[pass] [PATCH] Add support for displaying QR codes.

George Angelopoulos george at usermod.net
Fri Jun 20 22:01:36 CEST 2014


2048 bit private key is too big for a qrcode.
But even if it weren't, I don't see what the advantage is. Your key
still gets decrypted on the device, even if only for a short time.
So you could do the reverse and just keep the encrypted priv key on the
device.
If you trust the device, keep the key on it.
If you don't trust the device, don't stick your key in it!

On 06/20/2014 10:52 PM, Santiago Borrazás wrote:
> Maybe this is not the best place to discuss this, but is it possible
> to put your private key into a qr code? This could make pass tool
> friendly across devices.
>
> I was thinking to put all my encrypted
> passwords in a public github repo and be able to access to my
> passwords from any device passing my private key from a qr code and then putting
> my password to decrypt the private key.
>
> I would like to hear from security people if this it's viable or is
> the worst idea ever.
>
> On Fri, Jun 20, 2014 at 11:12 AM, George Angelopoulos
> <george at usermod.net> wrote:
>



More information about the Password-Store mailing list