Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What is the best password manager available today?

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 75 posts

Re: Ask HN: What is the best password manager available today?

#21

Post by teaearlgraycold »

hayst4ck wrote: post #7
atmosx wrote: post #4

Earlier quoted context omitted.

This. Hands down. The downside is that is cloud based.

1Password is making choices for the business at the cost of security. Sucking people's password vaults into their cloud is very not cool. Additionally removing the local vault only option is another business first decision. It's only a matter of time before 1Password has a real security problem because the business forces at 1Password appear to be much stronger than the engineering forces.

To be fair to 1p, they’ve got a great track record with cloud security.

Re: Ask HN: What is the best password manager available today?

#22

Post by kennywinker »

Hamuko wrote: post #15

I use Secrets ( https://outercorner.com/secrets-mac/ ) which syncs via iCloud. Definitely not perfect, especially if you're not heavily within the Apple ecosystem, but at least it's native and doesn't require a subscription.

+1 for secrets. Simple, works.

Re: Ask HN: What is the best password manager available today?

#23

Post by mixtur2021 »

hayst4ck wrote: post #7
atmosx wrote: post #4

Earlier quoted context omitted.

This. Hands down. The downside is that is cloud based.

1Password is making choices for the business at the cost of security. Sucking people's password vaults into their cloud is very not cool. Additionally removing the local vault only option is another business first decision. It's only a matter of time before 1Password has a real security problem because the business forces at 1Password appear to be much stronger than the engineering forces.

1Password is E2E encrypted no with decryption/encryption happening only at the edge? If the cloud storage is compromised, that doesn't mean the attacker can read the passwords?

Re: Ask HN: What is the best password manager available today?

#24

Post by autoexec »

mikece wrote: post #2

For cloud-synched across devices: BitWarden. For maximum security (no cloud sync): KeePassXC In both cases an essential feature applies: if you forget your master password you've lost access to your password database.

I've used KeePass for ages and every time another password manager comes up in the headlines it's only ever made me feel more confident about that decision. Zero games, no cloud/other party to be dependent on, and I have total freedom to implement whatever backup/sync methods work best for my situation.

Re: Ask HN: What is the best password manager available today?

#25

Post by mikece »

hayst4ck wrote: post #6
mikece wrote: post #2

For cloud-synched across devices: BitWarden. For maximum security (no cloud sync): KeePassXC In both cases an essential feature applies: if you forget your master password you've lost access to your password database.

KeePass seems to sync via a preferred cloud provider fine.

You can sync a KeePassXC database using a provider like Google Drive/iCloud/Dropbox/etc but that's not a feature of KeePassXC, it's you doing semi-manual cloud synch.

Re: Ask HN: What is the best password manager available today?

#27

Post by mikece »

autoexec wrote: post #24
mikece wrote: post #2

For cloud-synched across devices: BitWarden. For maximum security (no cloud sync): KeePassXC In both cases an essential feature applies: if you forget your master password you've lost access to your password database.

I've used KeePass for ages and every time another password manager comes up in the headlines it's only ever made me feel more confident about that decision. Zero games, no cloud/other party to be dependent on, and I have total freedom to implement whatever backup/sync methods work best for my situation.

KeePass is not KeePassXC. The former is written in .NET, the latter in C++; numerous open source audits have shown that KeePassXC is far and away more secure than KeePass. Not to mention that cross-platform performance for KeePassXC is superior.

Re: Ask HN: What is the best password manager available today?

#28

Post by hayst4ck »

mixtur2021 wrote: post #23
hayst4ck wrote: post #7

Earlier quoted context omitted.

1Password is making choices for the business at the cost of security. Sucking people's password vaults into their cloud is very not cool. Additionally removing the local vault only option is another business first decision. It's only a matter of time before 1Password has a real security problem because the business forces at 1Password appear to be much stronger than the engineering forces.

1Password is E2E encrypted no with decryption/encryption happening only at the edge? If the cloud storage is compromised, that doesn't mean the attacker can read the passwords?

If 1Password controls the storage and the access, that is a different architecture than 1password controlling the access but not the storage.

They gave me the choice, and then they took it away so they could make more money, directly at the cost of security.

They want to add telemetry: https://news.ycombinator.com/item?id=35691383

It's a march of small concessions and after 5 years of marching you find yourself very far away from where you thought you were. "We only collect things that don't matter to you, trust us."

They are taking money: https://news.ycombinator.com/item?id=29993961

That means that that shareholders can make the company choose things that benefit shareholders at the cost of customers. Taking investment is a fundamental change in trust architecture.

I no longer believed that 1password is aligned with me, and alignment is a constant force always acting. Removing local vaults was proof of lack of alignment. Removing local vaults was proof that 1Password will choose money over security. Removing local vaults was proof that that appearing worthy of trust is a lower priority than coercing people into their cloud.

Re: Ask HN: What is the best password manager available today?

#30

Post by DreamFlasher »

mikece wrote: post #2

For cloud-synched across devices: BitWarden. For maximum security (no cloud sync): KeePassXC In both cases an essential feature applies: if you forget your master password you've lost access to your password database.

You could sync the KeePassXC database with Syncthing, to have e2e encrypted sync across devices, fully open source and without servers.
Post reply on HN