-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
28 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,9 +1,36 @@ | ||
# GoPass | ||
|
||
Simple password manager | ||
GoPass is a simple password manager for the command line. | ||
|
||
## Installation | ||
|
||
```bash | ||
go install -v github.com/vitalvas/gopass@latest | ||
``` | ||
|
||
## GoPass vs Pass | ||
|
||
GoPass is a simple password manager written in Go. It is inspired by [Pass](https://www.passwordstore.org/), but is not compatible with it for the storage layer. | ||
|
||
Cli commands are as compatible as possible (about 90%), to preserve user experience | ||
|
||
| Feature | GoPass | Pass | | ||
| --- | --- | --- | | ||
| Storage | Plugin backend | Encrypted files | | ||
| Encryption | ChaCha20-Poly1305 | GPG | | ||
| Encryption key | Yes | No | | ||
| Encryption value | Yes | Yes | | ||
| Password generation | Yes | Yes | | ||
| Writed in | Go | Shell | | ||
|
||
### Storage | ||
|
||
* `file` - stores data in a tree structure of keys. Each file is an independent key. | ||
|
||
## Security | ||
|
||
GoPass uses the ChaCha20-Poly1305 algorithm for encryption. The system represents itself as a key-value store. | ||
|
||
Encryption and decryption occurs on the cli side, which allows you to protect data during transmission and storage. | ||
|
||
The key and values are encrypted in a special way. The key is encrypted using a hash from the correct phrase. The values are encrypted using a hash of the key and passphrase combination, which reduces the ability for an attacker to track key movements. |