Live data from Hacker News

Show HN: Keycat – A self-hosted end-to-end encrypted password manager

key.cat

21–26 of 26 posts

Re: Show HN: Keycat – A self-hosted end-to-end encrypted password manager

#21
post #9

Earlier quoted context omitted.

If the code is stable, why does it require maintenance at all? I dont think the amount of commits in last 6 months should even be a metric. Issues would be a better place to look for maintenance.

There are multiple issues from over 5 months ago that have no response https://github.com/keydotcat/keycatd/issues

And allegedly, security issues too, including possible SQL injection.

https://github.com/keydotcat/keycatd/issues/2

Re: Show HN: Keycat – A self-hosted end-to-end encrypted password manager

#22
post #9

Earlier quoted context omitted.

There are multiple issues from over 5 months ago that have no response https://github.com/keydotcat/keycatd/issues

And allegedly, security issues too, including possible SQL injection. https://github.com/keydotcat/keycatd/issues/2

Ouch

Re: Show HN: Keycat – A self-hosted end-to-end encrypted password manager

#24
post #19

Earlier quoted context omitted.

I think self-hosting, or using a regular account with BitWarden is the way to go. I just don't think E2E encryption is strong, unless implemented carefully?

I think self-hosting is risky. I trust bitwarden to fix, deploy, remedy, and investigate security fixes better than I can do :)

I agree. That’s why I use normal account. I have had clients need a self hosted solution. I think Bitwarden is good. I haven’t checked the website for their security audit. I’ll check now

Re: Show HN: Keycat – A self-hosted end-to-end encrypted password manager

#25
post #20

Once I created the similar solution for my own needs, and now I'm successfully using it for around 4 years: https://github.com/xonixx/gae-pass-manager Obviously it's much less powerful compared to LastPass and similar services but works for me well, allowing to securely access my passwords from any location and device.

Do you have browser extension/ mobile app? How do you use it conveniently?

Re: Show HN: Keycat – A self-hosted end-to-end encrypted password manager

#26
post #20

Once I created the similar solution for my own needs, and now I'm successfully using it for around 4 years: https://github.com/xonixx/gae-pass-manager Obviously it's much less powerful compared to LastPass and similar services but works for me well, allowing to securely access my passwords from any location and device.

Do you have browser extension/ mobile app? How do you use it conveniently?

I don’t have any of this :(
Post reply on HN