Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

161–170 of 320 posts

Re: Ask HN: What is your password management solution?

#161
post #150

Just a follow up: what do you use for secrets files, like ssh keys? Everytime I find my self in some mess with too many keys to manage. :\

For SSH, KeePass + KeeAgent with the private/public keys as attachments to the KeePass entries. For other files, like a GPG export, again KeePass with its file attachment feature.

Re: Ask HN: What is your password management solution?

#162

`pass` is a nice command line tool that stores gpg2 encrypted password files. It's simple, super handy and doesn't require you to trust any third party with what you're storing. website: https://www.passwordstore.org/ man page: https://git.zx2c4.com/password-store/about/

Does pass still stote metadata unencrypted (as file names) or did they fix that now?

Re: Ask HN: What is your password management solution?

#163

I use iCloud Keychain on macOS and iOS. Both operating systems include a rudimentary interface for managing passwords, and automatically store passwords entered in Safari. Keychain Access on macOS also allows to create secure notes on iCloud Keychain.

iCloud Keychain works great for me. Although, if I could change one thing, it would be to add a dedicated iOS app, instead of having to go to Settings > Safari > Passwords.

Re: Ask HN: What is your password management solution?

#164

Earlier quoted context omitted.

+1 for gopass

I'm confused — what's the difference of `pass` and `gopass`?

They are compatible but gopass supports multiple password stores and some other nice features listed on the website:

https://www.justwatch.com/blog/post/announcing-gopass/

Re: Ask HN: What is your password management solution?

#165
post #157
post #156

Earlier quoted context omitted.

Wouldn't combining the "master_password", "domain" and your username/email save you from worrying about the "n" variable? You are using "n" to differentiate from multiple accounts on "domain", right?.. or am I misunderstanding?

No, I'm using 'n' to deal with websites that periodically require you to change password and enforce that you use a new password I suppose I could also do it as master_password + '/' + domain + str(n) or something like that.

Ahh, ok then how about using the DateTime at runtime? That would then save you from having to keep "n" stored elsewhere for future uses.

Edit: nevermind, this would prevent you from retrieving the password - I had in mind a password generator, sorry.

Re: Ask HN: What is your password management solution?

#166
post #28

Earlier quoted context omitted.

This, IIRC, requires an older version of 1Password. Version 4, from the "Who moved my cheese" discussion of 1Password's most recent subscription changes.

I can confirm this option still exists in 1Password 6 (I'm using the iCloud sync but I see the option for dropbox as well). I'm not sure how to get the license though. I only see the upgrade path that I took - not the outright purchase.

https://agilebits.com/store

You can still purchase a Mac license there. I don't see a Windows option, but I'm viewing this from a Mac, so not sure if they're just hiding it. (Some people in this thread have said that there's no longer a non-subscription version for Windows.)

Re: Ask HN: What is your password management solution?

#168
post #55

This is my password manager. password = b64encode(hashlib.pbkdf2_hmac( 'sha256', (master_password + '/' + domain).encode(), b'', 100000 + n )).decode()[0:16] + 'Aa$1' master_password = some master password that you never write or store anywhere domain = domain name for the service in question, e.g. 'facebook.com' n = the nth password being generated for the domain (typically 0) The 'Aa$1' is to ensure satisfaction of…

By the way, for those wondering about convenience, this will wait 3 seconds (during which you switch to your web browser and click the password field) and then it will "type" the password. (You do NOT want to cut-and-paste your password from a terminal as the clipboard can be read by anything.)

    # requires: sudo apt-get install xautomation for 'xte'

    import time
    from subprocess import Popen, PIPE

    macro = ""

    for char in password:
      if char == '$':
        macro += "keydown Shift_L\nkey 4\nkeyup Shift_L\n"
      elif char == '+':
        macro += "keydown Shift_L\nkey equal\nkeyup Shift_L\n"
      elif char == '/':
        macro += "key slash\n"
      elif char.isupper():
        macro += "keydown Shift_L\nkey %s\nkeyup Shift_L\n" % char
      elif char.islower() or char.isdigit():
        macro += "key %s\n" % char

    print("Entering password in 3 seconds ... [^C to abort]")
    time.sleep(3)

    Popen(['xte'], stdin=PIPE).communicate(macro.encode())

Re: Ask HN: What is your password management solution?

#169
post #163

I use iCloud Keychain on macOS and iOS. Both operating systems include a rudimentary interface for managing passwords, and automatically store passwords entered in Safari. Keychain Access on macOS also allows to create secure notes on iCloud Keychain.

iCloud Keychain works great for me. Although, if I could change one thing, it would be to add a dedicated iOS app, instead of having to go to Settings > Safari > Passwords.

I agree. The iOS password manager is hidden away and I wish there was an easy way to access it.

Re: Ask HN: What is your password management solution?

#170
I currently use 1Password (local) on iOS and OSX, and use 2FA wherever possible as well.

I'm unhappy with support for windows/linux/chromeos, so I was already looking for alternatives.

I manage certain passwords (PGP keys, some very high privilege accounts, etc.) separately (primarily offline, and some split).

Considering building/paying to have built something that truly meets my needs, since my needs are fairly general.

Post reply on HN