lastpass-cli
pass-tomb
lastpass-cli | pass-tomb | |
---|---|---|
10 | 9 | |
2,858 | 367 | |
-0.3% | - | |
7.4 | 7.1 | |
3 days ago | 2 months ago | |
C | Shell | |
GNU General Public License v3.0 only | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
lastpass-cli
- LastPass to Bitwarden: Secure Notes and more questions
- Want to put my Ansible playbooks on a public GitHub (for my resume) but don't want my ansible-vault encrypted files up there. What are my options?
-
LastPass breach gets worse – reddit.com/r/sysadmin
The other difficulty is it appears there is little-to-no support for API/automation:
https://github.com/lastpass/lastpass-cli/issues/602
https://github.com/lastpass/lastpass-cli/issues/624
https://github.com/lastpass/lastpass-cli/issues/604
...their CLI tool is de-facto deprecated (unsupported) and has several unreliability issues (ie: `lpass ls/userls ...` reports differing amounts of values depending on when a user was added to the folder or not). Basically `lpass ls ... | xargs -n1 ...` cannot be trusted, and you can only get an accurate list of passwords (or users) from the actual GUI.
It makes automation, auditing, reporting, near impossible.
-
I Lost All Faith in LastPass
When saving the CSV, do not copy-paste the content of the HTML manually, instead use the popup to download the file that LastPass provides. You might need to allow popups for LastPass extension the first time you perform the export, then perform another one to get the popup.
# 2. Export attachments
Use lastpass-cli to export attachments. A script is provided in version 1.3.4: https://github.com/lastpass/lastpass-cli/blob/v1.3.4/contrib...
-
Planning a move from LastPass.
https://github.com/lastpass/lastpass-cli/blob/master/contrib/lpass-att-export.sh helped me batch-export my attachments.
-
LastPass says hackers stole customers' password vaults
You can see the source code for a lastpass client here.
-
Help creating a package for a program
(define-module (lastpass-cli) #:use-module (guix utils) #:use-module (guix packages) #:use-module (guix download) #:use-module (guix build-system cmake) #:use-module (guix licenses) #:use-module (gnu packages bash) #:use-module (gnu packages curl) #:use-module (gnu packages xml) #:use-module (gnu packages gnupg) #:use-module (gnu packages pkg-config) #:use-module (gnu packages tls) ) (define-public lastpass-cli (package (name "lastpass-cli") (version "1.3.3") (source (origin (method url-fetch) (uri (string-append "https://github.com/lastpass/lastpass-cli/releases/download/v" version "/lastpass-cli-" version ".tar.gz")) (sha256 (base32 "06v7d1khk5ylhmf1giqpgq97gsn6mnqhg0637gnryv704wb5jkxr")))) (build-system cmake-build-system) (arguments ;; disable tests? '(#:tests? #f)) (native-inputs (list pkg-config)) (inputs (list bash openssl curl libxml2 pinentry)) (synopsis "Command line interface to LastPass.com") (description "") (home-page "https://github.com/lastpass/lastpass-cli") (license gpl2))) lastpass-cli
-
Tell HN: Bitwarden does not export attachments in backups
Their CLI seems to support showing attachments: https://github.com/lastpass/lastpass-cli/blob/8767b5e53192ad...
-
Clever uses of pass, the Unix password manager
FYI for those interested in CLI password management, there is a pretty good CLI for LastPass called lpass that even supports your Yubikeys.
https://github.com/lastpass/lastpass-cli
- Passwords in Automation, Automation Platforms?
pass-tomb
-
KeePass is the free, open source, light-weight and easy-to-use password manager
By itself, Passwordstore will not encrypt file names or directory names, which might not be a problem if no one else has access to the machine that hosts your git repo, but if that's not the case (even if it's a private repo on whatever platform), you might want to use either Tomb or git-crypt-remote to have full end-to-end encryption. There are even some tools that glue tomb and pass together (https://github.com/roddhjav/pass-tomb for one), though I'm not sure what's the situation is like when it comes to mobile integration with tomb/git-crypt-remote.
- Vim: Warning: Input is not from a terminal - how to prevent with given command in script
- Clever uses of pass, the Unix password manager
-
Any self-hostable password managers worth using?
That can of course be fixed by using pass-tomb, but that isn’t implemented in mobile clients (at least not on iOS).
-
Using gpg + pass + tomb and yubikey for secrets management ?
- https://pujol.io/blog/tomb-with-gpg-keys/ - https://github.com/roddhjav/pass-tomb
- Pass: The standard Unix password manager
-
LastPass is finally a no-brainer to ditch: Bitwarden?
A plug-in called pass-tomb exists to fix this, but doesn’t work with mobile apps (a least not iOS)
What are some alternatives?
age-plugin-yubikey - YubiKey plugin for age
gopass - The slightly more awesome standard unix password manager for teams
clients - Bitwarden client applications (web, browser extension, desktop, and cli)
pass-grave - An extension for pass (the standard Unix password manager) to easily hide the metadata of the password store
psPAS - PowerShell module for CyberArk Privileged Access Security REST API
age - A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
PoShKeePass - PowerShell module for KeePass
OpenKeychain - OpenKeychain is an OpenPGP implementation for Android.
docker-credential-helpers - Programs to keep Docker login credentials safe by storing in platform keystores
passhole - A secure hole for your passwords (KeePass CLI)
pass-import - A pass extension for importing data from most existing password managers
Android-Password-Store - Android application compatible with ZX2C4's Pass command line application