browserpass-legacy

Been doing this for a while. There is a great extension for Pass: https://github.com/tadfisher/pass-otp Even works with Browserpass and the Pass Android client: https://github.com/browserpass/browserpass https://github.com/zeapo/Android-Password-Store

Fair observation, thanks for sharing. I'll start looking into https://github.com/browserpass/browserpass/ .

Theres also browserpass [0], it works great in firefox and chrome as well. A great great plugin is pass-otp [1], using this I have migrated the storage of all OTP secrets from my phone to pass. And then I export it from pass to my phone. That way I still have my OTP secrets if I loose my phone and don't have to hassle with recovery of accounts just because of loosing the phone. For sure the OTP needs to be changed at that point but still worth it. It's also worth to mention that browserpass [0] integrates pass-otp [1] so whenever I log in to a page (that has an OTP secret) using browserpass it shows a litle box in the top right corner with the current OTP code that I can copy-paste to the site. [0]: https://github.com/browserpass/browserpass [1]: https://github.com/tadfisher/pass-otp

I've recently moved from Lastpass to using Pass[0] & BrowserPass[1], just as convenient and allows me to manage the storing of passwords myself. All files are PGP encrypted. Storing my passwords in my self hosted GIT allows them to be checked out on to my tablet and phone for convenience as well. [0] https://www.passwordstore.org/ [1] https://github.com/dannyvankooten/browserpass

Pass[0] is pretty great. GPG encrypted and synced with Git. There is a great cross browser extension called browserpass[1]. I have mine tied to my yubikey, so it needs a physical device to decrypted my passwords. [0] https://www.passwordstore.org/ [1] https://github.com/dannyvankooten/browserpass#readme

I found pass [0] to be extremely useful especially if one is using OpenPGP (e.g. GPG) already. For desktop there is QTPass [1] for Android Password Store [2]. There is pass-otc [3] for storing TOTP secrets. There is browser pass extension [4] for Chrome and Firefox. Coupling this with hardware token such as Yubikey one can require PIN and touch input to decode password. In the same time the password repository can be stored in private bitbucket git repository. Personally it's a perfect combination of security and convenience. The design is incredibly simple, if all these apps fail I can just use gpg to decrypt secrets. The only downside is that filenames are stored unencrypted in git repository so Bitbucket can see what sites do I use but can't see usernames or passwords (obviously). [0]: https://www.fossmint.com/pass-commandline-password

This is exactly the setup I'm using too. Works well, though the whole setup is a little less polished than 1Password which I was using before. On the desktop I'm using Browsers [1] and QTPass [2]. [1] https://github.com/dannyvankooten/browserpass [2] https://qtpass.org/

You can use browserpass [1] instead, it's a web extension for Firefox and Chrome. [1] https://github.com/dannyvankooten/browserpass

I think it depends on the extension. For example browserpass [0] can be only invoked on button press in browser's Chrome (not via scripts on page) and while it runs native app via Native Messaging it just uses JSONs to communicate. [0]: https://github.com/dannyvankooten/browserpass

> I use pass[1], and I recommend it if you can stand copying and pasting. Try browserpass. It uses pass internally. https://github.com/dannyvankooten/browserpass

There's a Chrome+Firefox browser plug-in which also uses a native binary written in Go: https://github.com/dannyvankooten/browserpass/blob/master/br...

True, but the chrome plugin has issues (something to do with the native messaging executable not working): https://github.com/dannyvankooten/browserpass/issues/28

I switched from OSX to Linux a few months ago and had to find an alternative for 1Password. Pass has been great, I love its simplicity. Not having a browser add-on to retrieve passwords was feeling like a step back in terms of convenience though. That's why I built & open sourced browserpass [1], a browser extension for Pass. It uses Native Host Messaging to securely retrieve passwords, so no crazy port listening as some other open-sourced add-ons do (which is a terribly bad idea). [1] https://github.com/dannyvankooten/browserpass