Password Management: Self-Hosted, Layered Security
A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateExplore topics / 01
Digital.
Signals, with a way out.
Computing on terms we can understand. Local tools, open formats, and useful networks.
6 essaysAll territories ↗
[OpenPGP - offline primary] Keep the Secret Off the Machine
Keep the OpenPGP primary private key offline, use subkeys for daily operations, and test recovery before removing any key.
Expert
[YubiKey - OpenPGP] A Token Is Not the Secret
Use a hardware token for daily OpenPGP operations, preserve a tested key backup, and plan account recovery before losing the device.
Expert
[Bitcoin - self-custody] Custody Without a Custodian
A balance on an exchange is a promise to repay you—not assets held in your own wallet. A seed phrase is a secret. Confusing the two is how “not your keys” stops being a slogan and becomes a lesson.
Expert
[Data - classification] The Keep Is the Data
Private, confidential, and public are walls, not moods. Whatever you give a third party becomes a tool that can be turned on you.
Discovery
[Lock-in - exit] Dependency Is Not the Enemy. Having No Exit Is.
Identify the cost of replacing an important service, test an alternative, and keep the recovery instructions current.
Discovery