Encrypting Files with Passkeys and Age

Re:Encrypting Files with Passkeys and Age by megous on Tuesday July 15, 2025 @04:48PM (#44575663)

I think my dream password manager currently is a Pinephone with a special custom UI that allows for managing and securing a list of accounts/passwords that can type them out via USB HID keyboard gadget when prompted.

No way to prompt it for data, or compromise it remotely.

No other features, no OS userspace, no wifi, no adb, no nothing. Just a Linux kernel + a tiny single userspace static binary based on lvgl for UI and libsodium for encryption/storage. Normally powered off, boots in 2 seconds. :)

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by bkettle on Tuesday July 15, 2025 @07:32PM (#44577038)

I made one of these a while ago in school, it was fun! I think it's a great idea. Mine really had nothing: an overly complicated MCU, since it was provided by the class, but otherwise no need for an OS or anything: https://benkettle.xyz/projects/password-keeper/

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by megous on Tuesday July 15, 2025 @08:00PM (#44577237)

Nice. My wishlist also includes something similar looking with Luckfox Pico Mini + small OLED for displaying info about requests (via USB), to authorize various crypto operations with secret material stored on the device. :)

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by 70rd on Tuesday July 15, 2025 @10:44PM (#44578175)

Check out Precursor (FPGA device with softcore CPU running on it for trustability).

Xous (microkernel OS for Precursor) has an application called Vault that does FIDO2/U2F as well as password management and USB HID emulation.

https://www.crowdsupply.com/sutajio-kosagi/precursor/updates...

Much more on the dev board side and probably overkill for just this purpose but a really cool device.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by megous on Wednesday July 16, 2025 @07:38AM (#44581068)

Yeah, very cool!

Interestingly, Pinephone is in the almost good intersection of hackable and portable: :)

https://www.crowdsupply.com/sutajio-kosagi/precursor

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by lxgr on Tuesday July 15, 2025 @05:42PM (#44576117)

Tons of ways to compromise it between your computer's USB port and the server's database, though. If you already have dedicated hardware, FIDO authenticators make much more sense.

> Just a Linux kernel [...]

That's several orders of magnitude more lines of code than any FIDO authenticator implementation.

> Normally powered off, boots in 2 seconds. :)

Yubikeys boot even faster!

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by wkat4242 on Tuesday July 15, 2025 @06:23PM (#44576486)

Yeah and also it's huge for just a password manager.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by megous on Tuesday July 15, 2025 @07:42PM (#44577120)

None of this is a problem.

FIDO2 works only with websites that support it.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by odo1242 on Tuesday July 15, 2025 @08:32PM (#44577442)

> Tons of ways to compromise it between your computer's USB port and the server's database, though. If you already have dedicated hardware, FIDO authenticators make much more sense.

I mean, if you have the amount of access needed to compromise a USB connection, you have way more than enough access than needed to just yoink the authentication token or encryption key from browser storage.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by bee_rider on Tuesday July 15, 2025 @05:13PM (#44575882)

Why a phone, though? The device doesn’t need any connectivity other than to act as a USB “keyboard,” right? Maybe a raspberry pi zero could do it.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by megous on Tuesday July 15, 2025 @07:44PM (#44577134)

Cheaper, with integrated display, battery, touchscreen, working software, and nice form factor for the use case, sane fully open bootloader and firmware, full documentation for everything, much more power efficient.

[ Parent | on HN ]

Re:Encrypting Files with Passkeys and Age by Imustaskforhelp on Wednesday July 16, 2025 @02:07AM (#44579195)

I do think though that just using a pinephone as just a password manager might make sense for some people (I think) but at the price of pinephone and the features you can get with it, this is really underselling it (I think)

Maybe I don't have enough money to buy a pinephone just for this purpose but even if I would have, I would personally look more into soldering (esp32?) or some single board chip (SOC?) with a touch screen sounds nice too.

Now I am not kidding, there was this dumb phone which I was using and its cost was like 12.5$ and it had the features of camera, mic , text , messaging, audio, file manager and so much more... Basically it just didn't had a browser or ability to add apps ofc since it wasn't android. But yeah I do believe that something niche could be developed for people like you at maybe 1/10th the price

[ Parent | on HN ]