Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pass: A standard Unix password manager

passwordstore.org

Post reply on HN
Print view View original

101–110 of 212 posts

Re: Pass: A standard Unix password manager

#101

Post by Spivak »

y4mi wrote: post #95
tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

In Windows or in general, because pass has a ton of browser extensions.

https://addons.mozilla.org/en-US/firefox/addon/passff/

https://addons.mozilla.org/en-US/firefox/addon/pass-manager/

Re: Pass: A standard Unix password manager

#102

Post by aeorgnoieang »

y4mi wrote: post #95
tombert wrote: post #90

I love Pass, but the problem I've had is that I always feel like I have to spend a bunch of time setting it up when I'm on Windows. I understand it's the standard UNIX password manager, so I suppose I don't have a ton of room to complain, and most of my computers are Mac or Linux, so it's not a huge deal, but I think it increases the barrier of entry a ton of people. That said, I think Pass is awesome, and having my…

the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.

If you want passwords automatically inserted why not just use the browser's features that do that? I do that for some sites.

Re: Pass: A standard Unix password manager

#103

Post by rythie »

painted wrote: post #31
thecopy wrote: post #28

Earlier quoted context omitted.

Password managers clear the clipboard after 1 minute or so.

there are so many clipboard listeners out there :D so the fact that you clear the clipboard doesn't really matter

If you are truely worried about that, you ought to be using 2FA.

The clipboard feature is helpful in pass, when I have someone standing over my shoulder or connected to a projector.

Re: Pass: A standard Unix password manager

#104

Post by maccard »

da_n wrote: post #23
JetSpiegel wrote: post #14

Using this and something like rofi-pass: https://github.com/carnager/rofi-pass/ Gets me really close to the holy grail of password managers. Browser integration is possible too with PassFF: https://github.com/passff/passff

For me, browser integration is an anti-feature for password managers.

I prefer to trust the browser integration than to trust the clipboard.

Re: Pass: A standard Unix password manager

#105

Post by aeorgnoieang »

mrhigat4 wrote: post #68
painted wrote: post #60

Earlier quoted context omitted.

looks like a nice setup, but what about mobile?

Syncthing has a mobile app and there's an app for pass called PasswordStore[0] using OpenKeychain[1] (pgp manager). I'm not a fan of putting my private key on my mobile, but if I were, this would be a nice setup. [0]: https://github.com/zeapo/Android-Password-Store [1]: https://github.com/open-keychain/open-keychain Edit: yeah for ctmg support, probably have to hold out for something like PostMarketOS to save us.

You don't need to put your private key on a mobile device. You can create a separate key for each device. Pass supports multiple keys.

Re: Pass: A standard Unix password manager

#106

Post by chme »

YorickPeterse wrote: post #27
alex_duf wrote: post #26

I don't like the fact someone with access to my hard-drive can figure out all the services I'm using just by looking at the filenames. It's convenient yes, but I prefer one encrypted file that contains it all.

This shouldn't really be an issue if you're using full disk encryption.

This isn't how real security works.

There is a concept for 'defense in depth', saying that every component should be secure on its own and not rely on other components.

Re: Pass: A standard Unix password manager

#107

Post by aeorgnoieang »

darrmit wrote: post #91

I think pass is awesome if you have the workflow that supports it, but for the vast majority (myself included) it's entirely too difficult to setup and maintain. Particularly if you're using Windows regularly.

Setup is a bit of a pain, but what workflow is required? I just keep a Cygwin window or a Bash on Ubuntu on Windows window open and tab over when I need a password. With the shell auto-completion I find it easier to use than other password managers, tho I prefer not using my mouse so I'm surely biased about that aspect.

I was previously using Password Safe, on Windows, and various compatible alternatives on Linux and Mac OS. Years ago I had tried using a single 'safe' synced via Dropbox but that was a big pain in the ass because sometimes I'd inadvertently lock the safe file by, e.g. starting to add a new password but not finishing. So instead I created a separate safe file for each computer or device. To sync new passwords or changes to existing passwords I'd have to periodically merge all of the safes and manually cleanup any conflicts between them.

The main reason why I switched to Pass is that syncing the password stores on each of my devices is so much easier using Git.

Re: Pass: A standard Unix password manager

#108

Post by aeorgnoieang »

jm2dev wrote: post #5
fwx wrote: post #2

How does this compare to other popular solutions? Specifically, KeepassX / Keepass2 which are the most common solutions I've seen most Unix / Linux users employ. Can we objectively state which one is a better solution?

Pass encrypted passwords are kept in your computer, which I find safer than web based solutions. Optionally you can use git to share passwords between computers but you still need the gpg2 keys from the original repo.

You can setup a password store with Pass to use multiple keys – much better than sharing keys among multiple devices.

Re: Pass: A standard Unix password manager

#109

Post by aeorgnoieang »

amelius wrote: post #32
nickjj wrote: post #10

I've been using pass for a long time now. I have over 200 passwords stored. I like it because you can use it to store sensitive info along with metadata, not just single field passwords. It's also super easy to access the info on the command line with ways to auto-copy passwords to your clipboard (which expires after 45 seconds). I did a write up on it a while back at https://nickjanetakis.com/blog/managing-your-pass…

How do you deal with multiple devices? Do you sync your password files regularly between them?

I use Dropbox but I also use git-remote-gcrypt[0] to encrypt the entire Git repo so that even the file names and sub-directories don't leak outside any of my computers or devices.

[0]: https://github.com/spwhitton/git-remote-gcrypt

Re: Pass: A standard Unix password manager

#110

Post by zamber »

mi100hael wrote: post #70
crypt1d wrote: post #20

Earlier quoted context omitted.

Looks nice. Unfortunately I would never use it for teams as it doesn't have audit logs. These are very useful in case a user is compromised - you can lookup which passwords he accessed and only change those. Same goes if the user left the team and u want to make sure all accesses are revoked.

For teams, I almost always go with Vault ( http://vaultproject.io/ )

Wouldn't Keybase's secret shares be better?
Post reply on HN