5 ms·

Whatever one of these password managers you may use, always remember to regularly export to the cleartext. Keep a 50 megabyte encrypted container around for it.

by Canada 3y ago

Whatever one of these password managers you may use, always remember to regularly export to the cleartext. Keep a 50 megabyte encrypted container around for it. Mount, export, unmount. Whenever you remember to do it, at least every couple of months. Even if it's not always up to date at least you won't be locked out of everything when these situations happen.

walteweiss 3y ago
Why not use some better and entirely open solution, like pass? https://www.passwordstore.org/ https://www.passwordstore.org/ As a user of pass for like 4 years, I enjoy reading all those silly threads on password managers doing this and that. Fantastic. And it’s not even an upgrade to use the GUI app here, I can take any often used password of mine with pure Ctrl + R in my terminal, just a second and it’s here, with no need to do extra backups, all the history is in git, and no party will ever change anything about my passwords.
- eternityforest 3y ago
  Nearly all of my need for passwords is web-related. Autofill is incredibly convenient and also an anti-phishing measure, because it won't autofill fake sites, which would give me time to notice something was up. There doesn't seem to be major super popular audited autofill stuff, seems like the ecosystem is mostly smaller projects and the main focus is on the CLI. The remainder of the times I need passwords are mostly on mobile.
  - walteweiss 3y ago
    1. There are plugins and web clients: https://www.passwordstore.org/#extensions https://www.passwordstore.org/#extensions 2. Of course pass has mobile version, and to my liking it looks and works much better than 1Password that I migrated from. (And to my liking as well Bitwarden looks much worse, if we would ever happen to talk about looks in a password manager, lol. Of course that is highly subjective.) 3. I have shared stored with my work mates. That is different hit repositories that has those text files encrypted with more than one gpg key, and it works so incredibly well. And is free, forever. We manage that with gopass (a fork written in Go), as it’s easier to work with for not-so-techies.
    - snowstormsun 3y ago
      For Android the mobile app seems to be last updated in 2021 and not compatible with the latest Android version. I would switch to pass immediately if they had both a well maintained and audited browser extension and mobile app.
      - walteweiss 3y ago
        I won’t argue on the mobile Android, as I don’t have the latest and greatest Android, but the app is quite good on Android. My iPhone is fine with latest version, though. I never use web app, so cannot comment on that.
- Narkov 3y ago
  > Why not use some better and entirely open solution, like pass? Bitwarden is entirely open source?! https://github.com/bitwarden/ https://github.com/bitwarden/ You aren't even locked in to using them as the data store.
  - walteweiss 3y ago
    Pass is just text files encrypted with gpg. I needed just one password on one work computer, where I had my gpg key, but not all my passwords. Decrypted the file and that was it. Honestly, I cannot get the longing to store your passwords with some company that claims it would be free and open source forever. What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.)
    - Tajnymag 3y ago
      The server is open source too and there's even two separate implementations of it. The official one and a community one named Vaultwarden. Bitwarden is fully open source and you can very easily selfhost it.
    - Narkov 3y ago
      > What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.) You didn't even bother to click the link and educate yourself did you? The server, client and mobile app are all open source. You can even store the encrypted DB yourself on your own server.
- Canada 3y ago
  I hear you, and you're not wrong, but there's no way I can get regular users to do that.
  - BSDobelix 3y ago
    And what about KeepassXC?
    - walteweiss 3y ago
      Ugly. For a non-nerd average person. I quite like it when I interacted with it, but personally I prefer pass as way simpler and more elegant solution.
      - BSDobelix 3y ago
        There is keepassxc-cli for nerds like you ;)
  - walteweiss 3y ago
    Won’t argue with regular users. Although, I don’t see why I would self-host BitWarden for my family, when their needs are 10 passwords for social media and bank apps. It all stored in their default iPhone (or Android) password managers and I just have the duplicate of sensitive (usually bank) info in my pass vault as well. That works for me very well, as if I would ever need to migrate my mom, aunt, wife or anyone else, I can easily copy those 10 passwords manually. And its zero maintenance system for me.
BSDobelix 3y ago
Look how far we have come...we use a encrypted container to protect a text-file, let's talk about software bloat. What about "gpg --encrypt"?
- mikae1 3y ago
  Great solution if didn’t use a smartphone.
  - worksonmine 3y ago
    GPG was suggested as an alternative to: > Keep a 50 megabyte encrypted container around for it. Mount, export, unmount Which of the options do you think would be easier to work with on your smartphone? The are many PGP implementations for smartphones in the case you have to recover. Just move the file.
    - Canada 3y ago
      People who only use smartphones are just screwed anyway.
- FirmwareBurner 3y ago
  Insert infamous HN comment on how Dropbox will never succeed because you can do the same with git and a linux shared folder.
  - BSDobelix 3y ago
    What is easier to use? A container or a single command? What is faster to setup? A container or your already installed command? What is easier to move and more portable? Your container or a pgp encrypted file? Do you move your encrypted file into Dropbox or your encrypted container? ;)
    - patch_cable 3y ago
      When the single command is gpg, I’m not so sure…
evv555 3y ago
Most of these managers have a keepass export option. Best option
wjnc 3y ago
Great tip! Thanks. Crazy that I put at least some thought in my backups and other security and stepped over this one.

