Password Management: Self-Hosted, Layered Security
A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateEssays, guides, and field notes on technology, self-reliance, infrastructure, and the art of keeping options open.

A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateKeep the OpenPGP primary private key offline, use subkeys for daily operations, and test recovery before removing any key.
ExpertUse a hardware token for daily OpenPGP operations, preserve a tested key backup, and plan account recovery before losing the device.
ExpertA balance on an exchange is a promise to repay you—not assets held in your own wallet. A seed phrase is a secret. Confusing the two is how “not your keys” stops being a slogan and becomes a lesson.
ExpertPrivate, confidential, and public are walls, not moods. Whatever you give a third party becomes a tool that can be turned on you.
DiscoveryNot a life without dependencies. A life where you understand them, can recover when one fails, and can leave when the terms change.
DiscoveryIdentify the cost of replacing an important service, test an alternative, and keep the recovery instructions current.
Discovery