Re:Android "Password Store" client for pass discontinued
by WD-42 on Monday October 21, 2024 @01:40PM
(#41906423)
pass clients can totally be backdoored. They decrypt the secret to plain text and add it to your clipboard or whatever... could easily shuttle it off somewhere else at that point.
- The data is stored in Git at a location of your choosing and security level
- The data encryption is provided by GnuPG using your personal key
This is why I use it, there's no potential for anyone to add a back door, except me.
BitWarden, LastPass, etc etc... you have a point, and I would not trust these companies one iota.
Apple, Google etc...uhm... not in a million years.