Comments on: How to Use Password Store to Manage Your Passwords in Linux https://www.maketecheasier.com/use-password-store-manage-passwords-linux/ Uncomplicating the complicated, making life easier Fri, 01 Apr 2022 01:21:57 +0000 hourly 1 https://wordpress.org/?v=6.0.1 By: InnocentBystander https://www.maketecheasier.com/use-password-store-manage-passwords-linux/#comment-98796 Fri, 01 Apr 2022 01:21:57 +0000 https://admin.maketecheasier.com/?post_type=pitch&p=470650#comment-98796 In reply to Jed.

In my opinion, pass doesn’t have an equivalent usage than Bitwarden or KeepassXC. These are GUI application with a lots of fields and features like pwd expiry, notes, etc. Additionally Bitwarden has 2FA login, is cloud based so you can use it on multiple devices. The pass utility cannot and will never compete with those features.

However pass has a trick that none of the GUI apps can compete. You can use it in scripting. For example, you can inject a secret in your script like this:

MYPWD=$(pass show MyProject/mySoSoPwd)

Then you can reference to your pwd with $MYPWD. You can share your script, publish on open-source etc. And never worry about leaking your credentials. Pass can also generate OTP password and save pwd on git conveniently which KeepassXC cannot do. Bitwarden needs paid account to have OTP. And even if you have paid Bitwarden, pass is still faster, b/c it’s just a quicker to type a convenient alias on the cmd line than open Bitwarden and click around. And I am saying that even thought I am a very bad typist.

In case you are not yet convinced about pass. My colleagues who don’t want to go through the overhead of learning pass + GPG. They use various low tech tricks to get their pwd when they need (our company forbid to hardcode creds). Often time consuming GUI app (b/c manual) and sometimes even unsafe methods. If you don’t write scripts or don’t need to enter often pwd during your work day. Then pass is not useful.

]]>
By: InnocentBystander https://www.maketecheasier.com/use-password-store-manage-passwords-linux/#comment-98781 Thu, 31 Mar 2022 23:30:20 +0000 https://admin.maketecheasier.com/?post_type=pitch&p=470650#comment-98781 Wonderful tutorial. Very geeky in particular the git and OTP part. Please note you can also export these variables to change some default behavior of pass : https://git.zx2c4.com/password-store/about/#ENVIRONMENT%20VARIABLES. Example:

export PASSWORD_STORE_CLIP_TIME=120
export PASSWORD_STORE_DIR=”$HOME/Documents/MyPasswordStore”

Using pass improve significantly the safety of my scripts. The script safely acquires the secret using MYSECRET=$(pass show MyGroup/MyKey1).

Not sure why you have long command name like `password-store-copy`. I use `pass -c` or `pass –clip`.

]]>
By: Jed https://www.maketecheasier.com/use-password-store-manage-passwords-linux/#comment-98780 Thu, 31 Mar 2022 19:39:20 +0000 https://admin.maketecheasier.com/?post_type=pitch&p=470650#comment-98780 Interesting, BUT, I would have liked to see a comparison between this product and KeepassXC. And, I could even add Bitwarden. These are my current PWM’s and allow me to use them on my Linux/Mac/Windows hardware. I can install them with a click of a buttonand both have a strong support system and are regarded very highly.

It would take a lot to entice me to set up a one computer only system, but it is something I am always willing to entertain, if you can show me why it’s better than the software I am currently using.

]]>