Re:LastPass breach gets worse – reddit.com/r/sysadmin
by philjackson on Wednesday January 25, 2023 @06:59AM
(#34517240)
`pass` is lovely, but don't you need your passwords on your phone when you're out-and-about?
[ Parent
| on HN ]
Re:LastPass breach gets worse – reddit.com/r/sysadmin
by rsstack on Wednesday January 25, 2023 @07:17AM
(#34517373)
There are apps for mobile devices, some sync with a GitHub repository (which you should make private): https://www.passwordstore.org/#:~:text=password%20(OTP)%20to...
The contents of the GitHub repo are of course encrypted with your own key, which you need to manually sync to your other devices.
Re:LastPass breach gets worse – reddit.com/r/sysadmin
by Kwpolska on Wednesday January 25, 2023 @08:11AM
(#34517821)
The Android app for pass, and the required gpg app, are pretty clunky and not very friendly to work with (and the Windows desktop experience is not great either).
After some time with pass, I switched to a more integrated solution, with KeePassXC on desktops and Keepass2Android on mobile, with sync via OneDrive.
Re:LastPass breach gets worse – reddit.com/r/sysadmin
by doubled112 on Wednesday January 25, 2023 @07:47AM
(#34517599)
Pass has clients on iOS and Android, but there was some blocker with my GPG key on YubiKey last time I tried.
Ended up on Bitwarden (Vaultwarden in my closet really) instead for web passwords. Admin passwords stayed in pass because I want to be sure I have them. Git is local to the device even if the server burns down.
Re:LastPass breach gets worse – reddit.com/r/sysadmin
by tremere on Wednesday January 25, 2023 @09:40AM
(#34518755)
You can rsync the whole directory of passwords elsewhere and then connect there from your phone using SSH. If you're handy with `pass` you probably have an SSH client on your phone anyway (I use Prompt on iOS). Some people might think you're weird for using SSH from your phone though, fair warning.