I want to set up a password management system on a home machine running Debian, and for this I'm considering only non-proprietary, open source password-managers available through Debian1.
I'd like to make the master password, or rather, passphrase, to the password-managing application very long2. In fact, I want to make it much longer than I'd want to have to type every single time I need access to the password database (which is usually several times per login session).
Is there some way to limit the number of times I need to type the long passphrase to just once per login session?
I'm thinking of an "agent" application analogous to ssh-agent
, but one that talks to the password-managing application rather than to the ssh
client. IOW, I want to be able to delegate to this agent application the authentication requests from the password-managing app every time I need access to its database (i.e., not only when I'm required to respond to an authentication challenge from some remote sshd
).
1I know of two such packages, keepassx
and pass
; please let me know of any others.
2As I understand it, all password-managing applications require typing a master password to gain access to the password store. A risk inherent in such a scheme is that, if the master password gets cracked, then the attacker gains a stash of passwords with one blow. Therefore, it is essential that the master password be as secure as possible, and hence the long passphrase business.
pass
from debian that allow you to manage password with agit
repository see this