4 ms·

https://www.passwordstore.org https://www.passwordstore.org It uses GPG.

• Freak_NL 11y ago
  Yes! Passwordstore is nothing more than a BASH script you can easily browse yourself to see what it does. Encryption is done by GnuPG, so if you already have a GPG-key, getting started is even easier. The command-line interface is very intuitive, and there are a couple of GUI front-ends as well if you want one. Also, passwordstore's database is nothing more than a directory structure containing GPG-encrypted text files. You can access these files without passwordstore as well, as long as you have your GPG private key. For distributing your password database to multiple machines, passwordstore integrates with git. Another option is the excellent syncthing (https://syncthing.net/ https://syncthing.net/) which syncs chosen directories with trusted machines (verified using TLS) on the local network. Passwordstore stores secrets in a directory tree. A really nice feature of passwordstore is that you can have it encrypt secrets under specified directories for multiple GPG-keys. So what I do to share some passwords with my partner, is set up a certain directory in passwordstore's tree to encrypt for both our GPG-keys, and sync only that directory with her computer with syncthing. She has the same setup, but with the default for her passwordstore's database being her own GPG-key. So we both have our private passwords, and a shared set of passwords and other secrets that is synced whenever both our computers are on the same local network.
  • Freak_NL 11y ago
    Also, the security of passwordstore depends on how you handle your GPG-key, so if you use something like a Yubikey NEO to store your GPG-key on, you effectively have two-factor authentication, as mentioned in OP's question.