1–10 of 22 posts
I am considering moving from Android to iPhone in the near future. I think the only thing I can't really evaluate easily is whether or not there is support for GNU pass where the GPG key is stored on a Yubikey.
My Android password manager workflow is:
Need password -> Android pass app requests Yubikey Pin -> App requests NFC tap -> password decrypted.
Can I replicate this UX on iPhone today?
What is GNU pass? It looks like people use it to refer to https://www.passwordstore.org/ which isn’t a GNU project?
Paired with an encryption key stored in an isolated device like a Yubikey, it makes for a powerfully secure password system — if you like using the command line for your passwords.
I don’t know of any iOS apps that do this, but I now want one.
What is GNU pass? It looks like people use it to refer to https://www.passwordstore.org/ which isn’t a GNU project?
pass is a command that simplifies reading and writing sensitive text to encrypted files using GPG encryption. It’s most often used to decrypt passwords and API credentials, copying them to the system clipboard for pasting elsewhere without writing the plaintext to the filesystem. Paired with an encryption key stored in an isolated device like a Yubikey, it makes for a powerfully secure password system — if you like u…
Longer answer: iCloud Keychain is end-to-end encrypted credential storage, and its workflow is:
Need password -> Secure system hook to Keychain -> Keychain requests unlock via (face/finger/passphrase as appropriate) -> Password decrypted and auto filled.
There are also third-party options, which can nominally use NFC keys[0] as auth factors, but I’m not currently aware of any that actually do.
Personally, I use 1Password, because I’ve still got a Windows box in my world, and need something cross-platform, and since I’m paying for it, I know it’s the product and not me.
[0] https://developer.apple.com/documentation/authenticationserv...
Earlier quoted context omitted.
pass is a command that simplifies reading and writing sensitive text to encrypted files using GPG encryption. It’s most often used to decrypt passwords and API credentials, copying them to the system clipboard for pasting elsewhere without writing the plaintext to the filesystem. Paired with an encryption key stored in an isolated device like a Yubikey, it makes for a powerfully secure password system — if you like u…
Thanks for the explanation, but I actually do use the software that I linked to, however, it’s not a GNU project, so I’m just confused to if it’s a widely used misnomer or it’s a completely different software package then the one I linked to.
I suspect rather than suggesting it's a GNU project, OP is creating a sort of portmanteau from GnuPG and pass.
Short answer: no. Longer answer: iCloud Keychain is end-to-end encrypted credential storage, and its workflow is: Need password -> Secure system hook to Keychain -> Keychain requests unlock via (face/finger/passphrase as appropriate) -> Password decrypted and auto filled. There are also third-party options, which can nominally use NFC keys[0] as auth factors, but I’m not currently aware of any that actually do . Pers…
When wealthy clients come knocking with millions/billions of dollars to spend on advertising to, or vacuuming up data on, a company's customers, you are always potentially the product.
Paying for a product/service doesn't mean that there isn't someone with more money willing to pay for your attention or data via that product/service. Those people become a company's real customers.
Earlier quoted context omitted.
Thanks for the explanation, but I actually do use the software that I linked to, however, it’s not a GNU project, so I’m just confused to if it’s a widely used misnomer or it’s a completely different software package then the one I linked to.
It seems to be a misnomer on OP's part, they's also said about switching to 'gnu pass' in previous comments, but needing to get their head around GPG... I suspect rather than suggesting it's a GNU project, OP is creating a sort of portmanteau from GnuPG and pass.
[1] https://www.google.com/search?q=%22gnu+pass%22
[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Short answer: no. Longer answer: iCloud Keychain is end-to-end encrypted credential storage, and its workflow is: Need password -> Secure system hook to Keychain -> Keychain requests unlock via (face/finger/passphrase as appropriate) -> Password decrypted and auto filled. There are also third-party options, which can nominally use NFC keys[0] as auth factors, but I’m not currently aware of any that actually do . Pers…