Ask HN: Password Manager (2017)

#1

Post by ohmymac » Sat, Oct 28, 2017, 10:51 PM UTC

A handful of years ago I finally started using a pwd manager. Time passed and I am a bit unhappy about how they handle security and what they consider "secure".

This is a very discussed theme and there are plenty of options.

My main idea is to gather what are the best options currently and as a bonus if they fulfill a some requirements like: open source, browser extension, other easy to use solutions to fill browser forms, support integration with 2f apps,..

Let me know in the comments what you think is the best solution at the moment.

Re: Ask HN: Password Manager (2017)

#2

Post by finchisko » Sat, Oct 28, 2017, 10:58 PM UTC

KeepassXC with sync to dropbox or even better to keybase.io KBFS. There is Chrome and Firefox extension. Shameless plug I'm working on new kind of extension https://github.com/mauron85/keepassxc-browser. There is alpha release already, but missing many features. My goal is to make it work in major browser and also with NativeClient version of KeePassXC https://github.com/varjolintu/keepassxc.

Re: Ask HN: Password Manager (2017)

#3

Post by cpburns2009 » Sat, Oct 28, 2017, 11:03 PM UTC

I use KeePassXC for my password manager on Linux which is open source. I can't comment about web browser extensions. KeePass is the Windows version.

Re: Ask HN: Password Manager (2017)

#4

Post by jryan49 » Sat, Oct 28, 2017, 11:15 PM UTC

I host my own ala, pass(https://www.passwordstore.org), and qtpass on windows. It uses gpg encrypted files in a git repo. Pretty sure it's as safe as gpg is.

Re: Ask HN: Password Manager (2017)

#5

Post by alexnewman » Sat, Oct 28, 2017, 11:35 PM UTC

Pass used git and gpg and works on every platform

Re: Ask HN: Password Manager (2017)

#6

Post by QUFB » Sat, Oct 28, 2017, 11:40 PM UTC

alexnewman wrote: post #5

Pass used git and gpg and works on every platform

Android and iPhone too?

Re: Ask HN: Password Manager (2017)

#7

Post by f_allwein » Sat, Oct 28, 2017, 11:55 PM UTC

I use 1Password. Not a security expert, but the site looks trustworthy and they have been recommended in various places. Extensions for all browsers, but not open source. Here’s a discussion on this: https://discussions.agilebits.com/discussion/22686/open-sour...

Re: Ask HN: Password Manager (2017)

#8

Post by stephenr » Sun, Oct 29, 2017, 9:09 AM UTC

QUFB wrote: post #6

alexnewman wrote: post #5

Pass used git and gpg and works on every platform

Android and iPhone too?

I believe there are clients for all platforms. https://www.passwordstore.org/#other

Re: Ask HN: Password Manager (2017)

#9

Post by aagat » Sun, Oct 29, 2017, 1:27 PM UTC

I have been using pass[https://www.passwordstore.org/] for two years now and it works reasonably well.

Desktop "GUI": rofi-pass[https://github.com/carnager/rofi-pass]

Android Client: https://f-droid.org/packages/com.zeapo.pwdstore/

Sync: Git+Manual download

All components are open source and actively maintained.

Re: Ask HN: Password Manager (2017)

#10

Post by codegeek » Sun, Oct 29, 2017, 2:08 PM UTC

keepassx sycned with cloud providers.