Password Managers - suggestions?

jppelt

Dear Solus Community, reading the password manager bit in the Preferred Web Browser discussion, made me think. I currently use LastPass but increasingly wonder if it is the best solution. The older I get, the more important open source is and the arguments made for BitWarden by @jrsilvey were pretty strong. Just curious as to how you all manage passwords, especially if you share with family members?

algent

jppelt Before I have been using the password manager from Firefox, but later i was convinced to switch to Bitwarden from this discussion.

brent

jppelt especially if you share with family members? missed that cross-platform reference.

Yer gonna need the cloud then🙂

downhill

jppelt Use KeePassX (actually it's KeePassXC) in the Solus forums. On other Linux distros, it will probably be named KeePassXC. I don't know why the Solus dev(s) decided to name the app KeePassX. KeePassXC is a fork of KeePassX because a group of users tired of the slow development of KeePassX and I have to agree with them.

hrishikesh

I've been using Bitwarden as my password manager for more than a year now. I like it because it's open source, which I believe is necessary for any security related software, it is very straightforward to use, the android app is great, autofill works perfectly, honestly nothing to complain about.

brent

KeepassXC in the Solus repo has never done me wrong. Passwords are stored on your computer NOT the cloud. Needs a browser extension to work automatically.

jppelt

brent The problem with that is that I need to use it across platforms; need a good cloud alternative. Maybe I just need to trim the fat and stop doing certain business off my phone or wife's computer 😅

CorvusRuber

jppelt
The Keepass db can be saved wherever you want on your local machine, if that "wherever" is a cloud folder (Dropbox, Mega, GDrive, Onedrive, $whatever) you are for all intents and purposes cloud synced.

jppelt

algent I should have done a thread search...seems like that discussion has everything I wanted 🙂 Thank you

downhill

CorvusRuber There are also smartphone apps that will enable you to use your database on the go if desired.

Scotty-Trees

My go to for the last 2-3 years has been Bitwarden, of course use whatever password manager suits your needs best. I don't need much, just being able to access Bitwarden on my Linux desktop via flatpak app, access it via my Vivaldi extension, and access it via the Android app has made it super easy for me.

downhill

Scotty-Trees KeePassXC doesn't require using the Flatpak platform. Why use something else that requires another special package when there's already something very usable and suitable in the repos?

[deleted]

i do not trust any password manager, no matter how secure they claim it to be.i prefer traditionalism, write down all my passwords on my personal notebook and keep this notebook inside my locked desk cabinet in my room.

i agree this is tedious, specially when i have to type those long complicated passwords,but i just do it. thats all. 🙂

kaktuspalme

[deleted] What if you loose your notebook, gets stolen or something?

I personally use KeepassXC. I have the database synced with my Nextcloud. I use a private key which isn't anywhere in the cloud as well as a password stored on my hardware key. That's pretty secure in my opinion.

brent

[deleted] I was that way as well until recently. I weighed the pros/cons and I decided to try it. It makes me realize how much I hate remembering! In other words I like it.
Imagine the piece of paper you have your logins and passwords written down on is now just an unassuming digital file in the Documents folder.

codewizard1975

I too use KeePassXC with the file being stored on my local network share I can have both desktop and laptop use it without any issues. I've also seen it available for Windows too which makes it nice for those who dual-boot or run both on separate machines.

George

Bitwarden

[deleted]

brent hmm... 🤔

YuriTheHenrique

I just prefer to use my mind, I have different passwords with different levels of security, some for daily things, some for important private stuff, I don't need to remember the password, just the method I used to create it, with a mix of mathematics and letters and special characters, just using my family, locations, special things in my life... even my wife can't remember my passwords, and I'm always showing her.
Anyway, I don't trust cloud computing, and servers can fail, even home servers can suffer, handbooks are made of paper, and my own computer is not secure enough, hardware fails, Hard disk damage.

brent

YuriTheHenrique Anyway, I don't trust cloud computing, and servers can fail, even home servers can suffer, handbooks are made of paper, and my own computer is not secure enough, hardware fails, Hard disk damage.

^^^^ yep. No to mention cloud hacks.

I also respect your individualized password method, it's cool.
Mine has devovled to:
accounts that don't matter: easy to remember, medium strength passwords
accounts that really matter: pwgen in the cli does all the heavy lifting for me.

RyuKurisu

@YuriTheHenrique I applaud you for having your own relatively secure offline method of storing passwords.

Back to topic; I personal use Bitwarden (and I've even switched to their paid personal plan July 1st) because:

It is open source
They preform annual security checks
You can opt to host it yourself

I got a YubiKey for my birthday, so I can log in with it.

But that's my 2¢

tomscharbach

I use KeePass (the portable executable) on my Windows desktop and laptop, and KeepassXC on my Linux computers. I store the kdbx database locally on each computer, overwriting as needed. The reason I use KeePass on my Windows desktop computer is so I can print the database every few months in a useable format for paper storage. KeePassXC exports but doesn't do so into formats that are easily read from a paper copy. I don't trust online password storage.

brent

tomscharbach I store the kdbx database locally on each computer, overwriting as needed.

At the end of the day, with this KP app, this is how I do it, as well. As long as I back my files up once a week, then this is a good routine for me.