141–150 of 212 posts
Earlier quoted context omitted.
Oh well... I wonder why they didnt make something like this the default.
s/they/he/ Pass is pretty much a glorified bash script using GPG and Git. Adding filename encryption on top would be a nightmare, not to mention that terminal suggestions would be pretty much broken.
You can always write an (encrypted) index file that contains a simple list of all domains.
Earlier quoted context omitted.
My impression of Vault is that it is more useful for automated situations. How useful is it as a shared password manager? Do you have non-technical folks using it? And if so, how are they interacting with the vault?
Sounds like a great idea for a side project. Build a user friendly interface that leverages a remote vault server on the backend. It's primary use case if definitely for applications.
Earlier quoted context omitted.
the nonexistent browser support makes it even more troublesome to setup. there is some support on linux systems, but windows is plain out of luck i Really like the idea of pass, but ill never accept copy pasting logins/passwords again. they'll need to be automatically inserted on a matching website. everything else is too much manual overhead for my taste.
Please understand that browser integration is the Achilles' Heel of password managers. While you get the convenience of autofill, you're also bringing access to your password database into the browser's attack surface. Bugs in the browser sandbox or improper extension implementations can allow rogue sites to get the goods. There have been multiple instances of major password manager extensions leaking secrets just in…
Found out I needed GPG, and some encryption key or ID and whatnot. I have no clue what these things are and would like to know.
How can I learn about this encryption stuff like keys and RAS and whatnot? (Books n Articles)
Earlier quoted context omitted.
Oh well... I wonder why they didnt make something like this the default.
s/they/he/ Pass is pretty much a glorified bash script using GPG and Git. Adding filename encryption on top would be a nightmare, not to mention that terminal suggestions would be pretty much broken.
Earlier quoted context omitted.
I've got the same setup, it's pretty great. One thing, though: make sure you have another way of decrypting your passwords! I lost my Yubikey once, and I lost all my passwords. Now I have a copy of that key on a USB drive I keep at home in a small safe.
Yeah, my passwords are encrypted to two private keys. One is on the Yubikey, the other is printed and stored securely.
I've used this for a long time, and along with its Git integration (pushing/pulling to/from a repository on my own server, accessed over SSH) and a GPG key stored on a Yubikey Neo, I've got basically seamless sync between two laptops, a desktop and an Android phone, without using any third-party service. The "Password Store" app on Android is compatible with `pass` and supports Git and NFC for using the Yubikey Neo t…
The only problem I got with the password store application is that the Git integration seem to be a bit broken. It often refuse to push, pull or sync depsite having no conflict. But you just have to delete the store and pull everything again, so it's not a huge problem. I definitly have to try the yubikey integration !
[1]: https://termux.com
I would claim that there isn't a more convenient password management solution than this.
I've used this for a long time, and along with its Git integration (pushing/pulling to/from a repository on my own server, accessed over SSH) and a GPG key stored on a Yubikey Neo, I've got basically seamless sync between two laptops, a desktop and an Android phone, without using any third-party service. The "Password Store" app on Android is compatible with `pass` and supports Git and NFC for using the Yubikey Neo t…
The only problem I got with the password store application is that the Git integration seem to be a bit broken. It often refuse to push, pull or sync depsite having no conflict. But you just have to delete the store and pull everything again, so it's not a huge problem. I definitly have to try the yubikey integration !