Hacker News new | ask | show | jobs
by jasonm23 604 days ago
I'm really confused. How do you think that would work with an opensource password manager like pass / password-store.org

- The data is stored in Git at a location of your choosing and security level

- The data encryption is provided by GnuPG using your personal key

This is why I use it, there's no potential for anyone to add a back door, except me.

BitWarden, LastPass, etc etc... you have a point, and I would not trust these companies one iota.

Apple, Google etc...uhm... not in a million years.

1 comments

pass clients can totally be backdoored. They decrypt the secret to plain text and add it to your clipboard or whatever... could easily shuttle it off somewhere else at that point.
You build it from source if you have concerns, so no, it can't "totally be backdoored".