News for hackers. Stuff that matters.

A comment on Ask HN: How comfortable do you feel using cloud-based password managers?. Parent comment

Re:Ask HN: How comfortable do you feel using cloud-based pas... by Boulth on Sunday September 08, 2019 @05:10AM (#20909412)
Not to mention pass, due to its connection to GnuPG, can protect secrets using Yubikey that require 6 digit PIN (will lock after 3 tries) and touching the blinking dot.
[ Parent | on HN ]
Re:Ask HN: How comfortable do you feel using cloud-based pas... by eropple on Sunday September 08, 2019 @10:49AM (#20910871)
Interesting. I've never used pass, but this thread is making it sound interesting. Does it support fallbacks (multiple keys, other forms of credentials) simultaneously?
[ Parent | on HN ]
Re:Ask HN: How comfortable do you feel using cloud-based pas... by Boulth on Sunday September 08, 2019 @12:33PM (#20911548)
Multiple keys: yes, through a config file (can be also useful for team access). I'm not sure about "other forms of credentials" though. Pass is just a simple GnuPG wrapper if gpg can do something pass can do it too.
[ Parent | on HN ]
Re:Ask HN: How comfortable do you feel using cloud-based pas... by SomeOldThrow on Sunday September 08, 2019 @12:05PM (#20911341)
How do access your passwords from your phone?
[ Parent | on HN ]
Re:Ask HN: How comfortable do you feel using cloud-based pas... by Libbum on Sunday September 08, 2019 @12:23PM (#20911465)
There's an Andriod client for that: https://github.com/zeapo/Android-Password-Store#readme

Plenty of other extensions, managers here: https://www.passwordstore.org/#other

[ Parent | on HN ]
Re:Ask HN: How comfortable do you feel using cloud-based pas... by Boulth on Sunday September 08, 2019 @12:29PM (#20911512)
See sibling comment. Additionally it's possible to use the same Yubikey token on laptop and phone (through NFC or USB). Convenient and secure!

Second benefit is Yubikey can hold authentication subkey that can be used to SSH to a server on a phone.

[ Parent | on HN ]