logoalt Hacker News

cjs_actoday at 3:19 PM5 repliesview on HN

I store my passwords using this: https://www.passwordstore.org/

It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.


Replies

n0ottoday at 4:01 PM

I tried using pass once. I like that it follows the Unix philosophy, and I want to like it, but the fact that all of your account names are visible in the clear is a deal breaker for me.

marssaxmantoday at 5:18 PM

Thanks for the pointer. I use a similar system, but hadn't thought to put the password directory into a git repo.

ab71e5today at 3:53 PM

I'm interested in this, what do you use to host the git repo? Just a private repo on something like github or your own server? How do you backup your private key?

show 2 replies
Depraved4482today at 3:41 PM

+1 for pass! I use this on my VPS to store secrets. I love that it syncs with GIT. Good stuff

jmcpherstoday at 4:07 PM

I have used this for almost 10 years now. It's pretty barebones but it seems like the usable lifetime of commercial password managers is 4-5 years before they get enshittified, bought, discontinued, price-jacked, or otherwise made unsuitable for use. "pass" just keeps working.