yubitouch
lastpass-cli
Our great sponsors
yubitouch | lastpass-cli | |
---|---|---|
1 | 10 | |
155 | 2,858 | |
- | -0.3% | |
0.0 | 6.0 | |
about 3 years ago | 12 days ago | |
Shell | C | |
BSD 2-clause "Simplified" License | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
yubitouch
-
Clever uses of pass, the Unix password manager
Here's a script that will set that mode, in case you'd like to use it. It prevents someone/malware from being able to use your key after you've unlocked it. For example if you hacked my computer and tried to use it to ssh to another machine you'd be unable because you'd need me to tap the key.
I'd suggest trying 'on' before 'fix', but then switching to 'fix' for the extra security it provides.
https://github.com/a-dma/yubitouch
lastpass-cli
- LastPass to Bitwarden: Secure Notes and more questions
- Want to put my Ansible playbooks on a public GitHub (for my resume) but don't want my ansible-vault encrypted files up there. What are my options?
-
LastPass breach gets worse – reddit.com/r/sysadmin
The other difficulty is it appears there is little-to-no support for API/automation:
https://github.com/lastpass/lastpass-cli/issues/602
https://github.com/lastpass/lastpass-cli/issues/624
https://github.com/lastpass/lastpass-cli/issues/604
...their CLI tool is de-facto deprecated (unsupported) and has several unreliability issues (ie: `lpass ls/userls ...` reports differing amounts of values depending on when a user was added to the folder or not). Basically `lpass ls ... | xargs -n1 ...` cannot be trusted, and you can only get an accurate list of passwords (or users) from the actual GUI.
It makes automation, auditing, reporting, near impossible.
-
I Lost All Faith in LastPass
When saving the CSV, do not copy-paste the content of the HTML manually, instead use the popup to download the file that LastPass provides. You might need to allow popups for LastPass extension the first time you perform the export, then perform another one to get the popup.
# 2. Export attachments
Use lastpass-cli to export attachments. A script is provided in version 1.3.4: https://github.com/lastpass/lastpass-cli/blob/v1.3.4/contrib...
-
Planning a move from LastPass.
https://github.com/lastpass/lastpass-cli/blob/master/contrib/lpass-att-export.sh helped me batch-export my attachments.
-
LastPass says hackers stole customers' password vaults
You can see the source code for a lastpass client here.
-
Help creating a package for a program
(define-module (lastpass-cli) #:use-module (guix utils) #:use-module (guix packages) #:use-module (guix download) #:use-module (guix build-system cmake) #:use-module (guix licenses) #:use-module (gnu packages bash) #:use-module (gnu packages curl) #:use-module (gnu packages xml) #:use-module (gnu packages gnupg) #:use-module (gnu packages pkg-config) #:use-module (gnu packages tls) ) (define-public lastpass-cli (package (name "lastpass-cli") (version "1.3.3") (source (origin (method url-fetch) (uri (string-append "https://github.com/lastpass/lastpass-cli/releases/download/v" version "/lastpass-cli-" version ".tar.gz")) (sha256 (base32 "06v7d1khk5ylhmf1giqpgq97gsn6mnqhg0637gnryv704wb5jkxr")))) (build-system cmake-build-system) (arguments ;; disable tests? '(#:tests? #f)) (native-inputs (list pkg-config)) (inputs (list bash openssl curl libxml2 pinentry)) (synopsis "Command line interface to LastPass.com") (description "") (home-page "https://github.com/lastpass/lastpass-cli") (license gpl2))) lastpass-cli
-
Tell HN: Bitwarden does not export attachments in backups
Their CLI seems to support showing attachments: https://github.com/lastpass/lastpass-cli/blob/8767b5e53192ad...
-
Clever uses of pass, the Unix password manager
FYI for those interested in CLI password management, there is a pretty good CLI for LastPass called lpass that even supports your Yubikeys.
https://github.com/lastpass/lastpass-cli
- Passwords in Automation, Automation Platforms?
What are some alternatives?
gopass - The slightly more awesome standard unix password manager for teams
age-plugin-yubikey - YubiKey plugin for age
pass-coffin - A password store extension to hide data inside a signed and encrypted coffin
clients - Bitwarden client applications (web, browser extension, desktop, and cli)
hunter2 - The "hunter2" password manager is a simple script-oriented password manager.
psPAS - PowerShell module for CyberArk Privileged Access Security REST API
systemd - The systemd System and Service Manager
PoShKeePass - PowerShell module for KeePass
pass-import - A pass extension for importing data from most existing password managers
docker-credential-helpers - Programs to keep Docker login credentials safe by storing in platform keystores
age - A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.