passage

I do not like the idea of self-hosting VaultWarden because I generally do not like the idea of application software requiring so much random access memory for even the simplest tasks. So, my idea was to use something like pass[0] or passage[1] (pass[0] + age[2]) on a remote server, but the problem arises when Yubikeys come into play. I am in no way, shape, or form, endorsing this PonyApp thingy and cannot vouch for it as I haven't audited it. But judging by what it says on the tin, it does appear like a candidate to solve the specific problem I have. [0]: https://www.passwordstore.org/ [1]: https://github.com/FiloSottile/passage [2]: https://github.com/FiloSottile/age

https://www.passwordstore.org/ git + somesite.com.gpg https://github.com/FiloSottile/passage (or: forked using AGE instead of GPG)

I also use pass. Any forge you feel like is fine (I use gitlab). I backup my gpg key with `gpg —export-owner-trust` and store that backup elsewhere. Pass has a pretty good ecosystem of plugins/other clients, as well. There are open source iOS/Android clients and browser extensions so once you’re setup the day-to-day experience is not far off from any of the popular hosted password managers. My only real issue is the dependency on gpg, as it’s pretty long in the tooth and a hassle to operate. (If you are not comfortable using gpg, spend some time learning that before you go all-in on pass!) There’s a fork[1] which swaps gpg for age, but it hasn’t attracted enough attention to get a similar ecosystem of mobile clients/browser extensions, so it’s not a very practical choice IMHO. [1]: https://github.com/FiloSottile/passage

If you are using age instead of GPG for encryption purposes, I've found this to be useful: https://github.com/FiloSottile/passage

> Checkout passage: https://github.com/FiloSottile/passage which has done part of this by using age instead of pgp. Nice! But I can't really use it until it works on Android too (with hardware keys). I'll definitely try it out though. > the pass android app hardcoded too much PGP to be a useful base The original one did not. It leveraged the OpenKeyChain external app which basically handles all the PGP stuff. So there was no PGP code in the app. Similar to how it's done on a PC with the gpg suite But someone rewrote it with an internal library which also removed Yubikey support.

Checkout passage: https://github.com/FiloSottile/passage which has done part of this by using age instead of pgp. I used it for a while, and last I checked there was sadly no android app (the pass android app hardcoded too much PGP to be a useful base, so I was told), but the work is def there.

for a newer password manager... https://github.com/FiloSottile/passage

You'd be better off with passage[0] -- it's a fork of pass but uses age for encryption. You can just make a directory hierarchy with appropriate .age-recipients files at the right levels. [0]: https://github.com/FiloSottile/passage

I believe there is `pass-age` https://github.com/FiloSottile/passage ... unifies to `ssh` keys as the key material. https://github.com/FiloSottile/age ``` RECIPIENT can be an age public key generated by age-keygen ("age1...") or an SSH public key ("ssh-ed25519 AAAA...", "ssh-rsa AAAA..."). ```

_o/ hi all, age author here! age is the one of my projects that grew most organically into an ecosystem. It's always great to see what people build with it. Happy to answer any questions. Here are some previous discussions 132 points on Feb 26, 2023 | 77 comments | https://news.ycombinator.com/item?id=34936504 126 points on Sept 26, 2022 | 54 comments | https://news.ycombinator.com/item?id=32980141 113 points on June 11, 2022 | 33 comments | https://news.ycombinator.com/item?id=31705670 494 points on Sept 6, 2021 | 88 comments | https://news.ycombinator.com/item?id=28435613 466 points on Dec 27, 2019 | 199 comments | https://news.ycombinator.com/item?id=21895671 and here some related resources - a list of age ecosystem projects https://github.com/FiloSottile/awesome-age - the format specification https://c2sp.org/age - the Go library docs

There is a fork of pass called "passage" that uses Age for encryption instead: https://github.com/FiloSottile/passage Unfortunately I don't believe any iOS/Android apps exist to work with it so far.

Passage is incidentally the name of another command line password manager https://github.com/FiloSottile/passage

_o/ hi all, age author here! The OP link is the spec, here's a few other things you might find interesting - the Go reference implementation https://age-encryption.org - the Go library docs https://pkg.go.dev/filippo.io/age - the CLI man page https://filippo.io/age/age.1 - the large reusable test suite (which I should write about!) https://c2sp.org/CCTV/age - an interoperable Rust implementation by @str4d https://github.com/str4d/rage - a YubiKey plugin by @str4d https://github.com/str4d/age-plugin-yubikey - the draft plugin protocol specification (which we should really merge) https://github.com/C2SP/C2SP/pull/5/files?short_path=07bf8cc... - a Windows GUI by @spieglt https://github.com/spieglt/winage - a discussion of the authentication properties of age https://words.filippo.io/dispatches/age-authentication/ - a discussion of a potentia

Without looking close at your suggestion, you might want to look at passage [0] by the creator of age. It's a fork of pass [1] using age as the backend. [0] https://github.com/FiloSottile/passage [1] https://passwordstore.org

There is also Passage by Age's creator Filippo Valsorda: https://github.com/FiloSottile/passage