Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there a good enough service I could run on my own home (Linux) server that I could use for storing/accessing/synchronizing passwords so they could be available for me from multiple computers/places?

I'm thinking of something like Xmarks BYOS or Firefox weave but that would not be only for browser passwords, but passwords in general? A place where I could put my SSH, FTP, OS, etc. passwords? Maybe something like KeePassX but synchronizable?

And that in the same time, all these passwords are on my own server instead of being somewhere in the cloud? Standalone service, webapp service, doesn't matter...

Suggestions?

share|improve this question
    
@pootzko, not at all - this is not (yet ;) ) a dictatorship, there are 2 other mods, Meta site and chat room for discussion... I removed the tags based on discussions that were had previously, and according to my understanding of the tags and reading of the question. If you ever disagree with anything any of the mods do here - you definitely have ample recourse. If you think our ideas re tagging is wrong, join the discussion! The only thing I'm determined, is to keep the site orderly and useful for everyone. Then again, I may make mistakes, and please let me/us know when we do. –  AviD Jan 16 '11 at 11:59
    
@AviD - it's good, thnx =) –  pootzko Jan 16 '11 at 22:38
    
OK so I use Sticky Password (www.stickypassword.com) - they are offline for desktop, which is my preferred method. –  user21973 Mar 14 '13 at 9:43

8 Answers 8

KeePass Password Safe is an open source solution you may want to check out. It is mainly designed for Windows but it can be ran from a Linux box, details here.

share|improve this answer
2  
-1 The OP is specifically looking for a solution that is "synchronizable", and he specifically said not kepassx, which was/is a port of KeePass. –  Josh Brower Jan 16 '11 at 18:52
1  
@Josh KeePass is "synchronizable" it also has some additional plugins to cover other sync/back-up scenarios. –  oleksii Jan 2 '12 at 21:13

I don't know any tool, but you can save your passwords in text file and encrypt with your private key with pass-phrase so only you can access the file.

share|improve this answer

One thing you could look at would be combining git and a password safe program like KeePass or Password Safe. Gits useful as it works pretty well cross-platform and setting up and synchronizing data with it is pretty easy.

I use git for synchronizing files across multiple systems and it works pretty well. One problem is that you'd need to make your server available from all the locations you want to synchronize from, which will likely mean exposing a service or VPN endpoint on the Internet. Git runs over SSH by default so, if properly configured, it shouldn't pose too much of a risk.

share|improve this answer

I use 1Password on the Mac, it has support for Mac OSX, iPhone, iPad, Windows and Android. It can use a DAV server or Wi-Fi to synchronize between clients.

http://agilewebsolutions.com/onepassword

share|improve this answer

I use a combination of Password Safe, which now has a Linux beta for storing and generating passwords. I combine that with running Dropbox to synchronize the password database across multiple computers for me at the same time. Works like a charm for me.

share|improve this answer
up vote 3 down vote accepted

In the mean time I found out that clipperz community edition can be used as such a thing. It allows you to host it on your own server as a web service. Master password is first encrypted localy and then sent to your server. After you login, you get an interface, and a feature to directly login to other services from clipperz. Also supports one-time passphrases. More info here.

share|improve this answer

(cross posting from another question geared for corporate users)

I've worked with "Secret Server" at http://www.thycotic.com/ . I can provision a single password and share it among as many or as few individuals as I want.

There is an audit trail, and a great search functionality built into the web application. There is also an online "cloud" version of the application that is free for one user.

You can create a new secret for each device you own, and add your own as needed:

Security Choices

All access to this database is secured by local, or Active Directory credentials. If you choose to do so, you can have seamless login (SSO) to access the database for the currently logged in user over Kerberos/NTLM.

Overall, I think this is a good choice for a team, and general repository for corporate security information.

share|improve this answer
1  
Sorry, but a Password manger site that redirects all its HTTPS traffic to HTTP doesn't look trustworthy. –  Hubert Kario Aug 14 '11 at 12:20

I'm the co-founder of Clipperz and I just would like to add a few things about Clipperz Community Edition:

  1. It can be installed on multiple backends: PHP/MySQL, Python/AppEngine, ...
  2. Its interface and graphics will soon be upgraded to match the "gamma" version of Clipperz (https://www.clipperz.com/gamma)
  3. AGPL licensed

Feel free to contact me for any further information and support.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.