5 ms·
This is probably not a good solution for the vast majority of people but it works well for me: I use pass[0] but I host my ~/.password-store on a sshfs on a ser
by simias 9y ago
This is probably not a good solution for the vast majority of people but it works well for me: I use pass[0] but I host my ~/.password-store on a sshfs on a server I own. Wherever I need to access my passwords I just mount the sshfs and then can proceed as normal.
Since pass supports versioning the passwords with git it would also be possible to use that, just push/pull the repository to keep it in sync. It would also give you access to the password even while offline, but I actually prefer the added security of not copying the passwords over, even encrypted.
Obviously if you want to access your passwords from, say, a Windows machine or a smartphone it won't quite do the trick.
[0]https://www.passwordstore.org/ https://www.passwordstore.org/
- rkeene2 9y agoSimilar to "pass" is "hunter2" ( https://chiselapp.com/user/rkeene/repository/hunter2/ https://chiselapp.com/user/rkeene/repository/hunter2/ ) which uses a hardware security module such as a smartcard to decrypt the password and allows sharing between users in a file that can be managed by a version control system (such as Fossil or Git).
- mysterydip 9y agoHunter2 sounds like a reference to this: http://bash.org/?244321 http://bash.org/?244321 Amusing if true, both dealing with passwords so it's likely.
- rkeene2 9y agoIt is. There are several references to that on the page and in the source.
- simias 9y agoI actually already do that with pass and a GnuPG smartcard since pass uses gpg to handle the encryption. You can also provide several PGP encryption keys if you want to share your passwords across several people. I believe pass lets you specify the keys on a per-directory basis, although I never actually tried to do that myself.
- rkeene2 9y agohunter2 makes multiple users a first class principle. Anyone that has access to decrypt a password can add other users to that password, in the future if that password is updated all users that have access retain the new password