Hacker News Reader

Comment by alkonaut | Hacker News Reader

Pass doesn't solve the most important issue: passwords available on all devices, most importantly mobile.

Credentials being "remotely stored" would be the case regardless of if you run any other viable storage such as Dropbox. I suppose you can remotely store on your own server, but I'm about a million times more likely to screw up than even a bad cloud company or password manager - so that's a non starter.

I'm sure there are alternatives to LastPass/1pass and similar, but storing encrypted passwords in a local file solves only a small part of the problem.

View on HN

> Pass doesn't solve the most important issue: passwords available on all devices, most importantly mobile.

https://github.com/zeapo/Android-Password-Store

https://github.com/davidjb/pass-ios

Thanks, I think it's still not quite there. I either have to use Cydia(?) or have my linux machine serve(?) the passwords to my mobile device. The former isn't going to happen to most people and the latter is going to be a lot more insecure than 1Pass/Lastpass (because I sure can't set up a secure web server with certs etc).

What people need is centralized & turnkey password management. This has drawbacks , but remember: it competes on security with the only other alternative: using the same password for all sites - That's the most common password management system out there!

I keep it sync on a virtual Server with sftp, where i Upload the db, sshfs to Mount it - the Directory which contains the Database, localy on Linux, or easySSHFS on Android.

To Set this up i need for every new device around... 10 minutes

It isn't THAT hard. Im pretty sure there is a dropbox(or $urCloudProvider) App that Can sync your files too :-)

What about backup or if your encrypted password store get corrupted? It's actually not that unlikely if you open the file on many devices at the same time. Do you have history of the password store file you can go roll back to? Can you trust the VPS provider?

It's not as straightforward as you assume,now apply it to non-devs.

Reply on news.ycombinator.com