Which password manager to use?

[yonder@sh.itjust.works]

I'm not completely sure, but doesn't Bitwarden encrypt all data before it reaches the server? That means the server implementation is a bit less important. I guess you probably don't want to be leaking even encrypted databases though since there is a chance they could be cracked.

[ataridump@lemmy.world]

3rded moving from LastPass to Bitwarden and never looking back. I got out when LogMeIn got in.

[toastal@lemmy.ml]

One of the big flaws of snapshot-based VCSs like get is the patch order mattering—which causes conflicts. I would love to see an alternative built on Darcs or Pijul with their Patch Theory-based VCS system that does not have the flaws Git does.

[arkhive@lemmy.blahaj.zone]

Yeah agreed. I borked my repo a couple times and needed to rollback changes, re-sync everything, and resubmit changes. It was a bit scary, but that’s also kind of the beauty of the system, is it’s just files in a folder. I could move the conflicting files out, do a push/pull and then move the files back in and push. The biggest part is getting in the habit of doing a pull before I make any local changes on a device.

I haven’t heard of the tools you mentioned, but you’ve got me curious, so I’ll definitely be looking into them and a potential fix. I’m sure I could automate things with some simple scripting, but until I make my final move off iOS I’m sort of stuck with the clunky Unix Pass app on that OS which causes most of my issues.

Presumably you could just target the passwordstore folder with any version control, Unix Pass just has some git interaction built in.

[gayhitler@lemmy.ml]

There’s a lot of arguments for one solution or the other based on security or privacy, but let me present a different scenario:

Imagine you’re in a natural disaster. Your home based self hosted server is down because of a general rolling network outage or just irrecoverably destroyed. Your offsite on the other side of the county is in a similar state. Can your cloud hosted backup be accessed at generic, public computer in a shelter or public building?

Bitwarden can. It has specific instructions for doing so as safely as possible.

[irotsoma@lemmy.blahaj.zone]

Selfhosted VaultWarden with Bitwarden browser apps and KeyGuard on my phone, which I like better than the Bitwarden app.

[jjlinux@lemmy.ml]

I used to be a rabid advocate of self hosting password managers, and was switching between Vaultwarden and KeepassXC every few months. But Proton offered a lifetime subscription to Proton Pass with unlimited Simple login aliases, and I bought it now use this exclusively.

[lightnsfw@reddthat.com]

Big fan of Keeppass + syncing program of choice. It has served me well for years.

[bingbong@sh.itjust.works]

Agreed. The experience is so easy and well integrated that it has been trivial to get my whole family on it. Being open source would be very nice though. That lack of transparency due to closed source is my only real gripe with it.

[kn33@lemmy.world]

They are closed source, but their white papers are very good

[notarobot@lemm.ee]

Correct me if I'm wrong: if something happens to your vaultwarden instance, aren't you at risk of losing everything? I do use bitwarden, but I could never self host it. Too important. ID rather use keepass with syncthing so that more than one of my devices have my passwords

[ocassionallyaduck@lemmy.world]

This is the way.

[thequickben@lemm.ee]

Most here won’t like this answer. 1Password.

I’ve used it for years and it just works well for me. Finally convinced my spouse to also use it a couple of years ago. Switching is not an option since it took years of convincing to make that happen.

[seasm0ke@lemmy.world]

Keepersecurity is supposedly zero trust and was recommended by cybersec professionals at work but havent seen it here.

[trk@aussie.zone]

1Password is the only one I found that I can share with the family, syncs changes practically instantly, and actually detects login fields on every platform I use it on (Android, Windows, Linux).

[raf802@lemmy.world]

I also self host Vault Warden.
I have my vault automatically exported to Google Drive as an encrypted copy. So worst case I can download from there, and import it to a new password manager or another Bitwarden instance if my server borks.

[anon@lemmus.org]

I've been using Bitwarden for years now. Their free tier is amazing, they're rarely down, and it's open source with extensions and apps for every platform.

I tried Proton Pass for a minute while Bitwarden was offline, but quickly ran back to Bitwarden. Proton's extension kept logging out for some reason. I didn't care enough to troubleshoot it.

[grapinosubmarino@lemmy.world]

Have been using it for 2+ years with 3 devices, no problem

[notarobot@lemm.ee]

Since I started using a password manager, I've basically forgoten every one of my other passwords. I wouldn't be able to log in to my drive

[raf802@lemmy.world]

Same here. But the bitwarden apps have a local copy of the vault. So you can always prevent them from syncing and use it to get the password. Assuming you have your phone still.

You can always have an offsite copy of the vault on a HDD somewhere. It'll be outdated, but at least it'll have the Google account.