by Canada 3y ago

walteweiss 3y ago

Why not use some better and entirely open solution, like pass? https://www.passwordstore.org/ https://www.passwordstore.org/ As a user of pass for like 4 years, I enjoy reading all those silly threads on password managers doing this and that. Fantastic. And it’s not even an upgrade to use the GUI app here, I can take any often used password of mine with pure Ctrl + R in my terminal, just a second and it’s here, with no need to do extra backups, all the history is in git, and no party will ever change anything about my passwords.

eternityforest 3y ago
Nearly all of my need for passwords is web-related. Autofill is incredibly convenient and also an anti-phishing measure, because it won't autofill fake sites, which would give me time to notice something was up. There doesn't seem to be major super popular audited autofill stuff, seems like the ecosystem is mostly smaller projects and the main focus is on the CLI. The remainder of the times I need passwords are mostly on mobile.
- walteweiss 3y ago
  1. There are plugins and web clients: https://www.passwordstore.org/#extensions https://www.passwordstore.org/#extensions 2. Of course pass has mobile version, and to my liking it looks and works much better than 1Password that I migrated from. (And to my liking as well Bitwarden looks much worse, if we would ever happen to talk about looks in a password manager, lol. Of course that is highly subjective.) 3. I have shared stored with my work mates. That is different hit repositories that has those text files encrypted with more than one gpg key, and it works so incredibly well. And is free, forever. We manage that with gopass (a fork written in Go), as it’s easier to work with for not-so-techies.
  - snowstormsun 3y ago
    For Android the mobile app seems to be last updated in 2021 and not compatible with the latest Android version. I would switch to pass immediately if they had both a well maintained and audited browser extension and mobile app.
    - walteweiss 3y ago
      I won’t argue on the mobile Android, as I don’t have the latest and greatest Android, but the app is quite good on Android. My iPhone is fine with latest version, though. I never use web app, so cannot comment on that.
Narkov 3y ago
> Why not use some better and entirely open solution, like pass? Bitwarden is entirely open source?! https://github.com/bitwarden/ https://github.com/bitwarden/ You aren't even locked in to using them as the data store.
- walteweiss 3y ago
  Pass is just text files encrypted with gpg. I needed just one password on one work computer, where I had my gpg key, but not all my passwords. Decrypted the file and that was it. Honestly, I cannot get the longing to store your passwords with some company that claims it would be free and open source forever. What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.)
  - Tajnymag 3y ago
    The server is open source too and there's even two separate implementations of it. The official one and a community one named Vaultwarden. Bitwarden is fully open source and you can very easily selfhost it.
  - Narkov 3y ago
    > What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.) You didn't even bother to click the link and educate yourself did you? The server, client and mobile app are all open source. You can even store the encrypted DB yourself on your own server.
Canada 3y ago
I hear you, and you're not wrong, but there's no way I can get regular users to do that.
- BSDobelix 3y ago
  And what about KeepassXC?
  - walteweiss 3y ago
    Ugly. For a non-nerd average person. I quite like it when I interacted with it, but personally I prefer pass as way simpler and more elegant solution.
    - BSDobelix 3y ago
      There is keepassxc-cli for nerds like you ;)
- walteweiss 3y ago
  Won’t argue with regular users. Although, I don’t see why I would self-host BitWarden for my family, when their needs are 10 passwords for social media and bank apps. It all stored in their default iPhone (or Android) password managers and I just have the duplicate of sensitive (usually bank) info in my pass vault as well. That works for me very well, as if I would ever need to migrate my mom, aunt, wife or anyone else, I can easily copy those 10 passwords manually. And its zero maintenance system for me.

BSDobelix 3y ago

Look how far we have come...we use a encrypted container to protect a text-file, let's talk about software bloat. What about "gpg --encrypt"?

mikae1 3y ago
Great solution if didn’t use a smartphone.
- worksonmine 3y ago
  GPG was suggested as an alternative to: > Keep a 50 megabyte encrypted container around for it. Mount, export, unmount Which of the options do you think would be easier to work with on your smartphone? The are many PGP implementations for smartphones in the case you have to recover. Just move the file.
  - Canada 3y ago
    People who only use smartphones are just screwed anyway.
FirmwareBurner 3y ago
Insert infamous HN comment on how Dropbox will never succeed because you can do the same with git and a linux shared folder.
- BSDobelix 3y ago
  What is easier to use? A container or a single command? What is faster to setup? A container or your already installed command? What is easier to move and more portable? Your container or a pgp encrypted file? Do you move your encrypted file into Dropbox or your encrypted container? ;)
  - patch_cable 3y ago
    When the single command is gpg, I’m not so sure…

evv555 3y ago

Most of these managers have a keepass export option. Best option

wjnc 3y ago

Great tip! Thanks. Crazy that I put at least some thought in my backups and other security and stepped over this one.