PasswortSafe

Allgemeines

Für mich ist immer noch ein Stueck Papier, evtl. geordnet in einem Rolodex die beste und sicherste Art Passwoerter zu speichern.

Passwoerter die allerdings Zugang zu weniger sensiblen Daten erlauben im einem Stueck Software zu speichern macht das Handling etwas besser.

Passwortspeicher gehoeren nicht in die Cloud! 
Wenn ueberhaupt dann entsprechend mit einer Zusatzverschluesselung.

So richtig anfreunden kann ich mich bisher nur mit KeePassXC, Bitwarden und pass (Password Store).

KDEWallet benutze ich nur wenn es unbedingt sein muss. Das Programm zickt bei mir zu oft rum.

pass (Password Store)

zypper in password-store

Evtl. noch password-store-dmenu, QtPass, plasma-pass, ...

Das pass init eine gpg-id verlangt, erst mal einen Sschluessel erzeugen.

gpg --full-generate-key

(9) ECC (sign and encrypt) oder (16) ECC and Kyber (Erlaeuterung siehe unten)

(1) Curve 25519 *default*

chris@worker:~/wordlists> gpg --full-generate-key
gpg (GnuPG) 2.5.5; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please select what kind of key you want:
   (1) RSA and RSA
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
   (9) ECC (sign and encrypt) *default*
  (10) ECC (sign only)
  (14) Existing key from card
  (16) ECC and Kyber
Your selection? 9
Please select which elliptic curve you want:
   (1) Curve 25519 *default*
   (4) NIST P-384
   (6) Brainpool P-256
Your selection? 1
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 0
Key does not expire at all
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: Chris ................
Email address: test@clx.de
Comment: ++++++++
You selected this USER-ID:
    "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: directory '/home/chris/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/chris/.gnupg/openpgp-revocs.d/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.rev'
public and secret key created and signed.
/pre>

Passphrase
Eine sichere GPG-Passphrase schützt Ihren privaten Schlüssel. Sie sollte mindestens 20 bis 25 Zeichen lang sein, aus mehreren unzusammenhängenden Wörtern (Passphrase) bestehen und keine leicht erratbaren persönlichen Daten enthalten. Nutzen Sie zur Erstellung idealerweise einen Passwortmanager wie KeePassXC oder Bitwarden.

 
Links
[Hardware Security Keys]