5 ms·

Pass is literally all you need: https://www.passwordstore.org/ https://www.passwordstore.org/

by catacombs 8y ago

kgraves 8y ago
I would rather not use the command line to manage my passwords and not everyone can use the command line.
- Legogris 8y ago
  There are a variety of clients for several platforms (desktop and mobile apps, browser extensions, desktop environment integrations). You can use pass without a single console line. Not sure why this is downvoted, at first look this seems to solve things similarly to GNU pass except pass makes sharing password stores with teams etc smooth. Because of using GPG rather than straight up asymmetric encryption you get a key management for free. Additionally crypto implementation seems hit well-designed. This would have been a lot better as a GNU pass client - exact same user experience but they wouldn't have to solve several important problems.
  - baliex 8y ago
    Interested in how pass can be used without the command line?
    - Legogris 8y ago
      They have some links on their front-page (linked in the top comment): https://www.passwordstore.org/#other https://www.passwordstore.org/#other Personally I use qtpass as a GUI manager and passmenu for fetching from clipboard via a keyboard shortcut.
- stabbles 8y ago
  I'm using `pass` for years now and it's perfect. On Android there is the Password Store app which integrates with the OpenPGP app, it's amazing :).
bhhaskin 8y ago
Agreed pass is fantastic. It's built on top of tools such as gpg and git. It's simple and easy to extend or build clients for.
_underfl0w_ 8y ago
My biggest concern with pass (even after keeping the password store itself on a Veracrypt volume) is that - authorized or not - typing the `pass` command prints a nice, pretty list of every website/password title in the store. That makes me really uneasy. I considered changing them all to random strings, but that would make it difficult for me to find the password I need - defeating the purpose. I do love the fact that it uses git though. This is huge when you have it on multiple devices and might, say, add a new password from your phone.
- aesh2Xa1 8y ago
  You could put the pass directory on an encrypted filesystem.

Pass is literally all you need: https://www.passwordstore.org/ https://www.passwordstore.org/

kgraves 8y ago

I would rather not use the command line to manage my passwords and not everyone can use the command line.

Legogris 8y ago
There are a variety of clients for several platforms (desktop and mobile apps, browser extensions, desktop environment integrations). You can use pass without a single console line. Not sure why this is downvoted, at first look this seems to solve things similarly to GNU pass except pass makes sharing password stores with teams etc smooth. Because of using GPG rather than straight up asymmetric encryption you get a key management for free. Additionally crypto implementation seems hit well-designed. This would have been a lot better as a GNU pass client - exact same user experience but they wouldn't have to solve several important problems.
- baliex 8y ago
  Interested in how pass can be used without the command line?
  - Legogris 8y ago
    They have some links on their front-page (linked in the top comment): https://www.passwordstore.org/#other https://www.passwordstore.org/#other Personally I use qtpass as a GUI manager and passmenu for fetching from clipboard via a keyboard shortcut.
stabbles 8y ago
I'm using `pass` for years now and it's perfect. On Android there is the Password Store app which integrates with the OpenPGP app, it's amazing :).

bhhaskin 8y ago

Agreed pass is fantastic. It's built on top of tools such as gpg and git. It's simple and easy to extend or build clients for.

_underfl0w_ 8y ago

My biggest concern with pass (even after keeping the password store itself on a Veracrypt volume) is that - authorized or not - typing the `pass` command prints a nice, pretty list of every website/password title in the store. That makes me really uneasy. I considered changing them all to random strings, but that would make it difficult for me to find the password I need - defeating the purpose. I do love the fact that it uses git though. This is huge when you have it on multiple devices and might, say, add a new password from your phone.

aesh2Xa1 8y ago
You could put the pass directory on an encrypted filesystem.