RE: https://mastodon.scot/@kim_harding/116108957641748718

I want this but as a Linux distribution. I don't think I'm asking for much here. I am just asking for the "open source community" to be to the left of Goldman Sachs

My understanding is that Bitwarden and KeePassXC, the two open source password managers, are *both* using random code generators at this point, which is terrifying as those are the exact tools where a small error could have the largest negative impact, and also tools that once you've committed to using it you can't quickly back out if they enter a code quality decline

https://github.com/bitwarden/clients/tree/main/.claude

clients/.claude at main Β· bitwarden/clients

Bitwarden client apps (web, browser extension, desktop, and cli). - bitwarden/clients

GitHub
@mcc oh yikes wtf please not bitwarden
@luana @mcc nothing says "super safe password manager" more than "161 files changed, 776 lines added, 541 line removed, some files are hidden from PR by default, authored by Claude Sonnet, merged with some tests failing"
@nina_kali_nina @luana @mcc Great. Password manager migration was really not what I needed on my to do list right now
@lunarloony @luana @mcc but it's like: where to? πŸ˜”

@nina_kali_nina @lunarloony @luana @mcc

I use pass, which is essentially a shell script relying on gpg for encryption.

https://www.passwordstore.org/

It's lovely, simple, and does everything I need. Integrates well with qutebrowser, my web browser.

Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

@nina_kali_nina @lunarloony @luana @mcc

It also has built-in git integration, so I sync to a client on iOS via a bare git repo on my server over ssh. There are various client apps for other web browsers and OS platforms; I haven't tried them, though.

@amin I do like the sound of the passwords being individual files. It'd make syncing them a whole lot easier!

@lunarloony

Definitely!

@lunarloony

Also, if you ever stop trusting pass, it helps to know you can just run gpg --decrypt on the password files. ;D