HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
zdia
gorilla
Tcl2010–2020
zdia / gorilla

gorilla

Password Gorilla manages passwords

4Distinct people
40Mentions
1Explicit recommenders
427GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Password Gorilla manages passwords

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

Don't use the built in password storage of any browser. Doing so leaves you vulernable to bugs such as this one: http://forum.avast.com/index.php?topic=25044.0;wap2. I.e., if a…

pwg used a recommendation phrase. One indexed comment matches. This is a phrase match, not a verdict.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 2:59:58 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year40 dated mentions

Observed mentions: 2010-09-15 19:13:14 UTC to 2020-06-23 18:43:46 UTC.

0510152010-01-01 00:00:00 UTC to 2011-01-01 00:00:00 UTC (exclusive): 5 mentions; 0 submissions, 5 comments20102011-01-01 00:00:00 UTC to 2012-01-01 00:00:00 UTC (exclusive): 14 mentions; 1 submissions, 13 comments2012-01-01 00:00:00 UTC to 2013-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 6 mentions; 0 submissions, 6 comments2015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments20152016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 5 mentions; 1 submissions, 4 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2020

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20102010-01-01 00:00:00 UTC2011-01-01 00:00:00 UTC505
20112011-01-01 00:00:00 UTC2012-01-01 00:00:00 UTC14113
20122012-01-01 00:00:00 UTC2013-01-01 00:00:00 UTC202
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC000
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC606
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC202
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC514
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC202
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC202
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC101
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC101

What Hacker News says

6 sources
Password Gorilla: https://github.com/zdia/gorilla/wiki Same code runs on Linux, MacOS, and Windows. There are also multiple Android phone apps. that work with the storage file format. Having one application storing your passwords locally, provided you use a strong master password, is not, in and of itself, a tactically weak choice. You gain security by having local files because an attacker has to get your local file first before launching an attack. Using a "service" means that anyone (sys-admins, hackers) who can access the service can gain remote access to your password storage, from which an attack can be launched. Using a "service" also means you have to simply take it on faith that they are storing your passwords securely. This is actually a tactically weak choice with "services", you have zero way to independently verify the se
Read the rest
cure storage they promise. Using a local open source app. means you can verify for yourself exactly how your passwords are being stored.
In Ask HN: What keychain service do you recommend?
The password safe format is quite close, it is open source, free, and works most everywhere. PasswordGorilla (https://github.com/zdia/gorilla/wiki) provides support for the format on the three major OS'es (Linux, MacOS, Windows) with the same tool, and there are several Android phone apps. that inter-operate with the format, so you could also have your passwords available on your phone as well. Lastly, the file storage format was designed by Bruce Shiner, so there is some reasonable assurance that the design was done right due to that heritage.
In Password Security: Why the horse battery staple is not correct
You are missing one. Password Gorilla: https://github.com/zdia/gorilla/wiki Cross platform (Linux, Windows, Mac for Password Gorilla itself). Several Android apps that inter-operate with the same format password storage file (Bruce Shiner's PasswordSafe format file). Scroll part way down the above page to find references to some of the Android apps. Your passwords are stored in an encrypted file stored on your local machine. You can do with the encrypted file what you wish. PWGorilla itself includes a merge feature that merges encrypted files together, and alerts you to the differences so you can fix things up. Its browser integration is through the OS clipboard. However on Linux the integration is almost to the level of an auto-type plugin (because the X11 clipboard works in a way that allows the better integration). So, it fits the
Read the rest
se of your requirements: Cross platform (Linux, Windows [check], Android [secondary app]) Lets you keep your own data and sync it however you want [check]. Integrates with browsers [partial check]. So it's close. Not 100%, but close. It is also GPL open source, so you've got nothing to lose in giving it a try. [edit: add a couple paragraph breaks]
In Ask HN: Cross platform password manager without cloud?

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.