Can I use Skate to store passwords?

[DarkblooM-IO]

Is it safe to store passwords or any sensitive data using Skate?

[CovertDuck]

@DarkblooM-IO

For sensitive information and secrets I would rather use pass.
It uses a GPG key for encryption.
Very light and quite handy, I use it on virtually every system I have. :)

https://www.passwordstore.org/

[DarkblooM-IO]

@DarkblooM-IO

For sensitive information and secrets I would rather use pass.
It uses a GPG key for encryption.
Very light and quite handy, I use it on virtually every system I have. :)

https://www.passwordstore.org/

Thank you for your answer. I already use pass daily, I was just curious about the capabilities of Skate :)

[bashbunni]

Hey, I'm just going to convert this to a discussion to keep our backlog clear.

Skate uses Charm cloud's symmetric encryption with SSH keys, so it is quite decent. It's up to you on what level of encryption you're after, but I know others have used it for passwords. Personally I've used it for API keys, but I use a separate password manager with multi-factor login for more precious credentials.

I would also look into your system's "keychain" or "keyring" (depending on your OS) that you can use for secret management in your apps. I'm not sure of your exact use case, but hopefully that helps!

[DarkblooM-IO]

Noted, thank you!

[meowgorithm]

@DarkblooM-IO: this is actually no longer the case with regard to Charm Cloud. Please see my answer below.

[meowgorithm]

Hey, @DarkblooM-IO! Actually Charm Cloud was sunset a few months back. The current version of skate stores files locally with no encryption. If security is a concern, I would recommend pass or passage.

[CovertDuck]

@DarkblooM-IO
You could always encrypt a value using tools like ⁠age or ⁠openssl with a GPG key or passphrase. However, it would probably be more beneficial to learn an application specifically designed for storing secrets if you're going to spend that much effort to make skate work for secrets.

@meowgorithm
I do remember forking Charm Cloud (charm-and-friends/charm) and trying to maintain it. But I doubt I will make significant progress if I am to always have 100 personal projects ongoing at all times...