diff options
Diffstat (limited to 'pwgrep.buetow.org/content/Tutorials.sub/10.Passwords.xml')
| -rw-r--r-- | pwgrep.buetow.org/content/Tutorials.sub/10.Passwords.xml | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/pwgrep.buetow.org/content/Tutorials.sub/10.Passwords.xml b/pwgrep.buetow.org/content/Tutorials.sub/10.Passwords.xml new file mode 100644 index 0000000..c5fe33e --- /dev/null +++ b/pwgrep.buetow.org/content/Tutorials.sub/10.Passwords.xml @@ -0,0 +1,40 @@ +<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?> +<content> + <pagetitle>Tutorial for storing passwords</pagetitle> + <text>First check out pwgrep from git and edit the configuration parameters in its header. Also setup a versioning repository (e.g. svn) for your password database storage (preferable using some encryption for checkout/update operations such as SSL or SSH). Afterwards you may go on with the usage of pwgrep itself:</text> + <text>Please note that the current version of pwgrep is configured to work with git. The rest of this tutorial however should work as with svn.</text> + <text>The database file is divided in several records. Each record begins with its name followed by several lines holding all the secret informations. The (actually very simple) format of the database file is as follows:</text> + <code> +some record name here + after a tabulator some secret informations + more secret informations +another record name here ..... + secret username: foo + secret password is bla + you can write as many secret infos as you wish +. +. +secret stuff + password: hello world + username: mr. universe +. +. + </code> + <text>The database is not stored in plain text. It is encrypted using GnuPG (database.gpg).</text> + <text>I can only search for the record names of a database file. For example if I want to see my secret username and password which is stored in the database.gpg file it will look like this:</text> + <cimg href="?document=images/1.png"/> + <text>After entering the password of my secret GnuPG key I will receive the informations requested:</text> + <cimg href="?document=images/2.png"/> + <text>pwgrep will print out automatically all records matching my search string. Not only the first one it finds.</text> + <text>I can use pwedit for the case I want to add something to the database or just to edit/delete something of the current database:</text> + <cimg href="?document=images/3.png"/> + <cimg href="?document=images/4.png"/> + <text>After editing, pwgrep will automatically wipe all temporally files securely and it will commit the new version into the versioning system (In this case subversion is being used. But others can be configured as well). pwgrep is using Vim (with swapping and backuping disabled) in order to edit the database file. If you want to use a different editor, you should make sure NOT to produce temporally files. If you produce temporally files, at least they should get wiped securely from the hard disk.</text> + <cimg href="?document=images/5.png"/> + <cimg href="?document=images/6.png"/> + <text>If you want to look up your secret ebay stuff, just search for it with</text> + <code> ~/svn/pwgrep$ pwgrep ebay</code> + <text>Since pwgrep v0.5 it's possible to specify the offline option, which causes pwgrep not use versioning at all (usable if there is no connection to the subversion or CVS server available):</text> + <code> ~/svn/pwgrep$ pwgrep -o ebay</code> + <text>All commands support the -o option</text> +</content> |