Cyber Security: Secure Passwords on Linux

Explore Linux password security using the Unix Pass password manager, set the master key on a YubiKey, and export keys to hardware for offline protection.

Do not store passwords in a text file; attackers can copy the file after gaining access and quickly access all passwords using automated tools like Hydra.

Avoid software-only solutions on Linux, because if a hacker gains access, they can reuse tools, log keystrokes, brute-force passwords with lists, or access KeePass or encrypted files.

KeePass stores a password database protected by a master password, but keyloggers, malware, and brute force tools like Hydra and John the Ripper can expose all passwords.

Manage credentials with KeePass by storing them in a database, creating entries for websites with usernames and notes, and copying passwords as needed.

Learn to use KeePass with hardware protection via USB or YubiKey in KeePassXC, creating a database with a password and an optional USB key file.

Install pass, the unix password manager, to store, retrieve, and search passwords from the command line across Linux, macOS, and BSD, with distro-specific install commands.

Passwords are stored in a password store directory in your home folder as encrypted files, encrypted with a public key and decrypted with a private key.

Generate a gpg public and private key pair on Linux with RSA and no expiration, protect it with a passphrase, and use the keys to encrypt passwords stored with pass.

Learn to manage Linux passwords with pass: insert, list, search, generate, copy to clipboard, and read encrypted password files, backed by public and private keys with secure backups.

Learn to use the pass command to manage passwords on Linux from the command line, search entries with pass search, copy passwords to the clipboard, and paste them into websites.

Store private keys on a hardware security key, such as a YubiKey, so passwords encrypted with Gypsy stay inaccessible without the key; verify compatibility and test the key status.

Learn to generate signing, encryption, and authentication sub keys with GPG on a YubiKey, choose appropriate key sizes, set no expiry, and back up your genealogy directory.

Learn how to manage a YubiKey on Linux: set or change default pins, then select and write the signature, encryption, and authentication keys to the device for secure authentication.

Learn how to use a YubiKey to sign files with a GPG signature key on Linux, enabling authentication and secure file integrity verification.

Discover how to back up secret keys on multiple YubiKeys, verify keys stored on the YubiKey and the computer, show hidden files, and securely delete secret keys from the computer.

Learn to secure Linux workflows by using a YubiKey to sign files and encrypt a password store, ensuring access requires the hardware key and its PIN.

Explore graphical front ends for pass, like cute pass, which opens your pass store and reveals passwords with a YubiKey, installable via your package manager.

Explore how to boost Linux password security by using hardware devices like Trezor or YubiKey alongside software solutions, setting up GPG with pass, and signing and encrypting with trezor-enabled workflows.