8 ms·
"brew install pass" -- the simple unix password manager now released for mac
- patrickod 14y agoFor what it's worth I'd take the #macintosh out of the URL as teh more important thing for me is seeing what this does / how it works. It's a neat utility but I had to do a double-take when the link opened installation instructions without an overview of what it actually does.
- zx2c4 14y agoYea, this would have been better. Will keep in mind for next time -- can't change it now.
- crcastle 14y agoAlso (and I realize this is nit picky) you should change the section heading to "Mac" or "OS X". "Macintosh" as a term to refer to a computer doesn't exist now. I can't find a link to support it, but I'm pretty certain Apple officially uses Mac, not Macintosh, even though the former was originally a shortened version of the latter. p.s. Thanks for this software. Awesome to have choice in this area.
- zx2c4 14y agoOmg, really? REALLY? Even though I'm not a "Mac" guy, this actually makes me kind of sad inside. I remember when my elementary school moved from a fleet of Apple II computers to the new amazing Macintosh. I always liked saying it too. Mac-in-tosh. A nice name for a computer. Alas alas alas.
- deleted 14y ago[deleted]
- pixard 14y agoIf this could be integrated to work with Alfred that would be amazing.
- zx2c4 14y agoI'm not really a Mac guy so I haven't played with Alfred, but from what I understand it's a launcher of sorts. Will it run executables that are in PATH with supplied arguments? If so, then you should be good to go. Or is there potential for tighter integration? What do you have in mind?
- pixard 14y agoIt can run shell commands directly by just prefixing them with > which then opens Terminal and runs the line. What I'd love is an extension (basically just a shell script) that would provide shortcuts to interact with it. I really loathe 1Password, KeePass, LastPass etc. but what they do is provide me with a FAST way to get to my passwords. If I could do this with Alfred and this app it would be killer: pass find ycomb (and then it gives you results that match this and if you hit enter it copies the password to the clipboard) pass add [name/url] [password] pass rm [name/url] etc. If only I knew how to code this. :)
- zx2c4 14y agoJust poked at some random extension on the Alfred webpage. Looks like it's two plists and a png inside a zip archive that has a .alfredextension suffix. The plists have a pretty comprehensible XML format, and it should be easy enough to adapt one of these. Copy an existing one, edit the files and tinker around. Shouldn't take very long to do. Shoot me an email (posted bottom of the page) if you have any success with this.
- evoxed 14y agoI haven't slept in a couple of days otherwise I'd take a crack at it myself, but Alfred extensions accept shell scripts. Just typing > in the Alfred bar gives you access to the shell, but I suppose you could use a script for more advanced automation (i.e. take this file/webpage/whatever and autofill).
- mbreese 14y agoThis does look pretty handy. I'd almost rather have my passwords stored in something like this, as opposed to LastPass where they are stored externally. However, it would be great if this could work with Chrome as an extension. You'd probably want to avoid writing a native plugin for it, because that would require compiling and would be a headache for managing the extension (and gpg versions, etc). Instead, one thing you could do is setup a daemon that the extension could talk to, bound to localhost. But then you'd have to manage authenticating Chrome to the client, etc... perhaps I found something to tinker with over the weekend.
- zx2c4 14y agoThis would be totally awesome if you tinkered with this. I've been thinking about something similar too. It doesn't even have to be super complex, either. Shoot me an email (bottom of the page) and let's talk.
- r00fus 14y agoSeems useful, but aren't 1Password and Keepass better solutions? 1Password integrates with browsers, basically even avoiding the clipboard to autofill. It also prevents accidentally filling the wrong password as you can only autofill passwords that are for that domain. You can also sync to your iOS/Android devices. Keepass is nearly as good (autofill isn't as refined), but it's free and available on linux too.
- zx2c4 14y agoThe point is to avoid the horrible bloat of 1pass and kees. I don't want a new database format. I just want simple files in simple folders, nothing fancy, nothing schmancy, easy to maintain, portable, standard.
