Password Management: Self-Hosted, Layered Security
A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateCompetence earned through doing. Understanding, maintaining, and making useful things.

A self-managed password architecture using pass, GnuPG, YubiKey, Git, and an offline LUKS vault, with protection matched to credential sensitivity.
IntermediateKeep the OpenPGP primary private key offline, use subkeys for daily operations, and test recovery before removing any key.
ExpertUse a hardware token for daily OpenPGP operations, preserve a tested key backup, and plan account recovery before losing the device.
Expert