I want to set up a password management system on a home machine running Debian, and for this I'm considering only non-proprietary, open source password-managers available through Debian1.
I'd like to make the master password, or rather, passphrase, to the password-managing application very long2. In fact, I want to make it much longer than I'd want to have to type every single time I need access to the password database (which is usually several times per login session).
Is there some way to limit the number of times I need to type the long passphrase to just once per login session?
I'm thinking of an "agent" application analogous to
ssh-agent, but one that talks to the password-managing application rather than to the
ssh client. IOW, I want to be able to delegate to this agent application the authentication requests from the password-managing app every time I need access to its database (i.e., not only when I'm required to respond to an authentication challenge from some remote
1I know of two such packages,
pass; please let me know of any others.
2As I understand it, all password-managing applications require typing a master password to gain access to the password store. A risk inherent in such a scheme is that, if the master password gets cracked, then the attacker gains a stash of passwords with one blow. Therefore, it is essential that the master password be as secure as possible, and hence the long passphrase business.