3 ms·

I use pass along with passff and my yubikey for gpg decryption of the password store and gpg-ssh syncing from my home git pass db. Works great

• fooqux 5y ago
  passff and other tools like them scare me too much. That browser extension has too much power. All it would take is the author to sell it to some bad actors (or turn into one) and a lot of people will be having a very bad day. Pasting my password into a form isn't that bad, and it feels far safer.
  • danuker 5y ago
    You can disable automatic updates for the extension, download it manually, and inspect the XPI file before installing it. Instead of clicking "Add to Firefox", you can right-click and "Save Link As..."
  • OJFord 5y ago
    I use a couple of little scripts to do something somewhere in the middle that I'm happy with: `fzf-dmenu` spawns an alacritty window running fzf over given input. `pass-dmenu` calls the former with available password names; takes the result (if any) and decrypts & types it with `pass show $result | xdotool type --file -`.
    • OJFord 5y ago
      (And if it's not obvious, that's bound to a keypress, so from the browser I just hit F4, type e.g. 'hn<CR>' and my password is entered into the focussed input area.)
  • C4K3 5y ago
    Some distros package browser extensions, so you can install them via your regular package manager. For example arch packages firefox-extension-passff (I haven't personally used it though)