Hacker News new | ask | show | jobs
by bqe 3260 days ago
I use pass, written by zx2c4 of WireGuard fame: https://www.passwordstore.org/

My favorite thing about it is that it uses standard tools I understand, and I can back it up and version it with git.
1 comments
atmosx 3260 days ago
It doesn't have a browser plugin and will not work with my iPhone... So it's a no-go for me and I guess many others.
link
bqe 3260 days ago
I wouldn't let any password manager touch my browser. Giving attackers access to your password manager's APIs via JS or DOM elements is how most (all?) of the dozens of severe LastPass bugs have happened.
link
ViktorEvil 3260 days ago
Pass - Password Store by Mingshen Sun https://appsto.re/gb/DY13hb.i
link
ekimekim 3260 days ago
pass has a variety of 3rd party browser plugins and phone apps that work with it. Admittedly, it's not a turnkey solution and so is unsuitable for a non-technical audience.

I recommend website-based password managers to my non-technical friends because they're easiest to use and therefore most likely to actually BE used, and the security vulnerabilities noted in the article are very small compared to not using a password manager at all.

link