3 ms·
I use pass. It's a Unix-style password manager created by zx2c4 of Wireguard fame. https://www.passwordstore.org/ https://www.passwordstore.org/ Pass uses GPG
by Sanzig 5y ago
I use pass. It's a Unix-style password manager created by zx2c4 of Wireguard fame.
https://www.passwordstore.org/ https://www.passwordstore.org/
Pass uses GPG under the hood for encrypting the password store. I use an OpenPGP smartcard (a Yubikey in my case) to decrypt the password files. I synchronize the store across devices using Git. There are good autofill implementations for Firefox and for Android. When I need a password, the autofill prompts me to insert my Yubikey and enter in the unlock PIN, which I find more convenient than a master password. Crypto functions are offloaded to the Yubikey with a (theoretically) very difficult to extract private key, so unless somebody swipes that they can't get into my passwords.
I mostly followed this guide for setting it up: https://dehnes.com/software/2020/04/03/password_management_yubikey_pgp_git.html https://dehnes.com/software/2020/04/03/password_management_y...
- sam_lowry_ 5y agoThere is Browserpass extension for Chromium as well.
- mariusor 5y agoPass is not very user friendly. Adding a new device to your tree is a painful experience. Losing your Yubikey or your main gpg key is a painful experience. That being said, there are variants to pass that make multi key trees easier to manage and that's what I'm using.
- sam_lowry_ 5y ago>Adding a new device to your tree Are you talking about `git clone`?
- mariusor 5y agoNo, I'm talking about having different GPG keys for different devices. I want my passwords on my phone, and on each of my computers. I would prefer to have separate keys for each of them.