# password manager

Published articles for password manager.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Just Culture and Information Security

DevFeed: [Just Culture and Information Security](<https://devfeed.tech/articles/just-culture-and-information-security-36859.md>)

Original publisher: [Read original article](<https://shostack.org/blog/just-culture-and-information-security/>)

Author: Adam

Published: 2018-05-09T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Availability](<https://devfeed.tech/topics/availability.md>)

Tags: [information-security](<https://devfeed.tech/tags/information-security.md>), [password](<https://devfeed.tech/tags/password.md>), [password-manager](<https://devfeed.tech/tags/password-manager.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [patterns](<https://devfeed.tech/tags/patterns.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article reflects on just culture in information security after Twitter disclosed that plain-text passwords had been stored in log files without evidence of access or a known breach. It revisits criticism of password-management systems with centralized storage, arguing that locally distributed storage may avoid more catastrophic failure modes while acknowledging tradeoffs in monitoring, response, upgrades, and availability.

### Source excerpt

[no description provided]

## DIY Portable Secrets Manager With a Raspberry Pi Zero and ARC

DevFeed: [DIY Portable Secrets Manager With a Raspberry Pi Zero and ARC](<https://devfeed.tech/articles/diy-portable-secrets-manager-with-a-raspberry-pi-zero-and-arc-41256.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2017/12/07/DIY-Portable-Secrets-Manager-with-a-RPI-Zero-and-the-ARC-Project/>)

Author: Simone Margaritelli

Published: 2017-12-07T16:42:48Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [SQLite](<https://devfeed.tech/topics/sqlite.md>), [API](<https://devfeed.tech/topics/api.md>), [Go](<https://devfeed.tech/topics/go.md>), [HTML5](<https://devfeed.tech/topics/html5.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Markdown](<https://devfeed.tech/topics/markdown.md>), [ui](<https://devfeed.tech/topics/ui.md>), [Server](<https://devfeed.tech/topics/server.md>)

Tags: [aes](<https://devfeed.tech/tags/aes.md>), [api](<https://devfeed.tech/tags/api.md>), [arc](<https://devfeed.tech/tags/arc.md>), [arcd](<https://devfeed.tech/tags/arcd.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [database](<https://devfeed.tech/tags/database.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [go](<https://devfeed.tech/tags/go.md>), [golang](<https://devfeed.tech/tags/golang.md>), [html5](<https://devfeed.tech/tags/html5.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [markdown](<https://devfeed.tech/tags/markdown.md>), [notes](<https://devfeed.tech/tags/notes.md>), [oss](<https://devfeed.tech/tags/oss.md>), [password-manager](<https://devfeed.tech/tags/password-manager.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [pi](<https://devfeed.tech/tags/pi.md>), [portable-hacking](<https://devfeed.tech/tags/portable-hacking.md>), [project-release](<https://devfeed.tech/tags/project-release.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [terminal](<https://devfeed.tech/tags/terminal.md>)

### AI overview

This tutorial presents ARC, a self-hosted secrets manager designed to store encrypted passwords, notes, and files and synchronize access across devices without relying on cloud hosting or a paid server. It describes a Go REST API server using SQLite and an HTML5/JavaScript browser client, then begins configuring the system on a Raspberry Pi Zero.

### Source excerpt

For the last few days I've been working on a new project which I developed for very specific needs and reasons: I need to store safely (encrypted) my passwords, sensitive files, notes, etc. I need to access them from anywhere, with every possible device ( desktop, mobile, terminal ). I need those objects to be syncronized accros all my devices. I don't want to use "the cloud". I don't want to pay for a server. I don't want to enable port forwarding and host it myself with DynDNS or alikes. So I wrote ARC.

## Threat Modeling Password Managers

DevFeed: [Threat Modeling Password Managers](<https://devfeed.tech/articles/threat-modeling-password-managers-37047.md>)

Original publisher: [Read original article](<https://shostack.org/blog/threat-modeling-password-managers/>)

Author: Adam

Published: 2017-07-17T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>)

Tags: [data](<https://devfeed.tech/tags/data.md>), [dropbox](<https://devfeed.tech/tags/dropbox.md>), [local](<https://devfeed.tech/tags/local.md>), [password](<https://devfeed.tech/tags/password.md>), [password-manager](<https://devfeed.tech/tags/password-manager.md>), [security](<https://devfeed.tech/tags/security.md>), [zero-knowledge](<https://devfeed.tech/tags/zero-knowledge.md>)

### AI overview

This opinion article applies threat modeling to the debate over 1Password's membership and password-storage approach. It compares the risks of local storage with cloud-based storage and discusses trust boundaries, breach assumptions, operational complexity, and zero-knowledge encryption.

### Source excerpt

[no description provided]