KeepassXC, Syncthing to sync. KeePass2Android on phone.
Ask HN: How do you manage your passwords in 2023?
91–100 of 179 posts
Re: Ask HN: How do you manage your passwords in 2023?
#92I'm all in on Bitwarden at this point. It's the place where I keep all my credit cards, secure notes and about a 500 logins. A vast majority of these logins have passwords generated by Bitwarden itself. I'm confident even if BW goes down I can still recover my data since the vault works offline too. While the browser extension could use some UX work the mobile apps have been top-notch and sharing passwords with my sp…
Sounds like you're very happy with Bitwarden, and confident that if they go down you wouldn't lose access to your secrets.
Can I ask why the desire to switch to Vaultwarden? I assume if a significant slice of the userbase did this, the project would suffer—so I'm asking this question genuinely as an avid Bitwarden supporter myself.
I hope they don't have to rely solely on VC funding, seems that VCs motives would be precisely orthogonal to my own in terms of privacy and feature roadmap.
Re: Ask HN: How do you manage your passwords in 2023?
#93One of my major goals for 2023 is to migrate as much as feasible from passwords to tokens or at least passkeys. NitroKeys or YubiKeys for that. Process has already begun, but I definitely hope to see that accelerate big time (at long, long last) this year. Feels like there is serious industry momentum from the big players this time, and that cost, UX, support in frameworks to make it easy for non-sec webdevs, may all…
I have over 1,000 logins in Bitwarden. I got a new Yubikey last year and found maybe a dozen sites which support it. I hope this is the year that WebAuthN goes mainstream - but it'll be a long time before a plurality of sites support it.
Ah this is what I wanted to hear about Yubikeys. The dozen site that support it.
It feels like a huge PITA to have two system to login. I'll pass till it becomes more mainstream
Re: Ask HN: How do you manage your passwords in 2023?
#94I exclusively self host vault warden behind a VPN and firewall with a custom domain. Changes are automatically managed and deployed through GitHub CI/CD.
I have wireguard VPN on all my devices tunneled into my server. I also self-host the VPN since vaultwarden runs on a local Docker intranet.
If people are interested, I was going to write a step by step blog.
Less technical, but I also get yubikey and duo 2factor push auth out of the box with Vaultwarden! (Open source rust implementation of Bitwarden)
Re: Ask HN: How do you manage your passwords in 2023?
#95BitWarden meets all those criteria!
Re: Ask HN: How do you manage your passwords in 2023?
#96Earlier quoted context omitted.
You don't need to be a multi-person team or have a lot of security experience to host Bitwarden. I'm very positive Bitwarden won't get hungry for money looking at their revenue models, but there's always Vaultwarden you can self host. It's pretty popular and secure. I'll be deploying soon for myself.
Without a security background, it’s hard to evaluate whether what you are doing is secure or not. You don’t know what you don’t know; unknown unknowns etc
This is a valid point. I feel savvy with a lot of things but this is not an area where I'm willing to take risks.
Re: Ask HN: How do you manage your passwords in 2023?
#97I use Bitwarden and pay for it. I've previously used 1password but stopped when they went to a subscription model.
Re: Ask HN: How do you manage your passwords in 2023?
#98Firefox. It's not perfect especially on Android (I have to manually copy the password instead of it auto-filling) but it's good enough.
Same. It is not perfect but works.
Re: Ask HN: How do you manage your passwords in 2023?
#99I’m using Bitwarden. I was a KeePassX user but I was missing: multiple devices support, sharing selected passwords with family members. Bitwarden solves those.
Re: Ask HN: How do you manage your passwords in 2023?
#100So all these people are posting with likely their normal accounts and announcing their security posture to the world… feels insecure ironically.
I miss having a solution that was locally synced across multi platform.