OS2 World Community Forum

OS/2, eCS & ArcaOS - Technical => Applications => Topic started by: Neil Waldhauer on May 31, 2022, 06:02:47 pm

Title: Password manager
Post by: Neil Waldhauer on May 31, 2022, 06:02:47 pm
Password managers are a good thing. But now we need them to work on our computers, phones, tablets, watches, etc. Is there any solution for ArcaOS users?

Some password managers are open-source? Can any of them be (easily) ported?
Title: Re: Password manager
Post by: Joop on May 31, 2022, 06:39:45 pm
In Java are some available which will work with Java 6;
http://sourceforge.net/projects/upm/files/upm-1.14/upm-1.14.tar.gz/download
https://github.com/gaborbata/jpass/releases/download/v0.1.14a/jpass-0.1.14-dist.zip
https://sourceforge.net/projects/mypasswords7/files/binary/2.95/MyPasswords_2_95.zip/download

These where available on my site which is offline. UPM is at version 1.15.1, does work in Java 11, don't know if that's also true for Java 6.

I didn't test others, but there are more. You need latest version of Java available for OS/2 and that's Java 6.
As I'm migrated to a RaspberryPi for the time being, most of the tested programs runs also in Java 11 which is not available for OS/2 yet, but its good to know that you can migrate your programs and data to a complete other platform and it will work there too without changing anything. Of course you setup file for running is somewhat different because "batch" commands do differ between platforms. But that's it.

I don't know anything about QT, but it seems not that portable as Java. As far as  I know you have to recompile a program for your platform with QT.
I have no knowledge of programs which are "native" for OS/2 because I wanted a true portable system because I do have more platforms.

Regards,
Joop
Title: Re: Password manager
Post by: Andi B. on May 31, 2022, 07:46:15 pm
We have keepassx as rpm too.

But if you want to synchronize with Seamonkey, KaiOS, Android, iOS or... I'm out of ideas. Except doing it by hand/cvs. I've done Seamonkey --> keepassx a while ago. I think I've copied my OS/2 SM Profile to Win and used some passwordexporter addon. Maybe I needed Keepass (without X) on Win too to transfer it to a keepassx compatible database.
Title: Re: Password manager
Post by: Neil Waldhauer on May 31, 2022, 10:24:40 pm
Keepass sounds like it would work. Where can I get it (just looked on NetLabs...)

All Keepass and keepassx and keepass* claim to be interoperable. Keepass touch is in the Apple App store.
Title: Re: Password manager
Post by: Dave Yeo on June 01, 2022, 01:20:24 am
Keepass sounds like it would work. Where can I get it (just looked on NetLabs...)

All Keepass and keepassx and keepass* claim to be interoperable. Keepass touch is in the Apple App store.

"Yum install keepassx" should do it. As you say, there is a bunch of keepass* programs that have been forked.  On my phone I have keepass2android and it suggested keeping the database file on Google Drive to be accessible everywhere. The database is encrypted so doesn't matter if it is found by others.
Title: Re: Password manager
Post by: Neil Waldhauer on June 01, 2022, 03:59:39 am
Thanks. I know you always have Netlabs-exp enabled, so I looked there. I'm running KeyPassX for OS/2 now.

I wish there was an easy way to import a password list.
Title: Re: Password manager
Post by: Dave Yeo on June 01, 2022, 04:21:31 am
Sorry, I forgot that it was in Netlabs-exp. This partition is Netlabs-rel usually.
I originally exported my LastPass passwords and imported them into Keepassx. Looking, I can't see an import thing. OK, IIRC, I did it in Linux with a different Keepass* program then exported the database to OS/2 and Android.
Title: Re: Password manager
Post by: Neil Waldhauer on June 01, 2022, 06:14:43 pm
I got my passwords from Firefox45 to Strongbox on IOS, but keepassx on ArcaOS won't import the database because it says "Unsupported KeePass database version".

Wikipedia says https://en.wikipedia.org/wiki/KeePassX (https://en.wikipedia.org/wiki/KeePassX)

As of December 2021, KeePassX is no longer actively maintained. [4]

There is a community fork of KeePassX, called KeePassXC.
Title: Re: Password manager
Post by: Dave Yeo on June 02, 2022, 01:41:07 am
I'll see if it builds. It's QT5.
Title: Re: Password manager
Post by: Dave Yeo on June 02, 2022, 06:23:37 am
I'll see if it builds. It's QT5.

Unluckily too many dependencies that we don't have. If I get bored enough I might revisit but the first dependency is a Ruby script.
Title: Re: Password manager
Post by: andreas on June 02, 2022, 02:50:40 pm
I use eAccounts from Frank Wochatz: https://ecsoft2.org/eaccounts-account-manager
It works fine for me.
Title: Re: Password manager
Post by: Andreas Schnellbacher on June 02, 2022, 03:31:55 pm
I got my passwords from Firefox45 to Strongbox on IOS, but keepassx on ArcaOS won't import the database because it says "Unsupported KeePass database version".

There is a community fork of KeePassX, called KeePassXC.
Months ago KeePassXC was recommended to me. It looks promising. After that, I discovered Silvan's port of KeePassX, which almost looks the same. But I haven't tried it so far.

