Hacker News Reader

Comment by zx2c4 | Hacker News Reader

I wrote most of this for LastPass. The interface is based on my own pet project, "pass" -- http://www.passwordstore.org/ -- which sticks to a more traditional model of a simple directory of gpg encrypted files, integrated with git, and you get to decide where it lives. It's a simple bash script.

View on HN

Just want to chime in. Your pet project is the only password manager I have used longer than a week.

Using dmenu with StumpWM, I show people I have an OS level keychain that I can pop open and search with a keyboard binding. My IT brethren nod with approval.

just modified the pass dmenu script to work with lastpass

  #!/usr/bin/env bash

  shopt -s nullglob globstar

  typeit=0
  if [[ $1 == "--type" ]]; then
    typeit=1
    shift
  fi
  name=$(lpass ls | dmenu)
  id=$(echo $name | sed -r 's/.*\id:\s([0-9]+).*/\1/g')
  if [[ $typeit -eq 0 ]]; then
    lpass show -c --password $id
  else
    xdotool - <<<"type --clearmodifiers -- $(lpass show --password $id)"
  fi

I do not use last pass but that xdotool idea is very slick. I will definitely employ that idea.

I use your 'pet project' daily. Thank you so much for it!

Your pet is probably the best password manager around. I use it daily and love it!

I've been working on some bash scripts that borrow your "pass" interface but works with OS X's Keychain, so thanks very much for doing the hard parts for me!

Awesome, great pet project. As others have said, I use it daily and it's the only manager I've used for any time. I use it with a Yubikey Neo with a GPG subkey in it, and store my passwords in a Bitbucket repo that I can check out on any machine (using an RSA key also in my Yubikey via gpg-agent with enable-ssh-support). I've looked at using it for small teams as well by encrypting to multiple recipients. Excellent and elegantly unixy!

Very nice. Mind writing up a tutorial for that setup? I'm sure it will help others.

Sure it would help me and my team.

pass is great! I use it every day, only problem is that I haven't found an android client. Do you know if there exists one?

I had no idea pass existed. I will have to check it out. Thanks!

I like Pass. But ..

I've got a task to setup a password manager for a team, all of whom are Windows users.

But my focus isn't personal passwords for email, or google, but the eleventy-dozen passwords that accumulate around any IT department: root for this, and that, the firewall, database, CHAP .. the list is endless.

Is there a 'windows like' pass? Is there a

Pass works very well with teams, as it supports various levels of key combinations.

It also will run well under Cygwin on Windows.

I'll give Cygwin another try. I like it.

My guys aren't going to want to know about all that just 'click some buttons and get passwords'.

After some thought, my Windows guys will rebel if I have them use Cygwin.

But I bet one can run Cygwin in a Windows Docker.

I love pass so much. Use it every single day on Cygwin. I remember getting it to work in Cygwin. Fun stuff.

I like to keep my passwords synced in Dropbox, and I usually work in *nix, but I occasionally have to access them in Windows, so I wrote a little batch file that uses gpg4win to read my passwords https://github.com/davidmi/ScriptsAndTools

Thanks, I abandoned LastPass after the Lavabit controversy for pass long ago and I love it.

Do you have more information about how you replaced LastPass? I currently use it, but anything better is nice. :)

Import your lastpass passwords to pass http://git.zx2c4.com/password-store/tree/contrib/importers/l... and learn the pass commands

Then get a backup solution (tarsnap or BTSync).

What about browser plugins and mobile?

It looks like there's a Firefox plugin in the works: https://github.com/jvenant/passff#readme Now we just need a Chrome one.

This is what really pulls me to LastPass. The zero to two clicks it takes to fill in a password is just too good.

Someone made an iPhone app and Android is under development.

I'm that someone, and it was written in a weekend on a jail broken iPod touch on iOS 3.2. So, its unlikely that it still works (and I wouldn't recommend using it even if you can get it to work). I long since switched (back) to lastpass due to the pain of managing ssh keys across multiple devices.

Why not use the built in git support for pass?

That's what I do, with a private BitBucket repo.

Thanks for your work, seriously, this is one kickass pet project if I ever saw one.

Something like this, but for the team would be so awesome… Edit: looks like this tool supports multiple keys. Does that mean that passwords can be shared?

Yes -- pass has extensive support for being used by teams. You can set various levels of ACLs by having different combinations of keys for different directories.

I use LastPass every day now. Everything about it makes sense (including git versioning for all your passwords). Thanks!

You mean "pass", not LastPass.

Reply on news.ycombinator.com