Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is an interesting tech stack, but seems heavy-handed for managing such a small amount of raw data (the l/p list itself).

My solution for the past 14 years has been a simple GPG-encrypted org-mode (text) file. I can get to a password multiple ways from any device. The main way I check one is to open the file in Emacs which prompts for the master password via pinentry. You could also use a keyfile. Usually I just ssh and connect to a tmux session with emacs -nw already running, but I can also decrypt and grep it from the CLI, or clone the private repo its on to do the same locally. I only do anything involving PII or money in a dedicated PureOS VM though, so I generally don't jump through any hoops and it's relatively transparent.



> My solution for the past 14 years has been a simple GPG-encrypted org-mode (text) file.

Have you ever taken a look at pass?


Pass synced to a bare git repo at home... via WireGuard of course. Same dev.

Also look at Passage which uses Age encryption.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: