document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2025-01-25 23:11:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4774 from geekpi/master

Browse Source 
translated
This commit is contained in:
geekpi 2016-12-22 13:17:32 +08:00 committed by GitHub
commit a947b0582a
2 changed files with 68 additions and 70 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
sources/tech/20161201 3 open source password managers.md
View File

@ -1,70 +0,0 @@
translating---geekpi
3 open source password managers
============================================================
### Keep your data and accounts safe by using a secure open source password manager to store unique, complex passwords.
![Open source password managers](https://opensource.com/sites/default/files/styles/image-full-size/public/images/life/locks_keys_bridge_paris.png?itok=S4HMI29u)
>Image by : [Jason Baker][1]. [CC BY-SA 4.0][2].
Maintaining complex, unique passwords for each site and service you use is among the most common pieces of advice that security professionals provide to the public every year.
Yet no matter how many times it is said, it seems like a week doesn't go by where a high-profile hacking story hits the news, revealing that users of the service in question more often than not had such _secure_ passwords as "12345" or "password" as the only wall of protection on their account.
Or perhaps a user offers up just enough variation on the classic password selection to get past the minimal rules of the service. Unfortunately, "Pa$$w0rd!" isn't secure in any meaningful way, either. At this point, almost every variation of words and phrases strung together with a few numbers or substitutions is simply too easy for a password cracking tool to make its way through, and the shorter the password, the easier.
The best passwords are long, random or pseudo-random combinations of every possible character allowed, with a different password for each unique use. But how could a normal person remember the hundreds or even thousands of individual passwords associated with each account they've ever created? The short answer is: they can't. And don't even think about writing a password down in plain text, whether in the physical world or the digital.
Perhaps the easiest way to keep track of these complex, unique passwords is with a password manager, which provides easy access to strong encryption. While proprietary commercial solutions like LastPass are popular, there are several open source solutions as well. And with passwords, being able to audit the source code of your password manager is especially important, as it helps ensure that your passwords are encrypted properly and are not vulnerable to backdoors.
So without further ado, here are a few open source password managers we hope you will consider.
### KeePass
[KeePass][3] is a GPLv2-licensed password manager, primarily designed for Windows but also running elsewhere. KeePass offers multiple strong encryption options, easy exports, multiple user keys, advanced searching features, and more. Designed for desktop use, there are plugins that allow direct use from your web browser, and it can run from a USB stick if you'd prefer to physically carry your passwords from machine to machine. More on KeePass can be found in this [past article][4] from Ricardo Frydman.
[KeePassX][5], which started as a Linux port of KeePass, is another project you may consider. KeyPassX is compatible with KeePass 2 password files, and has also been ported to run on different operating systems. In fact, the list of [unofficial releases][6] of KeePass covers ports to just about every system in common use.
### Padlock
[Padlock][7] is a very new entrant into the world of open source password managers. Currently available for Windows, Mac, iOS, and Android, with a Linux client in the works, Padlock is designed as a "minimalist" password manager. Its [source][8] is available on GitHub under a [GPLv3][9] license. The project is also developing a [cloud backend][10], also open source, which will be a welcomed addition to anyone tired of managing password files or setting up syncing across multiple computers.
### Passbolt
[Passbolt][11] is another relatively new option, with plugins available for Firefox and Chrome and mobile and command-line options on the way. Based on OpenPGP, you can check out its online [demo][12] which shows off some of the features (you'll need to install the plugin for your browser, though). Licensed under the [GPL Affero version 3 license][13], you can check out the source code on [GitHub][14] or view the project's [roadmap][15] for a list of current features and more on what is planned.
* * *
Using a password manager that you trust alongside complex passwords is not a substitute for taking other security precautions, nor is it foolproof. But for many users, it can be an important part of keeping your digital life secured. These definitely aren't the only options out there. There are some older options, like [Clipperz][16] and [Password Safe][17], and web-based tools like [RatticDB][18] that I would be interested to try out. Which open source password manager do you use, and why?
--------------------------------------------------------------------------------
via: https://opensource.com/article/16/12/password-managers
作者：[Jason Baker ][a]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 组织编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]:https://opensource.com/users/jason-baker
[1]:https://opensource.com/users/jason-baker
[2]:https://creativecommons.org/licenses/by-sa/4.0/
[3]:http://keepass.info/
[4]:https://opensource.com/business/16/5/keepassx
[5]:https://www.keepassx.org/
[6]:http://keepass.info/download.html
[7]:https://padlock.io/
[8]:https://github.com/MaKleSoft/padlock
[9]:https://github.com/MaKleSoft/padlock/blob/master/LICENSE
[10]:https://github.com/maklesoft/padlock-cloud
[11]:https://www.passbolt.com/
[12]:https://demo.passbolt.com/auth/login
[13]:https://github.com/passbolt/passbolt_browser_extension/blob/master/LICENCE
[14]:https://github.com/passbolt
[15]:https://www.passbolt.com/roadmap
[16]:https://clipperz.is/
[17]:https://pwsafe.org/
[18]:http://rattic.org/

