Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox Lockbox

testpilot.firefox.com

Post reply on HN
Print view View original

51–60 of 156 posts

Re: Firefox Lockbox

#51

Post by com2kid »

walrus01 wrote: post #42
Thriptic wrote: post #36

Has anyone done a thoughtful comparison of PW managers? I moved on from keepass because it was a huge hassle to use, but LastPass and 1password both have some detractors as well.

I specifically use keepassx and v2 format keepass file db, separately, because it is not integrated with any browser via extension or plugin. Keeping things compartmentalized reduces risk in my opinion. And unless I copy the locally stored .kdbx file somewhere manually, it has zero interaction with any network, cloud based service, or third party beyond my control.

I was tired of browser plugins that just didn't always work quite right.

Keepass, on whatever platform using whatever client, just uses the clipboard. 100% chance of working, although not safe against certain types of spyware.

Re: Firefox Lockbox

#52

Post by hartator »

driminicus wrote: post #46
hartator wrote: post #44

I wonder if the passwords are encrypted from end-to-end. I am not very confortable having my passwords in plaintext, even on Mozilla servers.

I haven't looked in to it, as I'm not an ios user, but Mozilla would be very stupid if this isn't end to end encrypted. And as far as I know Mozilla typically isn't stupid.

`will sync to the app using 256-bit encryption` is not very reassuring. It seems to be regular SSL without a master key.

Re: Firefox Lockbox

#53

Post by jeena »

awill wrote: post #43
neilsimp1 wrote: post #7

If this is any good I'll be considering it as a replacemnt for Keepass. A bit off topic, but while looking at this I noticed another expirement - Firefox Side View. It looks like it lets you have two open tabs side-by-side in one browser window. This is exactly why I used the Tile Tabs[0] extension and had to switch to Tile Tabs WE[1] with the Quantum update. I'm happy to see this coming back without the WE workaroun…

I use Android, Linux (at home), and Mac (at work). I switched from KeePass because the UI was really bad, it seemed dead, and I really didn't want to move to KeePass 2 (with Mono on Linux). I switched to enpass, and it's been great. It has native Linux/Mac/Windows apps, a solid Android app (with fingerprint support), and there's no subscription. It's perfect for my needs.

Hm, enpass seems to be closed source which makes it unusable for me to store all my passwords basically because of the same as someone wrote in their forum:

"The fact that Enpass isn't submitting all my passwords to enpass.io right now doesn't mean anything. I'm currently using iptables to restrict Enpass from doing so, but I don't know yet how to archive the same thing on my unrooted Android."

Re: Firefox Lockbox

#54

Post by jeena »

I wonder if it also works with the self hosted firefox sync server or if they forgot to add a UI to change the URL to the sync server.

Re: Firefox Lockbox

#55

Post by jeena »

pdoconnell wrote: post #41
Tiki wrote: post #15

Earlier quoted context omitted.

Rough edges in KeePass?

The need to use a third party plugin to get any form of cloud sync working for one. Minor weirdness with it scrolling through your secret share structure on the left instead of up and down your passwords if you have accidentally clicked over (a feature that acts more like a bug). The lack of ability (or at least any documentation) on how to use something like Google Authenticator as MFA for the database.

The external sync is a feature for me, not a bug. I can use whatever tool I want to sync between my devices (I use Syncthing) and do not need to trust some company with storing my stuff on their servers and not fiddling with them.

Re: Firefox Lockbox

#56

Post by larrik »

sametmax wrote: post #30
dangelov wrote: post #20

If I'm already using Firefox on Mac, Windows & iPhone, what advantage does this bring over just opening the Firefox app on my iPhone and looking in Settings > Saved logins? Seems to me to be exactly the same, am I missing anything?

It's faster. It syncs. It's safer than firefox passwords manager. It unlocks integrates better with the OS (unlock with fingerprints or face). You can use it for something else than websites. However, it's still nowhere as convenient as lastpass. But it's a good first step. I wish them luck.

The existing app already syncs, though. "Faster" we'll see. Integration is probably the main point.

Re: Firefox Lockbox

#57

Post by bhhaskin »

aaronkjones wrote: post #35

I am curious how it works, technically speaking. I already have this capability with password-store (pass), that works for Firefox, Chrome and Safari on destop and mobile. pass - https://www.passwordstore.org (core program) passff - https://github.com/jvenant/passff (firefox desktop) passforios - https://mssun.github.io/passforios (ios w/firefox mobile) qtpass - http://qtpass.org (osx, linux, windows)

Same and it is fantastic!

Re: Firefox Lockbox

#59

Post by jeena »

devinreams wrote: post #37
mimsee wrote: post #12

The iOS app seems to be region-locked to U.S. only App Store.

Only for now. This is just the beginning of an experimental product and we're hoping to bring it far and wide later. Other than "every", what language or regions would you want/expect/need first?

I hope you are aware of the fact that language and geography most of the time don't match because one person is capable to speak/read multiple languages and that English is understood by people outside of the USA?

Re: Firefox Lockbox

#60

Post by rodorgas »

Thriptic wrote: post #36

Has anyone done a thoughtful comparison of PW managers? I moved on from keepass because it was a huge hassle to use, but LastPass and 1password both have some detractors as well.

I paid a one time license fee of 1Password, then I use it offline on laptop and iPhone. I sync them through wifi regularly.

This offline use option is not very disclosed on the website but it’s possible and in my opinion it’s more safe.

I’ve tried open source password apps but the problem it’s they are all from independent developers. These developers can’t afford security reviews and I can’t tell if the version on the App Store is the same of the version on GitHub. If there’s a vulnerability and passwords leak, a company can be legally responsible, it’s not the same with independent developers.

And it’s not practical to install an app and its updates from source on iPhone. So I went with the closed source 1Password because it’s a big company and everybody is looking at them.

Post reply on HN