Android "Password Store" client for pass discontinued

I worry a lot about password managers on mobile. Such as:<p>* if an app has a single developer (keepassium? strongbox?), how much money would it take them to add a back door? 1M USD? 10M USD? Let’s say they are exceptionally honest, and won’t take money. How about threats to their lives or families?<p>* if an app has a small number of engineers with commit access (bitwarden? 1paasword?) could any one of them be compromised by money or threats?<p>* Would password managers from Google&#x2F;apple&#x2F;microsoft fare better because they already face these risks and have controls? Or maybe not?

In the past two days, the official Syncthing Android client has been discontinued, making the use of KeePass harder. Bitwarden has been trying to move away from a fully FOSS system. And now this?

“pass” in this context refers to a GPG-encrypted file based password manager: <a href="https:&#x2F;&#x2F;www.passwordstore.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.passwordstore.org&#x2F;</a> <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Pass_(software)" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Pass_(software)</a> <a href="https:&#x2F;&#x2F;wiki.archlinux.org&#x2F;title&#x2F;Pass" rel="nofollow">https:&#x2F;&#x2F;wiki.archlinux.org&#x2F;title&#x2F;Pass</a>.<p>“pass” itself can be used in many contexts, but is primarily a desktop command-line tool. “Password Store” is the Android client for it.

Shameless plug: A few months ago I wrote a blog post [1] about integrating PasswordStore + GnuPG + TouchID on MacBook, and used that to automate my work VPN (Cisco AnyConnect) auto-connection [2], hence avoiding the need to interact with a very bad UI that is AnyConnect.<p>Hopefully others find it useful.<p>[1]: <a href="https:&#x2F;&#x2F;gurjeet.singh.im&#x2F;blog&#x2F;passwordstore+gnupg+touchid" rel="nofollow">https:&#x2F;&#x2F;gurjeet.singh.im&#x2F;blog&#x2F;passwordstore+gnupg+touchid</a><p>[2]: <a href="https:&#x2F;&#x2F;gurjeet.singh.im&#x2F;blog&#x2F;cisco-anyconnect-vpn-automation-with-touchid-on-macos" rel="nofollow">https:&#x2F;&#x2F;gurjeet.singh.im&#x2F;blog&#x2F;cisco-anyconnect-vpn-automatio...</a>

This seems to happen more and more often, or at least it feels that way to me. FLOSS projects that aren&#x27;t highly critical but very useful are maintained by only one person which loses interest, burns out or simply has other priorities. Sometimes they don&#x27;t even make an announcement like here and just ghost the project. Very sad, even though understandable.

This is actually a better outcome than finding out one day the app have a serious security problem.<p>While i like `pass` and that Android app looked really good, this is just not serious.<p>Because the fact that most people will end up trusting a random app as their password manager because it has 2k star on Github is crazy.<p>If you want to use `pass` on Android you should tinker something with termux .

Dang, this is rough. Pass is imo still the best password manager if you set it up right.<p>Hopefully someone picks this up.

This is such a great application.<p>I feel like it&#x27;s complete already and would be happy if it just continued to exist without much or any maintenance.

Password Store sounds like a cool Unixy idea, but it&#x27;s quite janky in my experience, especially if non-desktop-Unix systems are involved. The Android app was fine; it integrated with a GPG app that was less fine.

That&#x27;s saddening. APS used to be my daily driver once, and later I moved to Bitwarden.

<a href="https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;Android-Password-Store&#x2F;discussions&#x2F;3260">https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;Android-Password-S...</a><p>For a useful discussion

I use `pass` and am sad about this. This whole password thing, by far, is not a solved problem in my book. But thank you for your contributions!

Welp, time to switch to a linux phone.