comple…

It would be nice if there were a way to integrate it with the OS X keychain, unfortunately I haven't gotten around to it and I haven't been able to find anyone who has done this already since it's tricky to google.

Are you aware of the command line utility, security? https://developer.apple.com/library/mac/documentation/Darwin...

Some examples of using it: http://joshtronic.com/2014/02/17/using-keyring-access-on-the...

Re: Show HN: Manage passwords with GPG

#25

Post by mnem »

QuantumRoar wrote: post #9
jrcii wrote: post #5

Earlier quoted context omitted.

It would be nice if there were a way to integrate it with the OS X keychain, unfortunately I haven't gotten around to it and I haven't been able to find anyone who has done this already since it's tricky to google.

It would be nice if I could at least export from the OS X keychain (you can always write up a simple script to add them to pass). Internet accounts can be exported, but all the rest won't work. I've given up on it, but I'd like to know if anyone might have found something that I overlooked.

Have you tried the security commandline utility? As far as I know it reads anything you want from the keychain. For example, to grab what password Spotify is storing in my keychain: `security find-generic-password -s Spotify -w`

Re: Show HN: Manage passwords with GPG

#26

Post by akeck »

This and passwordstore.org are neat. I used to do one-password-per-gnupg-file with plain GnuPG commands, and liked it quite a bit. Lately though, I've been using passwords in plaintext in a AES256 disk image with a shared long passphrase. The main advantage so far is that other family members can use the disk image work flow easily. The main disadvantage is that the disk image format is OS-platform specific. I know that KeePass probably works best for family, so we may switch to that in the future.

Re: Show HN: Manage passwords with GPG

#27

Post by jrcii »

mnem wrote: post #24
jrcii wrote: post #5

Earlier quoted context omitted.

It would be nice if there were a way to integrate it with the OS X keychain, unfortunately I haven't gotten around to it and I haven't been able to find anyone who has done this already since it's tricky to google.

Are you aware of the command line utility, security? https://developer.apple.com/library/mac/documentation/Darwin... Some examples of using it: http://joshtronic.com/2014/02/17/using-keyring-access-on-the...

Yep, I use it to provide passwords to my shell scripts, for example. securitypass integration is precisely what I'm looking for, I get the feeling I'm going to end up having to implement it myself.

Re: Show HN: Manage passwords with GPG

#28

Post by blfr »

raldu wrote: post #22
nmrm2 wrote: post #4

http://www.passwordstore.org/ is a similar solution, and I prefer it to this solution for a few reasons: * git integration. * Separate file for each secret, so that I can store the password on the first line and then other sensitive account details on subsequent lines. * -c flag for copying passwords to clipboard (but only copies the first line of the file, so it doesn't interfere with the usecase above) * tab comple…

This nice solution is minimal, well scripted and very UNIXy. However, one tradeoff is that filenames for the stored password are plain. Running the tree command on the directory where encrypted files are stored would give us something like, $ tree .password-store irc ├── efnet └── freenode

Yes, it even has a built-in pass ls (which uses tree). It might be a feature, depends on how you look at it.

Frankly, just encrypt the entire drive. Otherwise, there will always be a leak somewhere. If not in the file structure, then in the swap.

Re: Show HN: Manage passwords with GPG

#29

Post by ajross »

Why bother with the fixed functionality?

    (defun cc () "Secrets File" (interactive) (find-file "/home/ajross/.cc.gpg"))
Launch with "M-x cc" (which is simple enough) or bind to a keystroke. Emacs will prompt you for the decryption cleanly, your distro will surely cache them with gpg-agent, and you can then just edit it and cut and paste as you like.

I'm pretty sure it's "cc" because it was originally a list of credit card numbers, but quite frankly I've been doing this so long I've forgotten.

Re: Show HN: Manage passwords with GPG

#30

Post by werkshy »

DDub wrote: post #23
davej wrote: post #15

Earlier quoted context omitted.

These tools really need a browser plugin for them to be useful to me.

Has anyone tried using these? - https://github.com/gustaebel/passext (Chrome) or - https://github.com/jvenant/passff (firefox)

From the chrome extension github:

  "This is pre-alpha quality software, the result of a three
  day project. It will crash your browser, leak your
  passwords and destroy your home. This is actually my first
  Chrome extension and I am no expert javascript programmer."
YMMV
Post reply on HN