Which password manager to use?
-
If you're on Android I had seen a better UX for synching with the client Keepass2droid than with KeepassXC or KeepassDX.
On iOS maybe try Keepassium.
-
This is faultless for me
-
I do the exact same thing as OP with KeepassDX at work and works pretty nice so far, since I gave KeepassDX the right acces rights on the nextxloud directory.
What diferences have you figured out so far with Keepass2android in comparison ?
-
Easier to setup sync for noobs, however this was years ago maybe it has changed since on DX
-
KeePassXC. Despite a lot of room for improvement, overall it is pretty powerful & you don't have to host a server. You can also sync your password file to cloud storage. With VaultWarden, it will store a cache of your passwords on your phone but you wont' be able to update them away from home unless you also setup port forwarding, dynamic DNS, web server & all that.
-
KeePassXC doesn't have an official client, does it? Also, KeePassDX has a better UI IMO, is updated much more frequently & is on Fdroid.
-
Bitwarden
-
Which one? Or both?
-
I was sure that KeePassXC had an Android client but it seems like my memory tricked me.
I do prefer the overall UX of KeePassDX but when I tried several Android KeePass clients during the pandemic I remember that KePass2Droid had an easier Nextcloud sync setup than what KeePassDX offered. -
Bitwarden.
My recommendation: Don't use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use).
Why? You're not a security personal, and securing your vault isn't your job. You might do a slight mistake that'll lead to the compromise of your vault.The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they'll probably do it better then you.
When it comes to serious matter, I prefer to trust the professionals. -
+1 for Keepass + Syncthing. Free, no cloud, always synced.
-
Good thing the KeepassXC can be used as a 2nd factor authenticator, though it has TOTP only, doesn't offer HOTP.
-
Doesn't the server just hold an encrypted vault? What could go wrong when the server is compromised? Just thinking out loud I don't know the answer
-
Yeah this is me. It's been just perfect for many years now.
-
For native sync, the two good and reputable alternatives are Bitwarden and Proton Pass
-
Yep, that's right. In theory you could share the encrypted DB with the public and not degrade security. (Still don't do that though...)
-
2nding the Bitwarden, absolutely love it. I moved from LastPass years ago and never looked back.
-
Bitwarden is excellent and the paid plan is very reasonable unlike with others.
-
Proton pass if general UX and speed are important to you. Bitwarden if amount of features is important to you
