Password Managers
-
-
That's a very clever solution. But it's really convient to create a login in your phone and immediate switch to your laptop and login.
-
-
I think I ran into that exact issue myself when I tried out fedora silverblue. I believe there was a workaround but it was quite involved from what I remember...
-
-
I use Keepass but I recommended Bitwarden to less nerdy family members as it syncs out of the box & does what they need it to do. Sync is simple enough to set up with Keepass & the big plus for me is that it allows storage of files/documents. Last time I checked this was a limited/paid feature on Bitwarden
-
My personal choice right now is KeePassXC (PC) / KeePassDX (Android) + Syncthing
And Aegis (Android) for 2FA codes, with a yubikey for services that support FIDO keys.Overall I like this setup because it's decentralized and does not rely on a third party server structure. The only "weak" point would be the Syncthing relay servers or the Tailscale VPN that I use, but this goes back to ensuring encryption of the database is adequate with a long password, and using an open source synchronization protocol that ideally has been vetted by a trusted third party (or yourself if you're capable)
I used to use Bitwarden, and I highly recommend it. I really appreciated it's ability to integrate with email aliasing solutions to generate new aliases from within the bitwarden UI itself. However, my main reasons for switching were the following
- I don't have the money to pay for it (uni student)
- I prefer a more self-hosted approach (I will consider using vaultwarden in the future when I have more money)
- I wanted to move away from using a browser extension for password management on desktop. KeePass' auto type feature is really good, and a more secure input method than a browser extension autofill.
The only additional advice I have for both recommendations is that I do not think it advisable to add Totp 2fa information to your password manager even if it supports it. I feel like this should be separate, on a single device, and backed up in ~2 locations (one preferably off site). This is really to avoid problems if a device is compromised and if your password manager is compromised, but this is definitely in the more unlikely category I feel.
My only major issues with keepass are the potential for sync conflicts and the some feature differences between platforms. A centralized server config like vault/bitwarden prevents the sync conflict issues, at the cost of having one point of failure. The feature differences problem isn't too great, but autotype doesn't work on Linux if you install with flatpak, and you can't prevent screen capture of the app on Linux (only on Android and Windows from my understanding)
-
-
I recommend Keepass. It's freeware, is available on all platforms and supports biometrics (fingerprints, etc) on Android devices. It also encrypts the password file on your device, so you can keep a copy of that file on a cloud service without worrying if that service really respects your privacy or not.
-
This is perhaps overkill, but you can also encrypt the contents of your online cloud storage with CryFS / Cryptomater. This is particularly useful if you wish to store sensitive documents (healthcare, finances etc) in a cloud environment in case of catastrophic destruction of property (destroying computers / on site backups of data).
In this case you can also backup your keepass file in this encrypted virtual storage medium, on top of the prexisting encryption of the database itself.
-
For iOS devices the most up to date client is "Strongbox". I don't think it is FOSS, but is compliant with the standard. It's sadly a freemium app, but is quite well made in my testing. It cannot sync with syncthing, but does support several cloud services, its own service (which uses iCloud), and local file transfer over LAN. They also have a version of the app with all network connectivity removed for security (if you prefer)
-
It's so much better since they updated the (IMO) ugly, dated UI design. It looks nice and fresh now. Bitwarden is the MVP.
-
No one has mentioned pwsafe, which was originally created by Bruce Schneier and is still maintained.
-
KeePass + Tresorit
-
Where would one find that?
-
What's up with protonpass? Any pointers?
-
https://github.com/keepassxreboot/keepassxc-browser/issues/1631#issuecomment-2464608760
I think that was the method that worked for me
-
KeepassXC + webdav
-
Vaultwarden. It's FOSS Bitwarden. Host it on your own server/machine
-
Samesies!
One very important word of caution (unfortunately coming from experience): Syncthing, as the name suggests, makes it so the content of one device is the same as that of another device. So, even if you have one device set to only receive data, it means that if you delete a file from the sending device, the receiving device will also delete that file to stay in sync with the sending device. There is a way to use Syncthing as a simple backup storage program (not necessarily the best solution but much better than manually backing up your files every few months and just hoping for the best). But it means that you have to use the advanced folder option "ignoreDelete". I also use the file versioning system, so even if something is automatically deleted by mistake, it's still versioned in a special subfolder and accessible to me.
