Re: [Trisquel-users] Password Management on Trisquel

2020-04-17 Thread rfb
I prefer a KISS (keep it stupid simple) approach and use a dedicated offline  
software to manage all my passwords. I think storing them in the browser has  
an attack surface greater than just using a separate tool.


I’ve never used Seahorse, though it seems to be quite good. I use  
KeePassXC. It’s free software and is recommended by privacy-conscious  
parties like PrivacyTools and PRISM Break.


However, it’s not included in Trisquel 8 repositories (because it was not  
in the Ubuntu 16.04’s at the time). It’ll be in Trisquel 9’s for sure.  
In the meantime, I use their official PPA. And they have also an AppImage.


Re: [Trisquel-users] Password Management on Trisquel

2020-04-17 Thread bobandrew
I have no problem with the built-in password storage of Abrowser. The  
"prompt" asks me whether I want to store the password or not, I do not feel  
commanded to do it, and I can turn it off any time.


> Is this an endorsement we would give explicitly?

I am not endorsing anything, explicitly or implicitly, simply by being a user  
of this forum. What does implicitly endorsing mean, anyway?


I have been using seahorse to store passwords out of the browser, it is  
installed by default in Trisquel 8.


Re: [Trisquel-users] Password Management on Trisquel

2020-04-17 Thread buckobry

re aloniv's:

>I currently use the password manager built into ABrowser to store all my  
non-sensitive passwords for websites.
By "non-sensitive passwords" do you mean anything BUT Credit Union, bank (if  
you really must use one of those), gov't/tax sites?  If participants in this  
Forum or the broader Trisquel Community recommend other TYPES of PWDs that  
SHOULD be regarded as "Sensitive", please share your suggestions for our  
consideration!


>I'm curious what the Trisquel community think about that from a password  
security POV, and what other password managers they would recommend.


IF there's already a specific Topic for PASSWORD-related ?s and Comments,  
What is its Title?_  IF there isn't one, lets use this one?___  For NOW,  
that's what I'll do!


SO... IF you use FireFox's SYNC command, and the FireFox account it will  
prompt you to create...TAKE NOTE:
1. at first use it Defaults to having ALL the things you can SYNC with it  
Check-marked "ON", and that includes SYNCing your Master PWD on your other  
machines... BUT, it does the Sync-ing by sending ALL the info you've checked  
to some Cloud!  I've only used FireFox SYNC to Sync my Abrowser Bookmarks on  
my desktop, running Trisquel 8, with those on my laptop, running Ubuntu  
18.04; and it worked really well!BUT
2. While I was on the FireFox SYNC site, I read some "Users Feedback on  
FireFox SYNC... scroll a few entries down and you'll see a very PO'd User  
telling WHY you SHOULD NOT use SYNC to sync passwords!!  I'll try to find it  
again, then post a link to it in another Reply here.
3. I have other PWD-related ?s to ask too, so maybe I'll take the initiative  
to start a PWD ISSUES, GENERALLY Topic, OR just add it here?


I'll wait a day or so for Comments/Replies here.  Then...
 


Re: [Trisquel-users] Password Management on Trisquel

2020-04-16 Thread Ade Malsasa Akbar
I use KeePassX.


Re: [Trisquel-users] Password Management on Trisquel

2020-04-16 Thread alonivtsan
I use this addon with Mozilla browsers that support legacy extensions (the  
extension integrates saved passwords with GNOME keyring):


https://github.com/swick/mozilla-gnome-keyring
https://addons.thunderbird.net/en-US/thunderbird/addon/mozilla-gnome-keyring/


[Trisquel-users] Password Management on Trisquel

2020-04-16 Thread strypey
I currently use the password manager built into ABrowser to store all my  
non-sensitive passwords for websites. I'm curious what the Trisquel community  
think about that from a password security POV, and what other password  
managers they would recommend.


In a fresh install of T8, if I remember rightly, entering a password in a web  
page opened ABrowser will prompt the user to store the password. That means  
Trisquel is implicitly endorsing the use of the ABrowser password manager. Is  
this an endorsement we would give explicitly?


If the consensus is that another password manager is more secure, or is  
better in other important ways, perhaps this ought to be installed by default  
in future versions of Trisquel?