Show HN: Manage passwords with GPG

Post by tbe » Fri, Jul 03, 2015, 12:17 PM UTC

INTPenis wrote: post #46

tbe wrote: post #33

Earlier quoted context omitted.

For this reason I'm thinking of switching from gpg to encfs. It has an option for auto-unmounting after a period of unactivity. It would also play well with programs that need to read password from a file. Has anyone else here had the same thought? This guy seems to at least; https://github.com/equivrel/password-store-encfs/blob/master... Edit: spelling

Would be much easier and still acceptable to simply mount the password-store on encfs. Could use autofs to make it auto mount when pass accesses the mount point.

That would mean two stages of password query, which I think might be a con. Also, the file names would either not be encrypted in the git repo or not be compatible with e.g. Android app I guess.

Thanks for the autofs hint, will try it and see how that works out re unlocking.

Post by Foxboron » Fri, Jul 03, 2015, 1:09 PM UTC

drethemadrapper wrote: post #44

I was going to try use one of these solutions, when I read on the EFF that they all provide a single point of failure. If anyone gets hold of your master key/pwd, they would have access to all your usernames & pwds. https://ssd.eff.org/en/module/how-use-keepassx Best to keep them separate - in your brain!

Thats true, but you do forget someone. If you use four-five different password spread among different sites, they will be easier to break then any generated password from keepass, pass or passwordstore.

>If anyone gets hold of your master key/pwd, they would have access to all your usernames & pwds. You would still need access to the physical storage medium. This is either a threat or not depending on your threat model, and for most people this is simply not a threat. And tbh, if someone got a hold of your unencrypted computer you got another problem.

Re: Show HN: Manage passwords with GPG

Re: Show HN: Manage passwords with GPG