Password Management: Self-Hosted, Layered Security
A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateThe ability to adapt when the plan stops working. Recovery as an ordinary practice.

A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateUse a hardware token for daily OpenPGP operations, preserve a tested key backup, and plan account recovery before losing the device.
ExpertA balance on an exchange is a promise to repay you—not assets held in your own wallet. A seed phrase is a secret. Confusing the two is how “not your keys” stops being a slogan and becomes a lesson.
ExpertNot a life without dependencies. A life where you understand them, can recover when one fails, and can leave when the terms change.
DiscoveryIdentify the cost of replacing an important service, test an alternative, and keep the recovery instructions current.
Discovery