Just use KeePass.

[@KatzRool]

I've used KeePass for nearly a decade and had never once considered KeeP ass until the moment you said "and also yeah, the name is really funny".

[@tugrulserhat]

makes sense. it keeps your ass safe :D

[@duser]

Here is a tip for using Keepass on multiple devices. You'll need to update all the databases across all your devices if you make new passwords or update existing ones; this is a pain to do usually but there is a way. Set up syncthing and learn how to use it (documentation is really good). Syncthing basically allows you to sync entire folders across your devices as long as they are on the same network as each other. It will automatically search for changes to the file/folder and automatically upload them to your other devices. Now what if someone intercepts your database through Syncthing? While however unlikely, it is a possibility. In that case, set up a key file in the keepass settings and save it somewhere safe. This will be your second password and loosing it is like loosing your password so be careful; be sure to keep backups of this file. Now don't ever sync the key file across any cloud storage or wireless tech like syncthing. For maximum trust, always copy the file between devices by physically connecting them together through USB. Once its on the device, you wont ever have to copy it again like the database; it just needs to be there.

[@ARandomTank7]

I've watched a video to setup a sync for my KeePass database between my phone and PC with Syncthing, you can check that video if you want : kzbin.info/www/bejne/oH2amJmDZ5x4i6M

[@climate-moneymakingcampaig305]

Isnt it possible to just copy the data base to my other phone so that the keepass app on my other phone read and use the same passwords in the data base that i copied from my main phone ? Why should i share it thru cloud or syncing ?

[@duser]

@@climate-moneymakingcampaig305 so if you make changes to teh database, those new passwords will be synced across devices

[@otapi]

​@@climate-moneymakingcampaig305That works too, but you need to do that manually every time you update or add a password. Syncthing just makes it automatic.

[@enderpuff.]

@@climate-moneymakingcampaig305 Yes you can do that, and no, syncthing is not a cloud service. Syncthing is a peer to peer, open source solution for syncing data, so the only communication here is between your two devices.

[@steveman9668]

Bitwarden is locally encrypted before being sent out if I remember right, so a server would have a hard time doing anything with it. Still less secure than a local copy, but I usually set it up for relatives because it's more convenient and simple for them to use. I use keepass with syncthing myself.

[@impoppy9145]

if it is encrypted before being sent then, when you login on another device: 1- How do Bitwarden know if you entered the wrong or right password? 2- How do all your passwords gets synced to your new device?

[@steveman9668]

@@impoppy9145 No even slightly secure service actually remembers your password. When you enter your password it generates a hash or something similar out of it and then that gets stored. It's a unique hash that can only be replicated by entering your exact password in, but you can't reverse engineer your password out of it. It's why they always send you an email to reset your password when you forget it instead of telling you what your password is, because they don't (or at least shouldn't) know. As for syncing, the bitwarden servers store an encrypted file with your passwords. That file is encrypted by your local client with your master password and then sent to them. Think of it like locking a safe and then sending it to a bank and then being able to request they send you the safe when you're in a different location. You locked it, only you can unlock it. They just keep it for you and send it out at your request.

[@impoppy9145]

@@steveman9668 Then if you forget your password, they can't reset/change it and everything is lost, right?

[@steveman9668]

@@impoppy9145 If you forget your master password? Yes.

[@impoppy9145]

@@steveman9668 then this might be legit

[@simonmaersk]

KeePass and Syncthing used together provides security and convenience that's unbeatable by any other password manager out there

[@Forty-Juan]

Syncthing is such an underrated program

[@sussycatgirl]

I selfhost bitwarden not because I'm paranoid, but because I'm too stingy to pay for the premium features lol

[@ItsMeFrosty]

You get all the premium features if you selfhost?

[@gavinb8173]

@@ItsMeFrosty i mean it is foss

[@Shenepoy]

it cost 10$ a year

[@AzalofForossa]

@@Shenepoy why pay when you can do it free

[@winterland3253]

It's called KeePass cuz it Keeps your Ass safe

[@totoro1255]

keepass one love since 2010

[@snipzmattio5887]

unix pass is amazing

[@averesenso]

*Types ls* -> *Knows what websites you have an account on* Heh, nothin' personnel kid

[@lazur188]

what i used before keepass was sheets of paper now in my divine wisdom i decided not to order anything in any sensible way, just writing a password here an email there. im still trying to decode this arcane sheet of paper with accounts ranging from minecraft to email accounts ive used for vps services --i had to contact support for the latter and it was very embarrassing--

[@matheusfaria7230]

lmao

[@caucasianafrican1435]

I'm about to embark on that myself

[@AdamS-lo9mr]

as long as the client app is open source, and that you can verify that its not sending unencrypted passwords or backdoor ed passwords then it does not matter what server its getting sent to as long as your master password is strong

[@NoEgg4u]

keepass is amazing. Its user interface is not exactly elegant. It could use some improvement. But it is decent. However, for the main purpose of a password manager, nothing is more secure -- at least nothing that can be verified. keepass's core functionality and features are complete and all top-notch. I do, however, have a question about plug-ins for keepass. Since plug-ins are made by anyone, can they compromise keepass's integrity? Can plug-ins do anything untoward, or make anything unstable, or breach any aspect of keepass's privacy or security? Some plug-ins look enticing. But is there any risk by using them?

