what is your Favorite passwords manager and why
what is your Favorite passwords manager and why
My favorite password manager is KeypassDx. I also use proton pass. What do you use and why?
Bitwarden. It is open source, reliable, easy to use, and compatible with everything. The free version has nearly everything, but I have the paid version to support development because $10 per year is very reasonable.
I do regularly export my password vault to KeePassXC as my backup though.
Not open source anymore ..
Does Bitwarden have sharing/family features? I'd like to switch but those are a hard requirement for me
Bitwarden. The UI is about to be updated to something more modern so that's no longer is an issue for most people. It's also open source, so yes.
The 10€ per year as the premium subscription is just unbeatable. You pay less than a euro per month for a reliable and robust password manager. And you don't even need the premium subscription, because almost everything is free. I honestly consider it a donation rather than a subscription.
10 EUR per year is a bit more than half an EUR per month
oh yeah sorry meant less than a euro
Also how I treat it
Bitwarden, i can self host it and it is quite convenient to have official apps for all platforms i use.
Bitwarden idk why I use it but it works fine for me
Self hosted Bitwarden. It has been awesome for three years, never had any problems when switching from windows to Mac and then my phone from android to iPhone.
Better than keeper and last pass. Good synchronization and more options to share passwords or notes with friends compared to Firefox password store.
Mine is 1Password mainly because I really like the way they handle Security by forcing you to use a key that they issue you that we know is very secure because of its length than randomness. It also has the best ui of the ones I have used.
Proton pass.
Used bitwarden for a long time til I lost my 2fa and lost the account. I also lost proton’s 2fa and they helped me get the account back. Been a customer since.
Locally stored KeePass
I specifically use Vaultwarden. Great for syncing and sharing across family
Same here, self hosted on docker. I migrated from KeepassXC and I'm very happy.
Keepass was ok but because I have various devices (Mac, Windows, Android, and iPad) all accessing it, at times it would cause issues. No issues that way with VaultWarden.
If you self-host, do you get TOTP support and sharing, or do you need to also pay for a subscription?
You totally get it and sharing without paying. I encourage you to take a look at it. Super easy to setup with docker and a front end proxy.
Protonpass user here. Their aliasing is just too good to have.
Proton Pass is not the only password manager with email aliasing integration. For example, 1Password integrates with Fastmail aliases, and Bitwarden can be used with multiple services: addy.io, SimpleLogin, Firefox Relay, Fastmail, DuckDuckGo Email Protection, and Forward Email.
While true, none of the other ones are as seamless and easy as what Proton achieves. I've tried multiple other services, and always come back to Proton for exactly this.
This feature is actually cool
I've used 1password for more years I can count on my hands, and am satisfied with it. I share vaults with family members which is extremely handy with my aging parents.
I haven't really tried much else. I see no reason to switch.
I use keepass2android to access my keypassxc database.
Bitwarden since they starded. Didn't need anything more than the free subscription, but I'm thinking of self-hosting my own vaultwarden instance.
Proton
I really enjoy 1Password. Works really well, plenty of storage functionality for all kinds of data. There's watchtower functionality for poor or leaked passwords, or missing 2fa/passkeys too. One of my favorites is the built-in ssh-agent. In my eyes, it's absolutely worth the asking price
One of my favorites is the built-in ssh-agent.
You can accomplish the same thing using Bitwarden, completely for free: https://github.com/joaojacome/bitwarden-ssh-agent
KeePassDx because of Magikeyboard to not have to copy paste in stuff.
Android has password auto-fill by default, and it works with most password managers, including Bitwarden
After using it for two years i just find how magikeyboard works by your comment 🤦♂️
After using it for two years i just find how magikeyboard works by your comment 🤦♂️
keepass because it is simple and local
pass.
It's simple and has frontends for all my usecases. It's so simple, that you can extend it's functionality yourself if you wish.
Synchronizing works by just synchronizing the folder where the data lives, so syncthing, git, dropbox, ftp. Whatever you like.
Do you also use it for TOTP?
pass-otppass-otp can do TOTP as well.
No, it doesn't really make sense for 2fa to have both factors in the same database, I use yubikeys with webauthn.
I'm assuming you use this app to access your passwords on android? https://f-droid.org/en/packages/dev.msfjarvis.aps/
KeePassXC + Keepass2Andriod, keep it all synced using Syncthing. Desktop/Laptop/Phone all have the passwords synchronized, it is super convenient.
I have been doing it this way for years, never had any issues; just starting to investigate using passkeys where I can. So that is a new adventure; I'll see how it goes with my current workflow.
KeePass. It has everything I need and is fully under my own control.
This is why i also like it
Keypass as well. I hate the PC one though, but I still use it.
I use keypass DX on my phone.
How do you sync your database?
I use syncthings.
I do it manually
I keep a database on my OneDrive account
Like a lot of folks, I use and recommend Bitwarden for passwords management. Their Authenticator app is really good for mobile TOTP, too.
I use Firefox' built-in password manager; anything else is a hassle to use tbh
Same, I do however also write all of my password in a notebook, so I don't lose them if anything bad happens.
At work we're using Bitwarden for the group benefits; though I still have KeePassXC running to simplify SSH keys (Windows, naturally) for native & PuTTY.
Personally, I use KeePassXC & KeePass android (currently); and sync'd through GDrive; which is good enough for my needs.
I use proton pass currently.
My life is changing in less than two weeks.
I have an enterprise grade server that I can't run for a variety of home reasons.
When me and the wife... for lack of a better term, escape, our situation, I'll be able to self host. I know its gonna be a struggle, I have things to learn, and that is why I'm so excited.
Hands down, Bitwarden app on phone and in browser. Vaultwarden self hosted. Since I host it at home, I know it's always in my server. The winning thing for me is that Bitwarden Supports Webuathn now, you can use it as it's own webuathn key you authorize to log in with, so basically go the site you want to login with and when it asks for the webuathn, you can either have Bitwarden use the credentials you stored for it or your own biometric or hardware key instead.
With this, I sign into Authentik for my SSO just by clicking one link, and Bitwarden prompts to log in and I click the option. I'm auto logged into my server and no UN/PW passed to it.
I've tested others and nothing quite comes close except for KeepassXC, but for me, it's a matter of personal preference on my side. I've been with Bitwarden since the early days.
Personally I use Enpass.
It's both my password manager, but also the place where I keep track of notes about devices, accounts and software licences.I tried to change over to Bitwarden a few weeks ago, because that is what my office wants us to move to, but the limitations are not really bridgeable for me. Bitwarden seem to me to be very specifically a password manager and not much else.
Yeah im on enpass for quite a few years myself. Both android and pc. Does what it says on the tin.. :)
I notice there aren’t a lot of Dashlane fans. (I use Bitwarden myself.)
Is there something wrong with them?
My brain. A password manager seems like a completely unnecessary single point of failure.
This assumes a) passwords, and b) poor passwords at that.
Passphrases are easy to remember, extremely hard to crack, and easily customisable for every site, and you don't need no fucking password manager to store them.
Though I'll give you this: password managers are not, after all, necessarily single points of failure.
If you need a password manager to manage your passwords you're a much more vulnerable point of failure than your password management bloatware itself.
