On Wed, September 21, 2016 4:30 pm, Keith Keller wrote:> On 2016-09-21, Gordon Messmer <gordon.messmer at gmail.com> wrote: >> On 09/21/2016 11:30 AM, H wrote: >>> You are right, I'll look at it again. Let me ask, what other password >>> managers are people using, if any? >> >> >> I use keepass, but I know people who like: >> >> https://www.passwordstore.org/ > > This looks very cool, but is there a version for Android? One of the > reasons I picked KeePass is that I could use a copy of the same password > file with clients on linux, OS X, or Android. (And if I had an iOS > device KeePass works there too.)I use KeepassX. That one has versions for pretty much all open source systems (Linux, *BSD) and for variety of others widely used systems: MacOS, Android, iOS, MS Windows (just listed the ones I know of). Thanks to that I can open the same encrypted password store on pretty much all devices and systems I use. However, no, I don't consider it reasonable for myself to use it from inside web browser, hence I would recommend reconsider this part in favor of universal tool. Just my $0.02 Valeri> > --keith > > -- > kkeller at wombat.san-francisco.ca.us > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++
On 2016-09-21, Valeri Galtsev <galtsev at kicp.uchicago.edu> wrote:> > On Wed, September 21, 2016 4:30 pm, Keith Keller wrote: >> On 2016-09-21, Gordon Messmer <gordon.messmer at gmail.com> wrote: >>> On 09/21/2016 11:30 AM, H wrote: >>> >>> https://www.passwordstore.org/ >> >> This looks very cool, but is there a version for Android? One of the >> reasons I picked KeePass is that I could use a copy of the same password >> file with clients on linux, OS X, or Android. (And if I had an iOS >> device KeePass works there too.) > > I use KeepassX. That one has versions for pretty much all open source > systems (Linux, *BSD) and for variety of others widely used systems: > MacOS, Android, iOS, MS Windows (just listed the ones I know of). Thanks > to that I can open the same encrypted password store on pretty much all > devices and systems I use.I was pretty dumb in asking this question: right at the top of the web page, it says that third parties have made Android and iOS apps. Sorry about that!> However, no, I don't consider it reasonable for > myself to use it from inside web browser, hence I would recommend > reconsider this part in favor of universal tool.While pass does have a Firefox plugin, I don't think I'd use it, but I can imagine someone else might. It sounds like this is different from keeping your key store in The Cloud (TM), but I didn't read the plugin page carefully. --keith -- kkeller at wombat.san-francisco.ca.us
On 09/21/2016 02:48 PM, Valeri Galtsev wrote:> I use KeepassX. That one has versions for pretty much all open source > systems (Linux, *BSD) and for variety of others widely used systems: > MacOS, Android, iOS, MS Windows (just listed the ones I know of).So we're back to this... KeepassX is compatible with the Keepass 2 database format, but is not Keepass. KeepassX has OS X and Windows ports, but the mobile clients you're referring to are also ports of Keepass (not KeepassX) or are Keepass-compatible applications. KeepassX doesn't support plugins at all, so none of these are available: http://keepass.info/plugins.html> Thanks > to that I can open the same encrypted password store on pretty much all > devices and systems I use. However, no, I don't consider it reasonable for > myself to use it from inside web browserDo you use KeepassX's auto-type? That's (approximately) what KeeFox does, except that the plugin interface is more secure. Note that KeepassX doesn't offer that feature on OS X and Windows. Since web passwords are probably the most common use of a password manager, auto-fill of web login forms should be considered an essential function for such a program. Between the two, Keepass is a much better option.
On Wed, September 21, 2016 5:15 pm, Keith Keller wrote:> On 2016-09-21, Valeri Galtsev <galtsev at kicp.uchicago.edu> wrote: >> >> On Wed, September 21, 2016 4:30 pm, Keith Keller wrote: >>> On 2016-09-21, Gordon Messmer <gordon.messmer at gmail.com> wrote: >>>> On 09/21/2016 11:30 AM, H wrote: >>>> >>>> https://www.passwordstore.org/ >>> >>> This looks very cool, but is there a version for Android? One of the >>> reasons I picked KeePass is that I could use a copy of the same >>> password >>> file with clients on linux, OS X, or Android. (And if I had an iOS >>> device KeePass works there too.) >> >> I use KeepassX. That one has versions for pretty much all open source >> systems (Linux, *BSD) and for variety of others widely used systems: >> MacOS, Android, iOS, MS Windows (just listed the ones I know of). Thanks >> to that I can open the same encrypted password store on pretty much all >> devices and systems I use. > > I was pretty dumb in asking this question: right at the top of the web > page, it says that third parties have made Android and iOS apps. Sorry > about that! > >> However, no, I don't consider it reasonable for >> myself to use it from inside web browser, hence I would recommend >> reconsider this part in favor of universal tool. > > While pass does have a Firefox plugin, I don't think I'd use it, but I > can imagine someone else might. It sounds like this is different from > keeping your key store in The Cloud (TM),And no, I would not keep _my_ password store on any "Cloud" except maybe on my own server running open source owncloud instance. If security is concerned, paranoia is your friend ;-) Valeri> but I didn't read the plugin > page carefully. > > --keith > > -- > kkeller at wombat.san-francisco.ca.us > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++
On Wed, September 21, 2016 5:25 pm, Gordon Messmer wrote:> On 09/21/2016 02:48 PM, Valeri Galtsev wrote: >> I use KeepassX. That one has versions for pretty much all open source >> systems (Linux, *BSD) and for variety of others widely used systems: >> MacOS, Android, iOS, MS Windows (just listed the ones I know of). > > So we're back to this... KeepassX is compatible with the Keepass 2 > database format, but is not Keepass. KeepassX has OS X and Windows > ports, but the mobile clients you're referring to are also ports of > Keepass (not KeepassX) or are Keepass-compatible applications. > > KeepassX doesn't support plugins at all, so none of these are available: > http://keepass.info/plugins.htmlAha, great, thanks for setting us straight!> >> Thanks >> to that I can open the same encrypted password store on pretty much all >> devices and systems I use. However, no, I don't consider it reasonable >> for >> myself to use it from inside web browser > > Do you use KeepassX's auto-type? That's (approximately) what KeeFox > does, except that the plugin interface is more secure. Note that > KeepassX doesn't offer that feature on OS X and Windows. Since web > passwords are probably the most common use of a password manager, > auto-fill of web login forms should be considered an essential function > for such a program. Between the two, Keepass is a much better option. > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++