mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:46 +01:00
19 lines
922 B
Markdown
19 lines
922 B
Markdown
# Password Manager
|
|
|
|
- https://www.passwordstore.org/
|
|
- [awesome-password-store](https://github.com/tijn/awesome-password-store)
|
|
- <https://github.com/gopasspw/gopass>: reimplement in go, with more features.
|
|
- Clients
|
|
- Android: <https://github.com/android-password-store/Android-Password-Store>
|
|
- Browsers(Chrome/Firefox): <https://github.com/browserpass/browserpass-extension>
|
|
|
|
## Changing the GPG key
|
|
|
|
Change the key every two or three years. `python3 scripts/gpg_canokey.py pass` switches the store:
|
|
it decrypts every entry with the old key before changing anything, runs `pass init`, then checks
|
|
that each entry opens with the new key alone and kept its content. The whole procedure, from
|
|
generating the key to retiring the old one, is in
|
|
[hardware security keys](../../../../docs/security-keys.md#pass-openpgp).
|
|
|
|
Once the old key is deleted, older revisions in the store's git history can no longer be decrypted.
|