68
translated/tech/20161201 3 open source password managers.md Normal file
View File

@ -0,0 +1,68 @@
3款开源的密码管理器
============================================================
### 使用一款安全开源的密码管理器来储存唯一、复杂的密码来保护你数据及账户的安全。
![Open source password managers](https://opensource.com/sites/default/files/styles/image-full-size/public/images/life/locks_keys_bridge_paris.png?itok=S4HMI29u)
>图片来自 : [Jason Baker][1]. [CC BY-SA 4.0][2].
为你使用的每个站点和服务维护一份复杂、唯一的密码是安全专家每年给公众最常提的建议。
获取用户在服务要求的最低规则下提供了不同于经典密码的变化。但不幸的是，“Pa$$w0rd!”也不是真正意义上的安全。在这点上，大多数单词与短语及数字的组合或替换对密码破解工具而言都太容易破解了，密码越短越简单。
最棒的密码应该是长的，任何允许的字符的随机或者伪随机组合，每个使用场景用不同的密码。但对一个普通人而言怎么能记住上百甚至上千个他们创建的独立的账户密码呢？简短的答案是：他们不能。甚至不管是在现实世界或者数码世界不能写下一个密码。
或许最简单保存追踪这些复杂、唯一密码的方法是使用密码管理器，它提供了简单的方式来访问这些强密码。虽然像LastPass这样商业解决方案很受欢迎，但是还有一些开源方案。另外对于密码，可以审计你的密码管理器的源码也是很重要的，因为它可以确保你的密码被正确地加密，并且没有后门。
所以不用多说，下面有几款你可以考虑的密码管理器。
### KeePass
[KeePass][3]是一个GPLv2授权的密码管理器，主要设计用于Windows但是同样可以在其他地方运行。KeePass提供多个强加密选项、简单的导出、多个用户密钥、高级搜索特性等等。设计用于桌面，有几个插件运行在浏览器中直接使用，并且如果你想要在不同的机器间随身携带你的密码，它可以从U盘中运行。想要了解更多KeePass信息，你可以从在Ricardo Frydman写的[过去的文章][4]中找到。
[KeePassX][5]，是KeePass的Linux移植版本，是另一个你可以考虑的项目。KeePassX与KeePass 2密码文件兼容，并且已经被移植到不同的操作系统上。事实上，KeePass的[非官方发布][6]列表覆盖了日常使用的所有系统。
### Padlock
[Padlock][7]是一个新进的开源密码管理器。目前在Windows、iOS、Android上可用，Linux版本正在开发中，Padlock被设计成为了一个“极简主义”的密码管理器。它的[源码][8]以[GPLv3][9]授权的形式发布在Github上。项目同样也正在开发一个[云后端][10]，同样是开源的，这对那些厌烦了管理密码文件或者在多台电脑间设置同步的人而言是一个很好的补充。
### Passbolt
[Passbolt][11]是另一个相对较新的选择，它有Firefox和Chrome的插件，支持移动设备还有正在开发的命令行。它基于OpenPGP，你可以查看在线的一些功能[演示][12]（虽然这需要你安装浏览器插件）。用[AGPLv3授权][13]发布，你可以在[Github][14]上查看它的源码或者浏览一下项目的[路线图][15]来了解下目前和将来计划的功能。
* * *
使用一款你信任的密码管理器以及用复杂的密码并不能代替其他安全预防措施，它也不是万无一失的。但是对于许多用户而言，它是让你的数字生活保持安全的很重要的一部分。这些的确不是唯一的选择。还有一些更老的选择，比如[Clipperz][16]和[Password Safe][17]，还有我有兴趣想尝试一下的基于web的工具[RatticDB][18]。你会使用哪款密码管理器？为什么呢？
--------------------------------------------------------------------------------
via: https://opensource.com/article/16/12/password-managers
作者：[Jason Baker ][a]
译者：[geekpi](https://github.com/geekpi)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 组织编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]:https://opensource.com/users/jason-baker
[1]:https://opensource.com/users/jason-baker
[2]:https://creativecommons.org/licenses/by-sa/4.0/
[3]:http://keepass.info/
[4]:https://opensource.com/business/16/5/keepassx
[5]:https://www.keepassx.org/
[6]:http://keepass.info/download.html
[7]:https://padlock.io/
[8]:https://github.com/MaKleSoft/padlock
[9]:https://github.com/MaKleSoft/padlock/blob/master/LICENSE
[10]:https://github.com/maklesoft/padlock-cloud
[11]:https://www.passbolt.com/
[12]:https://demo.passbolt.com/auth/login
[13]:https://github.com/passbolt/passbolt_browser_extension/blob/master/LICENCE
[14]:https://github.com/passbolt
[15]:https://www.passbolt.com/roadmap
[16]:https://clipperz.is/
[17]:https://pwsafe.org/
[18]:http://rattic.org/