Violet@Ice:~$💜​​​Mar 17
I'm really disappointed to see #bitwarden falling into the slop hole. Can anyone recommend a #passwordmanager , ideally #selfhosted , that doesn't use LLM slop in its core product, OR in its contributing commits?
#askfedi
Show threadwitch_t *naviMar 17
@violet i use `pass`[1], though it's very non-traditional so it might not be what you want

a directory structure encrypted with pgp and synced with `git`, implemented as a shell script

extensions like pass-otp also add support for totp, and there's an android app/client and browser extension for autocomplete on those platforms as well

(for folks that hate pgp, `passage`[2] exists that uses `age` instead, but no android app for that one, not sure if it works with the browser ext)

it is also mostly a "done" project, as most of the complex logic is done in gnupg/age and git, or extension plugins, pass itself barely needs changes or fixes ever

1: https://www.passwordstore.org/
2: https://github.com/FiloSottile/passage
Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

Show threadD. Moonfire

@navi @violet It is anecdotal, but I used to use gpg to encrypt my password file and it worked out pretty well.

Then Iowa flooded in 2008 and I ended up being separated from my laptop for a month. I had a thumb drive with my passwords, but it took me a long time to find a program I could get gpg installed onto it enough to get to my password file.

So, if you do go that approach, make sure you have a "I don't need my laptop, Cedar Rapids will only be underwater for a few days" turning into three months of living with my inlaws with their Windows 95 computer, one horror movie scene, and the inability to even get back to the apartment for a month.

Mar 17 at 3:29pmWeb
Show threadwitch_t *naviMar 17
@dmoonfire @violet

i have a pass android client, and i can remote onto my vps and use gpg from there as long as i have access to my pgp keys somewhere

though i should probably build a better backup system for the key itself, unsure how yet
Show threadD. MoonfireMar 17
@navi @violet I'm in the same boat. I couldn't access my safe deposit box either for a month then so.... not sure where to back things up when I make poor decisions (in the "I don't need the laptop" case, the water had already gotten up to the bridge I took, and I-380 was backed up so badly that it would have taken me 1.5 hours to go six miles, so I thought it would only be a few days and I would get back to my apartment. Won't make that mistake again.)
Show threadCloverMar 17

@navi @violet @dmoonfire a laminated piece of paper in a little safe at home, or somewhere obscure to hide it or at a bank safe deposit box or such works relatively well (or both)

it lasts for a long time, and is fairly easily accessible even in the event of something going wrong