pass-otp

I found pass [0] to be extremely useful especially if one is using OpenPGP (e.g. GPG) already. For desktop there is QTPass [1] for Android Password Store [2]. There is pass-otc [3] for storing TOTP secrets. There is browser pass extension [4] for Chrome and Firefox. Coupling this with hardware token such as Yubikey one can require PIN and touch input to decode password. In the same time the password repository can be stored in private bitbucket git repository. Personally it's a perfect combination of security and convenience. The design is incredibly simple, if all these apps fail I can just use gpg to decrypt secrets. The only downside is that filenames are stored unencrypted in git repository so Bitbucket can see what sites do I use but can't see usernames or passwords (obviously). [0]: https://www.fossmint.com/pass-commandline-password

On iOS (and beta for macOS) I can't recommend OTP Auth[1] highly enough. It does one thing and does it well. For a business/team case (i.e. if an account must be shared) I'd probably stick to Pass[2] with the OTP plugin[3] but for 99% of use cases, OTP Auth wins hands down. 1: http://cooperrs.de/otpauth.html 2: https://www.passwordstore.org 3: https://github.com/tadfisher/pass-otp#readme

> Strong password generation pass generate accounts/news.ycombinator.com 32 > keyboard shortcut driven UI `pass` is a CLI application. It has tab-autocompletion and everything. It doesn't get more efficient than that (tip: use `pass find` to search for entries). > different storage engines It's just OpenPGP encrypted plain text on disk, not sure what more you could want, but there is support for Tomb (https://www.dyne.org/software/tomb/) as well. Anything you expose to the filesystem works of course, including services like SFTP. > shared vaults Syncthing or git, and the use of multiple OpenPGP recipients. (See `.gpg-id` in the `pass` man-file.) > categories for secure non-password stuff like credit cards, It's plain multi-line text. The only convention is that the first line is intended for the password or secret data that clients w