[@activelivingchallenger4298]

KeePass has a portable app. Useful because I can't install keepass on my work computer but I can install it on my USB. Students could probably use the portable app too for the library or computer labs.

[@mathisblair2798]

Am I crazy because I just store my passwords in a notebook with paper and pen and I actually keep up with and update it as needed?

[@slushyking7549]

Same

[@ItsMeFrosty]

The issue with that is something could happen with your notebook and all your passwords will be gone.

[@moody_weirdo]

yes

[@SLW27]

Just Use is back?

[@bone-a-lisa]

Ultimately, it's a balancing act. Sure, I can use KeePass if I wanted to be completely and 100% sure my passwords are safe. I have enough knowledge to assess that risk as I see fit. But getting my parents to use it? Yea good luck with that... To me, bitwarden is that balancing act. All their clients and server code are FOSS, so if I really starting to not trust them, I could just run my own server. But it's still accessible enough that I could recommend my parents to use it, and they have a chance of actually being able to lol. I will happily pay the few bucks month it is to support a company that provides that kind of service :)

[@ctank3234]

Glad some said it

[@yogibera6887]

we are loving these

[@greenbird2672]

so true bestie

[@linxbit8984]

i'd switch off bitwarden but i dont have any sort of offsite backups

[@Forty-Juan]

Make a video on syncthing

[@Modmod87]

What about a fucking sheet of paper?

[@Nakla]

Are there any password managers which can autofill without an extension?

[@MichaelJessen]

iCloud Keychain will autofill Safari for you. And Google Password manager will similarly autofill Chrome. Both without a browser extension.

[@theepicduck6922]

Last pass got hacked funnily enough.

[@lonskyg]

just use a piece of paper and a pen.

[@totoro1255]

very secure

[@MehmetKollayan]

vaultvarden ?

[@Vibing2]

KeePass or KeepAss

[@bententen2525]

I use my serebrum part of the brain the store my password, best way guys!!

[@RoboMarchello]

I do use it

[@schwarze3015]

i like your videos.

[@Auguste86]

U should def use keepassxc w syncthing

[@myfavouritecolorisgreen]

++ been using that since a few years and all my passwords are synced between my phone and pc

[@benf101]

I need syncing between phone, home computer, and work computer. I don't think keepass really accommodates my fast-paced computing lifestyle. 🏎

[@tea8217]

You can keep your keepass file in any cloud storage service. I just have mine in a dropbox folder and that automatically syncs it.

[@Drugvigil]

Try syncthing

[@savagligorijevic9261]

what about bitwarden?

[@moody_weirdo]

Bitwarden also caches it’s database locally so you can also access it offline.

[@savagligorijevic9261]

@@moody_weirdo yeah. but keepass is offline, which is more inconvinient.

[@qqqalo]

Just use Vault Warden.

[@qqqalo]

@Spada Yeah. It's a fork of it that you host on your own computer/server. It doesn't have the same risks as having it on a big database of passwords, which get attacked a frequently, since it's just your stuff and even finding your instance in the first place is hard enough. And it comes with all the security aspects of bitwarden, and all the premium features, all for free.

[@AzatskyDungeonMaster]

The comments are wild

[@totallynotbluu]

just use Linux

[@egecelikci]

you talked nonsense about bitwarden and signal

[@Denshi]

At least we can all agree not to use Norton ® password manager.

[@h_oom4114]

just use brain

[@ransacked]

No I don't think I will.

[@laciachan7244]

use keepass and then use google drive, onedrive or dropbox to autosync the data base file to the cloud LMAO

[@qritique]

yes, it is a good solution. Especially if you use a local keyfile.

[@JohnSmith-zl8rz]

why KeePass is fucking ugly? just because is Open Source need to be awful gui ? 1password is so beautiful

[@lerebox]

then use KeePassXC

[@marbens]

Using KeePassXC is recommended over the original KeePass, nowadays.

[@lordolorin2891]

KeePass is defunct. Not developed anymore. Or at least not worth mentioning. The old one from Dominik. KeeepPassing on that one. Ahahaha get it?!? The ONLY one worth mentioning is the fork XC. The torch has passed to KeePassXC as there is 0, and I mean 0 reason to use official old release from Dominik.

[@totoro1255]

Recently original KeePass had vulnerability, and it was fixed. But yes, KeePassXC driven by community is masterpiece.