- rpearl 14y ago1password is all JSON. Here's some python written by a friend of mine to read keychains: https://github.com/drakedevel/pyagilekeychain/blob/master/agilekeychain.py https://github.com/drakedevel/pyagilekeychain/blob/master/ag... Not that standard (the encryption is standard AES, but not OpenPGP format) but it is certainly portable.
- zx2c4 14y agoNot that interested in kludging around with whatever interfaces and python helper scripts and exporters and importers and yada yada. I just want passwords in simple text files with no frills, and so should you. The Unix Way. This password stuff isn't that complicated, yet every other solution out there introduces such needless complexity. Slim things down, get back to the basics, and you'll have simpler but more efficient machines that can stack together in more robust ways.
- FooBarWidget 14y agoComplexity in implementation maybe, but certainly not in usability. The browser integration is awesome. Click, enter master password (if authentication session inactive), click, done. A "simple" commandline tool makes the UX needlessly complicated. Open terminal, type 'pass name-of-file' (or if you don't remember it exactly, list all files, copy its name, paste), enter password EVERY TIME, copy username, paste, copy password, paste, close terminal. My computer has 8 GB of RAM for a reason. Let's use that to save me time and pain. The unix way is great and all, but it doesn't always make sense from the user's perspective.
- nextstep 14y agoI can't tell from the landing page: can this also save usernames/emails/security questions? Is there a "notes" field for each entry? I'd love to find a better alternative to KeePassX but I need to store these other pieces of info.
- zx2c4 14y agoYou can name the files whatever you want and put them in whatever kind of directory organization you want. You can also use multi-line mode to store additional information. (One thing I suppose I should add, then, is the ability for the clip mode to only put the, say, first line on the clipboard.) Alternatively, and perhaps this is cleaner and nicer, you put the password in Amazon/bookreader and the meta/additional data in Amazon/bookreader.meta. Or come up with your own scheme that works for you. The system is really flexible.
- nextstep 14y agoIs it flexible enough to support separate fields? Having a multi-line "password" is kind of ugly... And if I want to save security questions, username, password and email, I'd need at least four files?
- zx2c4 14y agoIt is flexible enough to do anything at all. It is super duper flexible. There is no enforced scheme or organization. You can do things how you like. One possibility I listed before was: Put your password in Amazon/bookreader and the other account information in Amazon/bookreader.meta. Then, this would be the case: $ pass Amazon/bookreader 23nauDSJ92*#@nb23b2 $ pass -c Amazon/bookreader Amazon/bookreader copied to clipboard for 45 seconds. $ pass Amazon/bookreader.meta Secret Question 1: Dog's name? Oliver Secret Question 2: Do you understand the concept here? I hope so. The point is, you can organize things however you like. You don't have to use this scheme; you could use a different one.
- greghinch 14y agoI have a question for those of you who use password managers like this: I have 3 computers, an iPhone, and an iPad, on all of which I interact with a lot of the same sites and applications for which I need passwords. How would I go about managing passwords for all the devices? Mobile devices in particular seem problematic.
- zx2c4 14y agoMore bloated password managers (like 1pass, for example) come with mobile clients and cloud services. This thread will probably include many such replies. Pass comes with integrated git support, for syncing and logging. This is what I use with my mobile phone and additional computers, and it works really well.
- samf 14y agoNot being argumentative, I just don't understand. How do you use it on your mobile phone? Is there a git app that lets you browse files? How would you decrypt them? Can you update them? Or do you just use a shell on your mobile phone?
- zx2c4 14y agoYea so... I could make a nice fancy app, which I could do super quick because the design of pass is so simple. But instead I just use the terminal. Full clipboard support and everything with it. By the way, I'm using an N950.
- brown9-2 14y agoSyncing via git (an active process) sounds like more work than passive DropBox syncing.
- zx2c4 14y agoTrue. Autosyncers work with pass just as well. DropBox to your heart's content!
