Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mitro Releases a New Free and Open Source Password Manager

eff.org

Post reply on HN
Print view View original

81–90 of 131 posts

Re: Mitro Releases a New Free and Open Source Password Manager

#81

Post by zellyn »

k2enemy wrote: post #69

I'll use this as an opportunity to give a shout out for my new favorite password manager: pass [0] It uses gpg to encrypt passwords that are then stored locally, but can be synced using Dropbox, rsync, unison, etc. It is a command line program, so it doesn't have things like browser integration, but on a mac, a little Automator magic alleviates most of that pain. Besides, after trying 1password, lastpass, and a few o…

Very nice, but:

1) one of the reasons I use a password store is to share passwords with my wife. I can't imagine her using this 2) iPhone? Android? 3) 1password's integration with the browser is very helpful: since I've been using a linux box as my day-to-day machine (where 1password doesn't have a native version), I've been using it significantly less, because it adds friction. On Mac OS, I would just auto-gen a horrific 12-16 character random password for any website, and have it automatically saved to my 1password.

As you might guess, I have high hopes for Mitro, especially if they (well, I guess it's now we) can create a compelling don't-use-their-host story (either hosted, or file-based (eg. dropbox)) and pass at least a cursory security smoke test. :-)

Re: Mitro Releases a New Free and Open Source Password Manager

#82

Post by gioele »

k2enemy wrote: post #69

I'll use this as an opportunity to give a shout out for my new favorite password manager: pass [0] It uses gpg to encrypt passwords that are then stored locally, but can be synced using Dropbox, rsync, unison, etc. It is a command line program, so it doesn't have things like browser integration, but on a mac, a little Automator magic alleviates most of that pain. Besides, after trying 1password, lastpass, and a few o…

I'll use this as an opportunity to give a shout out for my own unix password manager that I started writing because I did not like some design choices of pass: pw [1].

From the homepage:

> pw is an alternative to pass, keepassx and other similar programs.

> The main points of pw are:

> * The passwords are stored using a simple line-based text format.

> * Passwords can be protected using public-key encryption or symmetric encryption. Or both.

> * No information about the accounts is stored in clear-text.

> * All the work is done using only GPG and Unix tools.

> * The output is easy to use in pipeline with other tools.

> * Follows the XDG Base Directory specification: no clutter in your home directory.

[1] https://github.com/gioele/pw

Re: Mitro Releases a New Free and Open Source Password Manager

#83

Post by drvortex »

vijayp wrote: post #2

We're very excited to make this available to the community and welcome pull requests, bug reports, etc.. Pitch in on Github: https://github.com/mitro-co/mitro

I liked the idea of a free and open-source password manager. It seems that Mitro has been around for nearly a year.[1].

It does not seem anywhere near as mature as Lastpass though. There are no additional features such as a credit card or notes store. Also, it seems buggy since I was only able to login once through the Chrome extension.

I guess I will stick with Lastpass for now.

Re: Mitro Releases a New Free and Open Source Password Manager

#85

Post by RyanMiller »

JoshTriplett wrote: post #70

How does this compare to letting Firefox remember my passwords and sync them via Firefox Sync?

I don't know much about Mitro but most Password software don't store your passwords as plaintext on your computer. They also don't make it easy to generate random password under certain criteria.

Personally, I'd trust Mozilla with at most my bookmarks/settings/tabs. Keep your security safer with people dedicated to just it. Doubt that's an endorsement for Mitro, though. At least for now.

Re: Mitro Releases a New Free and Open Source Password Manager

#86

Post by techsupporter »

JelteF wrote: post #74
smacktoward wrote: post #30

Earlier quoted context omitted.

KeePassDroid? http://www.keepassdroid.com/

I recently started using KeePass2Android [1] instead of KeePassDroid. It has some features I really like, like cloudstorage integration with Google Drive, Dropbox and more. [1] https://play.google.com/store/apps/details?id=keepass2androi...

I really, really love KeePass2AndroidOffline. The app itself needs no permissions except the ability to read a file from the phone's local storage. Using OwnCloud's app and the "keep a file up to date" feature, I have my KeePass file synced to my various computers and my phone. Plus, KP2A has the "type this password for me" keyboard instead of relying on copy/paste. I didn't realize until I read the docs for another project, the clipboard is an API that can be hooked by other apps to see what's on the clipboard. It makes obvious sense but I never thought about it.

Re: Mitro Releases a New Free and Open Source Password Manager

#87

Post by mateuszf »

k2enemy wrote: post #69

I'll use this as an opportunity to give a shout out for my new favorite password manager: pass [0] It uses gpg to encrypt passwords that are then stored locally, but can be synced using Dropbox, rsync, unison, etc. It is a command line program, so it doesn't have things like browser integration, but on a mac, a little Automator magic alleviates most of that pain. Besides, after trying 1password, lastpass, and a few o…

What was your usage patterns with lastpass? For my use cases it works extremely well.

Re: Mitro Releases a New Free and Open Source Password Manager

#88

Post by snassar »

isaacdl wrote: post #35
JohnTHaller wrote: post #27

Earlier quoted context omitted.

Currently, this is the best option. Though I recommend KeePass proper as opposed to X since KeePassX's last stable release was over 4 years ago and they've only pushed out alpha builds since then.

Unfortunately, if you want to run on Linux, KeePassX is the best choice. KeePass "proper" does work on Linux under Mono, but the UI is pretty buggy (textfields don't render the cursor in the right place, and the UI just looks awful in general). I really do wish there was a better native Linux client - some new features would be nice.

There are several good reasons to use KeePassX over Keepass, even with the current status of Alpha 6 in the KeePassX 2 series.

* KeePassX has a consistent UI across Windows, OS X, Linux * It's a small, portable binary. I've had good luck running the Windows and Linux binaries off of USD drives. * Alpha 5 and Alpha 6 have been really stable. I started using Alpha 5 and haven't had a need to look back.

I've been recommending KeePassX as the go-to password manager for Windows, OS X, and Linux over Keepass.

Re: Mitro Releases a New Free and Open Source Password Manager

#89

Post by SideburnsOfDoom »

Andrenid wrote: post #71
SideburnsOfDoom wrote: post #41

Earlier quoted context omitted.

Not keeping sensitive data in Dropbox.

Is there a "secure" way to get a KeePass file onto an iPhone if Dropbox isn't safe? I don't need realtime sync, I'm happy to manually copy it across when I make changes, just curious what the proper way to do it is, if not via Dropbox.

> Is there a "secure" way to get a KeePass file onto an iPhone if Dropbox isn't safe?

I have an android phone. I use a technology called a "USB Cable" to transfer files onto it.

Sadly that is also very insecure:

http://www.theregister.co.uk/2014/07/31/black_hat_hackers_dr... http://appleinsider.com/articles/14/08/01/badusb-malware-liv...

but at least it is safe against remote intercepts.

Re: Mitro Releases a New Free and Open Source Password Manager

#90

Post by vincentkriek »

dnfehren wrote: post #16

Since the company has been acquired what are the plans for the service? http://labs.mitro.co/ says that "The service will continue to operate as-is for the foreseeable future." but there is a lot of ambiguity in 'forseeable.' While I really appreciate the value of having the client and server code open sourced I don't want to run my own server nor do I want to sign up for a service that, with the changes that will li…

The best thing would be if they would release the server software. That way you could run the software yourself and be totally independent. If that happens, I'm totally on board. Now I'm still on the fence between this and LastPass
Post reply on HN