logoalt Hacker News

thecopy • today at 8:07 AM • 1 reply • view on HN

It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"

In my thinking, this is more secure than plaintext in filesystem


Replies

gregoriol • today at 9:40 AM

If your system is compromised, it doesn't matter what you are using: the attacker will get the password for whatever secure thing you store your secrets in.

➕ show 2 replies