I guess the transition from the KeePassX database to KeePassXC would have worked without problems, and maybe vice versa, too. (Yes, that's not the problem, but after the first read I thought that applies to your case.)
Title: Re: Password manager
Post by: Andreas Schnellbacher on June 02, 2022, 03:38:49 pm
I use eAccounts from Frank Wochatz: https://ecsoft2.org/eaccounts-account-manager
For a password manager it's important that its database can be copied/shared to/with other devices and OSs. That's the point Neil made also in his first post.
Title: Re: Password manager
Post by: Joop on June 03, 2022, 12:12:00 pm
I use eAccounts from Frank Wochatz: https://ecsoft2.org/eaccounts-account-manager
For a password manager it's important that its database can be copied/shared to/with other devices and OSs. That's the point Neil made also in his first post.
That's why I use Java, the program stays the same and can be used on every system which supports Java. With QT you have to recompile the source for your system, that's not portable in my mind. Further you have to think very carefully about having passwords in software which make contact with www in some way. Its not safe today, better have a password system which stands as a different program from which you can copy and past the necessary fields. No connection.
Title: Re: Password manager
Post by: Neil Waldhauer on June 03, 2022, 03:56:49 pm
I'm not seeing a Java password manager running on iOS. Running Java means having a supported run-time, so both of my principle platforms are a problem.

I wish OpenJDK had a little more development on our platform. The Java approach is better than Qt, as you say, but we have a pretty up-to-date Qt, but not so much with Java.

I'm sorry KeePassXC can not be compiled on our systems. (looking at the build instructions, I don't actually see Ruby, but I also don't know much about porting)

Having a up-to-date build seems critical for KeePass database compatibility.

Another option is Firefox. Our Firefox45 does save passwords, and can be used as a password manager for Dooble or any other new browser that lacks a password manager. It's a very heavy client for just remembering passwords. Synchronizing used to be a problem, and I haven't tried for a while.

Another possibility is Google password. Without Chrome, it is quite limited, but as long as we can access Google from our platform, it looks possible. I may give it a try. If I can access it from Firefox45, that would be a benefit.
Title: Re: Password manager
Post by: Dave Yeo on June 03, 2022, 04:10:19 pm
I'm sorry KeePassXC can not be compiled on our systems. (looking at the build instructions, I don't actually see Ruby, but I also don't know much about porting)


First part of Build Dependencies from https://github.com/keepassxreboot/keepassxc/blob/develop/INSTALL.md (https://github.com/keepassxreboot/keepassxc/blob/develop/INSTALL.md)

Code: [Select]
The following tools must exist within your PATH:

    make
    cmake (>= 3.3.0)
    g++ (>= 4.7) or clang++ (>= 6.0)
    asciidoctor (>= 2.0)

The asciidoctor is a Ruby script
Title: Re: Password manager
Post by: Joop on June 03, 2022, 07:12:35 pm
I'm not seeing a Java password manager running on iOS. Running Java means having a supported run-time, so both of my principle platforms are a problem.

I wish OpenJDK had a little more development on our platform. The Java approach is better than Qt, as you say, but we have a pretty up-to-date Qt, but not so much with Java.
I am a little disappointed, seems you never tried. The programs summed up in my previous answer are tested on the Java we have, that's version 6 and that's why they had a page on my home page. As far as I know iOS does have also a version with a low version number, certainly it will run there too. I have also tested UPM on my Windows machine and my Raspberry Pi 400 with both Java 11 and it runs there fine too, no problems. So there seems to be a wide spread of Java versions in which the programs run without a problem.

Another option is Firefox. Our Firefox45 does save passwords, and can be used as a password manager for Dooble or any other new browser that lacks a password manager. It's a very heavy client for just remembering passwords. Synchronizing used to be a problem, and I haven't tried for a while.
That's not a wise decision because the FF version seems not proof for malware. Never have your passwords inside a program which can go  online.

Regards,
Joop
Title: Re: Password manager
Post by: Neil Waldhauer on June 04, 2022, 02:36:28 am
I don't know of any Java Runtime for iOS.

On my company server, I run Jetty (a Java web application server). If I knew of one, I could run a server side password manager written in Java (limited to the OS/2 OpenJDK port)

I suppose that would not be very secure, either.
Title: Re: Password manager
Post by: Joop on June 04, 2022, 09:17:56 pm
I don't know of any Java Runtime for iOS.

On my company server, I run Jetty (a Java web application server). If I knew of one, I could run a server side password manager written in Java (limited to the OS/2 OpenJDK port)

I suppose that would not be very secure, either.
There are some very nice search engines available, I use DuckDuckGo. Just type in "iOS Java" and you have some reading to  do.

Regards,
Joop
Title: Re: Password manager
Post by: Dave Yeo on June 05, 2022, 06:43:09 am
https://app.keeweb.info/ (https://app.keeweb.info/) seems to run fine in Dooble and opened my keepassx database fine.
Title: Re: Password manager
Post by: Neil Waldhauer on June 05, 2022, 03:30:45 pm
I don't know of any Java Runtime for iOS.

On my company server, I run Jetty (a Java web application server). If I knew of one, I could run a server side password manager written in Java (limited to the OS/2 OpenJDK port)

I suppose that would not be very secure, either.
There are some very nice search engines available, I use DuckDuckGo. Just type in "iOS Java" and you have some reading to  do.

Regards,
Joop

I'm not interested in jail-breaking any device. There isn't a Java solution on iOS. Any developer can use XCode tools to make a Java app run native on iOS, but the effort is not free and the result is not portable to Java JVM.

Dave's suggestion of https://app.keeweb.info/ is working here. I can use it to view my Firefox passwords in Dooble. It's not Firefox45 compatible, but that was never a requirement, just a "nice to have".