Pass: The standard Unix password manager

#1

Post by homarp » Tue, Apr 13, 2021, 8:45 PM UTC

Pass: The standard Unix password manager
passwordstore.org

Re: Pass: The standard Unix password manager

#2

Post by bloaf » Tue, Apr 13, 2021, 9:31 PM UTC

It feels nice and clean, but also like it is leaking the list of sites I use.

Re: Pass: The standard Unix password manager

#3

Post by oritsnile » Tue, Apr 13, 2021, 9:36 PM UTC

I've used pass for a while, but I switch to bitwarden, since it has official apps for all platforms. Also with bitwarde I only have to trust them, with pass I have to trust all the different app developers.

Re: Pass: The standard Unix password manager

#4

Post by PureParadigm » Tue, Apr 13, 2021, 9:36 PM UTC

I've been using pass for several years now and I recommend it to my friends, but I usually get weird looks when I say I store my passwords in a git repo (it's not as bad as it sounds!). Here's why:

- I host my git repo on my desktop computer (through SSH), so it's not exposed anywhere except if you have SSH access to my computer. (A lot of people seem to think git = GitHub which is not true). So if your git repo is not exposed to the public, you don't leak any of the site names/usernames you use.

- The passwords are GPG encrypted so even if it were leaked that would be okay as long as my secret key remains secure.

As far as usability goes, I usually use the -c option to copy/paste my passwords. I used a browser extension for awhile, but I haven't gotten around to reinstalling since the copy/paste works fine for me. Syncing with my phone and Linux devices works perfectly (since it's just git).

The Windows client seems to be no longer maintained [1], so I would like better support here for my Surface. But this is still okay since I can SSH to my desktop computer from Windows and copy/paste the passwords from there.

[1] https://github.com/mbos/Pass4Win#readme

Re: Pass: The standard Unix password manager

#5

Post by teddyh » Tue, Apr 13, 2021, 9:37 PM UTC

bloaf wrote: post #2

It feels nice and clean, but also like it is leaking the list of sites I use.

Leaking to where?

Re: Pass: The standard Unix password manager

#6

Post by ufo » Tue, Apr 13, 2021, 9:42 PM UTC

teddyh wrote: post #5

bloaf wrote: post #2

It feels nice and clean, but also like it is leaking the list of sites I use.

Leaking to where?

In the default settings the names of the websites are stored unencrypted, in the filenames.

Re: Pass: The standard Unix password manager

#7

Post by battles » Tue, Apr 13, 2021, 9:43 PM UTC

teddyh wrote: post #5

bloaf wrote: post #2

It feels nice and clean, but also like it is leaking the list of sites I use.

Leaking to where?

To anyone who types pass in your terminal it looks like.

Re: Pass: The standard Unix password manager

#8

Post by cameronhowe » Tue, Apr 13, 2021, 9:45 PM UTC

teddyh wrote: post #5

bloaf wrote: post #2

It feels nice and clean, but also like it is leaking the list of sites I use.

Leaking to where?

compared to other password managers which is just an encrypted database.

pass uses normal folders to store your website/username information so in that way it is less protected.

Re: Pass: The standard Unix password manager

#9

Post by tlackemann » Tue, Apr 13, 2021, 9:49 PM UTC

Pass user for many years, always loved it.

There are a number of ways to integrate it into rofi too, so with the press of a few keys I can navigate to any site and login instantly.

To squash a few concerns:

- Leaking data - If someone types "pass" in your terminal it will show a list of sites that you've stored. I don't find this any less obvious than if someone had LastPass installed on their machine.

- Trusting different app developers - This can be true, but if you stick with the CLI then there's only one app to trust - and one person! You don't rely on a company to safegaurd your data, you trust yourself.

YMMV, thoughts are my own. I happen to very much enjoy pass and I think others might too if you like owning your own data.

Re: Pass: The standard Unix password manager

#10

Post by JadoJodo » Tue, Apr 13, 2021, 9:50 PM UTC

I love the idea of Pass, but from what I've seen of the UX (not talking looks) it doesn't really compare to the ease of use of products like 1Password (which I suspect was the catalyst for this being reposted). Does anyone have any contrary experiences when shared across iOS, Linux, and macOS devices + browsers?