4 ms·

I know password managers exist, but they don't solve the "what accounts do I even have?" problem I keep a list in a simple text file that is encrypted and hidd

I know password managers exist, but they don't solve the "what accounts do I even have?" problem I keep a list in a simple text file that is encrypted and hidden by appending it to a particular .jpg image file (of which I have thousands). For convenience, I have a little CLI utility I wrote which accepts a filename and key in order to automate retrieval, decryption, viewing/editing, re-encryption and replacing the data in it's hiding place --- all without altering the carrier file's date/time. I have retrieval instructions in a sealed envelope with my lawyer and a trusted family member --- only to be opened upon my demise. I keep backups of this along with all my personal and business documents, will, etc.. Basically, I follow the 3-2-1 backup plan (https://www.backblaze.com/blog/the-3-2-1-backup-strategy/ https://www.backblaze.com/blog/the-3-2-1-backup-strategy/). I carry the "1" part strapped to my wrist at all times (encrypted with Bitlocker) so it is as safe as I am --- if not safer. https://www.thingiverse.com/thing:6784665 https://www.thingiverse.com/thing:6784665

ghostfoxgod 1y ago
Wow, it's fun reading the innovative ways people are solving for this, thanks for sharing your approach. If you don't mind me asking, can you share some more details about this CLI utility? Does it use some existing solutions like GPG or something similar for the tasks you mentioned?
- jqpabc123 1y ago
  The CLI is pretty simple, it accepts "key:filename" and performs these steps: Open file and search backwards from end looking for marker bytes. If found, save the file date/time then extract the data and decrypt using AES. If the decrypted data passes a checksum test, place the data in a temporary file and load the file into a text editor. Wait for the test editor to exit. If the file has been changed, retrieve the data from disk, re-encrypt, place it back in it's hiding spot and restore the carrier file's original data/time. Lastly, overwrite the temporary file with random data before finally deleting and exit. By the way, my little CLI can also perform TOTP generation. It will search for a section in the text delimited by "<--- 2FA Start" and "2FA End --->" for a list of "tag:=Base32 key string". To generate a TOTP code and place it into the clipboard, just give it "key:filename,tag".

ghostfoxgod 1y ago

Wow, it's fun reading the innovative ways people are solving for this, thanks for sharing your approach. If you don't mind me asking, can you share some more details about this CLI utility? Does it use some existing solutions like GPG or something similar for the tasks you mentioned?

jqpabc123 1y ago
The CLI is pretty simple, it accepts "key:filename" and performs these steps: Open file and search backwards from end looking for marker bytes. If found, save the file date/time then extract the data and decrypt using AES. If the decrypted data passes a checksum test, place the data in a temporary file and load the file into a text editor. Wait for the test editor to exit. If the file has been changed, retrieve the data from disk, re-encrypt, place it back in it's hiding spot and restore the carrier file's original data/time. Lastly, overwrite the temporary file with random data before finally deleting and exit. By the way, my little CLI can also perform TOTP generation. It will search for a section in the text delimited by "<--- 2FA Start" and "2FA End --->" for a list of "tag:=Base32 key string". To generate a TOTP code and place it into the clipboard, just give it "key:filename,tag".