- 14y ago
- nuttendorfer 14y ago>With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the password. Is the filename cleartext or encrypted?
- piffey 14y agoFilename is cleartext.
- nuttendorfer 14y agoThanks, I won't use it then.
- wxl 14y agoWhat the hell? You can't encrypt filenames. I don't know where the hell you got the idea that you can.
- nuttendorfer 14y agoHave you seen encFS? Filenames readable in cleartext is a security issue. This means whoever has access to your files knows you have accounts on certain websites they are looking for.
- Lexarius 14y agoYou could store the password files in an encFS mount
- tzs 14y agoBy "encrypted filenames" what people are clearly talking about is making it so unauthorized people can not infer from the filename of a password file what website that password is for. For instance, to store the password for www.example.com, the filename could be derived by encrypting the website name (www.example.com) with AES using the user's master password, base 64 encoding the output, and using that for the filename.
- soldermont001 14y agoHow would mobile phone usage work? Are there plans for an app? Or some easy way to use it when you don't have a full keyboard.
- zx2c4 14y agoShould be pretty easy to write such an app, considering the design of pass is so simple.
- yorhel 14y agoOdd-sounding request: Is it possible to have an option to not use gpg, or any encryption, at all? I only store my passwords on a LUKS loopback file, which I mount/umount as I need to access some information on it. The double-encryption does not really add any better security, but does add another password to type. I'd love to make use of the nice looking pass interface: A password generator, copy-to-clipboard, and simple management operations.
- zx2c4 14y agoI'd still recommend using gpg so you get the nice time-out features of gpg-agent, but otherwise, if you still don't want to use it, sure, it's trivial. Change calls to "gpg" to "cat" in the source code. It's less than 300 lines of simple shell script. Poke around and it shouldn't take more than 2 minutes to alter.
- deleted 14y ago[deleted]
- zvzgfghvjvthfzt 14y agoHere's another take on the problem: https://github.com/catch22/pw https://github.com/catch22/pw
- zx2c4 14y agoThrowing everything in a single database file with a designated schema, YAML or whatever else, is exactly what I was trying to avoid. Keep it simple. Single files are the way to go.
- zvzgfghvjvthfzt 14y agoWait, you password directory is stored unencrypted. Not the way to go.
- lvh 14y agoThe principal difference of opinion is that pass thinks usernames and sites are public information. Some of the alternatives do not. While in some cases the difference is moot (I'm sure I have a bunch of registrations on things like forums where membership is public anyway), there are cases where it's not.
- timrogers 14y agoCan someone explain a little more of how one would implement this for use on a phone as well as a computer? I have a Windows Phone personally, but an explanation for any platform would help conceptually.
- zx2c4 14y agoIf anyone has the motivation to port this to Windows-anything, I will laugh, cringe, and then give you a nice pat on the back. That said, the design is pretty simple. There are gpg text files in folders. Decrypt them to reveal passwords, encrypt them to add passwords.
- kbronson 14y ago> pass: the standard unix password manager Can a crappy script be more pretentious?
- simonz05 14y agoI was looking for something like this (today) to keep some database passwords I need from time to time in git without storing them in plain-text. Thanks for solving another man's problem.
- zx2c4 14y agoMy pleasure! Glad you dig.
- SoftwareMaven 14y agoThis is the feature I would use this for. I've written custom solutions to do this in the past, and while I'm confident in them, it induces a large cognitive load to make sure they are secure. I would much rather trust another, well-vetted solution (meaning, of course, this has to reach well-vetted stage, but if I were in need, I'd spend time vetting).
- zx2c4 14y agoGPG is well-vetted. The encryption here is GPG.
- tzs 14y agoFrom the subtitle of the page: "the standard unix password manager". I had thought that in 30+ years of Unix use, I had noticed all the standard Unix components. I was quite surprised to overlook that there was a standard Unix password manager!
- timrogers 14y agoIs there any way to make the completion on this work with zsh?
- tammer 14y agoI found this thread searching for the same answer.