101–110 of 347 posts
Anyone have a recommendation for a good CLI client that isn't `pass`? (I don't want to deal with GPG)
Does anyone know anything about Dashlane? I had a free commercial account from a previous employer and it seemed nice, other than the popup every time you logged in to an unknown website asking you to save your credentials. I'm pretty sure that was configurable, though. I don't see Dashlane spoken about much in these conversations (I have no affiliation).
The 1Password situation is complicated, and is a lot less sketchy than Bray's summary would lead you to believe. 1Password has not in fact phased out their native applications or required people to use 1Password.com to store passwords (it would be insane for them to do so). There are four issues that I'm currently aware of with 1Password: 1. They've converted from flat to subscription pricing. 2. They're pushing peop…
How do you feel about in-browser password managers--Chrome in particular?
Does anyone know anything about Dashlane? I had a free commercial account from a previous employer and it seemed nice, other than the popup every time you logged in to an unknown website asking you to save your credentials. I'm pretty sure that was configurable, though. I don't see Dashlane spoken about much in these conversations (I have no affiliation).
The 1Password situation is complicated, and is a lot less sketchy than Bray's summary would lead you to believe. 1Password has not in fact phased out their native applications or required people to use 1Password.com to store passwords (it would be insane for them to do so). There are four issues that I'm currently aware of with 1Password: 1. They've converted from flat to subscription pricing. 2. They're pushing peop…
The only cloud based password manager I'm willing to use is Dashlane[1]. It's supposedly "zero knowledge", and although you can never be 100% there isn't some bug waiting around to be exploited, it's a compromise I'm willing to make (the lesser evil). They also have several complementing features like encrypted notes, auto saving receipts, credit cards, batch password changer with quite a few major sites. I'm not aff…
Any password manager recommendations such that people don't need to deal with 1Password's cloud-based storage?
But my biggest fear that I have is; if my laptop was ever pwned in some way, due to some noval 0-day etc - is that everything stored in 1Password could be compromised. But more importantly - the hackers would have an address book of banks, servers, databases etc that I have access to.
I dont know if there is a solution - but I feel it is like putting all your eggs in one basket.
I am not too sure how to do that but would value comments from people who have used open source password managers, or even read the code!
Shall we?
My assumptions for this list of recommended apps is at minimum:
- a single file in a well-known format is stored on a cloud service, and can be read / updated from different devices and platforms
- as this is encryption, we prefer open source code and trusted binary makers
My experience:
I use pwSafe on iOS (binary from some random guy). This backsup to dropbox.
I have a python script based on pypwsafe3 that can read the file on Linux. I have not yet tried BI-directional
I know pwSafe is based on Schneier's windows version, but frankly I have not tried to find the code or validate the binary.
So - is it worth building some kind of knowledge base here?
I've moved from LastPass to KeePass, but the biggest thing I miss from LastPass (other than the better browser integration) is a good CLI client. Lastpass-cli is great, and kpcli just isn't. Anyone have a recommendation for a good CLI client that isn't `pass`? (I don't want to deal with GPG)