Hacker News new | ask | show | jobs
by ultrafilter 2275 days ago
If I have a keyboard, then for a relatively small dataset, such as my saved passwords, I prefer a text file over any database. Lookup workflow: decrypt file (with, say, gpg), find what I want (with, say, grep), delete decrypted file. (Not safe if you don't use disk encryption!) Update workflow: decrypt file, edit file, encrypt file, commit encrypted file to local git repo, git push to backup storage.
4 comments

That sounds like a lot of work... I am entering passwords on websites 10-30 times a day... that would add up.
The 'Pass' password manager is just bash wrapper for this. It comes with 'passmenu' which is a very simple script that pipes the list of passwords to dmenu & handles the decryption using gpg. I just have a keybinding to launch it so I can copy & insert a password into any application in seconds.

[1] https://www.passwordstore.org/

You're describing the behavior of https://www.passwordstore.org/ almost exactly! Give it a try.
There's a vim extension that automatically decrypts files with gpg extension on open and encrypts them on save. If you use gpg agent, this is pretty painless.

Just be careful about leaking to .viminfo file. :)

Perhaps of you pipe it into vim (i.e. | vim - ), it'd be somewhat safer and less manual work.