4 ms·

I've used QTPass. It provides support to encrypt password directories to multiple keys. It allows for multiple profiles as well, so one can have a team password

by danjoc 10y ago

I've used QTPass. It provides support to encrypt password directories to multiple keys. It allows for multiple profiles as well, so one can have a team password store as well as a private one. It can also auto push/pull. Plus it has a nice cross platform gui. Can you elaborate on the differences between how gopass and QTPass accomplish these things and why one might want to choose gopass instead?

endymi0n 10y ago
Actually, QTPass uses `pass` under the hood (which means you can use it with gopass as well!) and seems to have taken a different abstraction on it than we did, I didn't know about that project. That being said, with the next versions we're supporting much nicer features as well, such as binary secrets, grant/request workflows and other stuff. We cater to a command-line first audience, but there's nothing preventing you from using QTPass with gopass.
endymi0n 10y ago
Roadmap Be 100% pass compatible Storing binary files in gopass (almost done) Storing structured files and templates (credit cards, DBs, websites...) UX improvements and more wizards Tackle the information disclosure issue Build a great workflow for requesting and granting access Better and more fine grained ACL Be nicely usable by semi- and non-technical users
- danjoc 10y ago
  >Tackle the information disclosure issue I'm curious how you plan to approach this one. One nice thing about passff is that it can find the right password file based on if the file name matches the domain. I don't need to drill down to my bank/paypal file when I visit paypal.com for instance. It would be nice if a public github repo would suffice, but putting a git remote on a usb stick works pretty nicely and is private as well. I'm considering writing an implementation myself for a different audience, so it is nice to pick your brains as you've probably given this a lot of thought too :)

by danjoc 10y ago

endymi0n 10y ago

Actually, QTPass uses `pass` under the hood (which means you can use it with gopass as well!) and seems to have taken a different abstraction on it than we did, I didn't know about that project. That being said, with the next versions we're supporting much nicer features as well, such as binary secrets, grant/request workflows and other stuff. We cater to a command-line first audience, but there's nothing preventing you from using QTPass with gopass.

endymi0n 10y ago

Roadmap Be 100% pass compatible Storing binary files in gopass (almost done) Storing structured files and templates (credit cards, DBs, websites...) UX improvements and more wizards Tackle the information disclosure issue Build a great workflow for requesting and granting access Better and more fine grained ACL Be nicely usable by semi- and non-technical users

danjoc 10y ago
>Tackle the information disclosure issue I'm curious how you plan to approach this one. One nice thing about passff is that it can find the right password file based on if the file name matches the domain. I don't need to drill down to my bank/paypal file when I visit paypal.com for instance. It would be nice if a public github repo would suffice, but putting a git remote on a usb stick works pretty nicely and is private as well. I'm considering writing an implementation myself for a different audience, so it is nice to pick your brains as you've probably given this a lot of thought too :)