peanutbutter144
I can't decide which password manager to use. Should I use Keepass, Bitwarden or pass? They all seem like good candidates with different merits... For now I think I'll go with pass because there's a really nice dmenu script for it that makes it easy to use in any type of application.
Sep 18, 2018 at 8:57pmWeb
Show threadPatrickSep 18, 2018

@peanutbutter144
I've used LastPass for quite some time. Any reason why you kicked it off your list of considerations? Very interested to hear and learn!

(I'm making the assumption you know about that one as well, of course, which might not be true though.)

Show threadgka  Sep 18, 2018
@pkok @peanutbutter144 same here, very happy with LastPass so far
Show threadComPhysSep 19, 2018
@gka @pkok @peanutbutter144 online password managers are convenient but some people prefer to keep their passwords local. Some would also prefer an open source password manager. I think its also worth mentioning that Lastpass recently had a bug where a dodgy regular expression would allow somebody to access any password in your lastpass account: https://labs.detectify.com/2016/07/27/how-i-made-lastpass-give-me-all-your-passwords/
How I made LastPass give me all your passwords - Detectify Labs

Stealing all your passwords by visiting a webpage. Sounds too bad to be true? I thought so too until I hacked the LastPass browser extension.

Detectify Labs
Show threadgka  Sep 19, 2018
@comphys @pkok @peanutbutter144 i have used keypass for a while before moving to lastpass. but i never really figured out how to get a multi-device system set up. syncing the keypass db between devices would be nice. is there any local password manager that can p2p sync with my other local devices? also i got annoyed with the keypass ui and the confusion about the different versions (keypass vs keepass vs keypassx etc)
Show threadpeanutbutter144Sep 19, 2018
@gka @comphys @pkok in the past I've used syncthing to sync my keepass db between devices
Show threadComPhysSep 19, 2018
@gka @pkok @peanutbutter144 keepass doesn't come with a sync feature built in, you'd have to use something like syncthing. As for the different versions (keepassxc etc) they are supposed to all work in the same way; you just choose the one you like the most. On Linux I find keepassxc to have the nicest ui, and on windows I use keepass. To my knowledge you should be able to switch between them without a problem.
Show threadPatrickSep 19, 2018
@comphys
Thanks! I will look into different systems as well now :)
@gka @peanutbutter144
Show threadpeanutbutter144Sep 19, 2018
@pkok the main reason I'm not considering LastPass is because it's not open source.
Show thread@[email protected]Sep 18, 2018

@peanutbutter144 I’m using pass (https://www.passwordstore.org/) and it fulfills my needs. I interact with it via cli, rofi-pass (and password-store.el).

Never had any problems so I’m quite content with it.

Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

Show thread🎓 Doc Freemo  🇳🇱Sep 18, 2018
@peanutbutter144 I'm a huge fan of keepass myself, I find it works really well.
Show threadFelixSep 18, 2018
@peanutbutter144 Keepass is perfect, I used it for years and never had any problems. I use it with Syncthing, so the database is only stored on my devices.
Show threadcodesectionsSep 19, 2018

@peanutbutter144

I'm also a happy user of pass—so happy that I built a bit of a companion app called #passgen (https://passgen.codesections.com).

It's a passphrase generator that uses the same style as pass. (Because a passphrase will be both more secure and easier to type than a password) It pipes it output to standard out, so it works well with pass: you can generate a new password and store it with pass with `pass-gen -e | pass -e USERNAME`

End of self promotion, but yeah, pass is really great!

pass-gen

pass-gen is a command-line utility that generates secure, pronounceable passphrases that can be used on their own, copied to a GUI password manager, or piped directly into a password manager.