On a personal basis I use “pass”[1] because I want something that is cross-platform on the oses I care about, works well in the cli and suits my needs and I don

On a personal basis I use “pass”[1] because I want something that is cross-platform on the oses I care about, works well in the cli and suits my needs and I don’t care very much about having a browser extension or a super-userfriendly experience or mobile support. I have a lot of scripts that are like MYSECRET=$(pass somesecret | sed -n 3p) somescript And then the script uses the secret from that specific line to do whatever it needs to do. For work purposes most of our stuff is cloud based so if a secret is needed by scripts then it goes in a cloud-based secrets manager (for us it’s aws secrets manager or the secure parameter store thing depending) and if it’s for humans then we use one of a couple of methods of sharing securely in teams. [1] https://www.passwordstore.org/ https://www.passwordstore.org/