3 ms·
Besides that, pass leaks metadata. If your passwords are the only part of your password manager you think are secret, then you're probably not considering the
by vngzs 5y ago
Besides that, pass leaks metadata.
If your passwords are the only part of your password manager you think are secret, then you're probably not considering the utility of an enumeration of all your network handles. Mine aren't very interesting, but I wouldn't post that on GitHub, even in a private repo.
I love pass and use it. But when I need to carry my password database around, I don't rely on pass alone - I throw the pass database in a Veracrypt container. That way if my flash drive is stolen, it's just an encrypted blob.
- karlding 5y agoThere's also the pass-tomb extension [0] which stores the directory in a tomb [1]. [0] https://github.com/roddhjav/pass-tomb https://github.com/roddhjav/pass-tomb [1] https://www.dyne.org/software/tomb/ https://www.dyne.org/software/tomb/
- ayushnix 5y agoBesides pass-tomb, there's also pass-coffin which doesn't need to rely on a 3k+ line ZSH script. I'll add support for using age and signify in pass-coffin soon. https://github.com/ayushnix/pass-coffin https://github.com/ayushnix/pass-coffin