Hacker News new | ask | show | jobs
by FatalBaboon 3436 days ago
Honestly, as a programmer/ops knowing git and always having a terminal somewhere around, I see no reason to use something else than https://git.zx2c4.com/password-store

It uses a git repo as storage, gpg encrypts passwords, provides perfect completion and there is an android app. Everything is dead simple and open source.
3 comments
michaelmior 3436 days ago
Don't you find it annoying having to switch to a terminal to log in to a site in your browser? I personally love LastPass. It's free for my use case and there's plugins for popular browsers, mobile apps, and a CLI app if you really want it.
link
luca_ing 3436 days ago
From the pass website[1]:

--------------------

The community has even produced a cross-platform GUI client, an Android app, an iOS app, a Firefox plugin, Chrome plugin, a Windows client, a pretty Python QML app, a nice Go GUI app, an interactive console UI, Alfred integration (1) (2) (3), a dmenu script, OS X integration, git credential integration, and even an emacs package.

--------------------

If this weren't the case, I'd agree :-)

[1] https://www.passwordstore.org/

link
compuguy 3436 days ago
True, but the chrome plugin has issues (something to do with the native messaging executable not working): https://github.com/dannyvankooten/browserpass/issues/28
link
FatalBaboon 3436 days ago
It's a feature, I don't want a third party addon of an app (even firefox) to fiddle with gpg and my passwords more than necessary.
link
michaelmior 3436 days ago
I wouldn't say it's a feature. I can use LastPass without installing any browser addons if I want. I just prefer the convenience. But I can understand why people might prefer stick with a terminal password manager.
link
temprature 3436 days ago
`pass` stores the name of the entry in plain-text (as the filename of the encrypted file), so you have to either obfuscate the names of the entries or it leaks the name of the site that the entry is for.
link
FatalBaboon 3436 days ago
I understand this is a valid concern for some, but I generate random long passwords and never reuse them, so I can live with unencrypted entry names (that contains site+login)
link
elbii 3436 days ago
How do you copy/paste your passwords in iOS apps? Pretty much the main reason I went with the 1Password suite.
link