Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Password manager with best experience on Linux?

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 80 posts

Re: Ask HN: Password manager with best experience on Linux?

#61

Post by igorstellar »

wtmt wrote: post #55
igorstellar wrote: post #47

Bitwarden on Amazon Lightsail server. It costs $3.50/mo to self-host which is very competitive comparing to paid password managers. I use bitwarden_rs[0] server written in Rust which is much lighter implementation you can run on cheapest 512mb instance. Official bitwarden[1] server is using docker and mssql which requires a lot of RAM. You can run it on Linux through Firefox extension as well as on any operating syst…

Have you tracked or checked how well bitwarden_rs keeps up with mainline Bitwarden on changes and fixes? I’m usually concerned about these forks getting way behind or getting abandoned after sometime. At least mainline Bitwarden has paid subscription tiers to support ongoing development and maintenance, which may provide some predictable income for that.

Their Github page has activity, and the last merged PR commit was 7 days ago. Running this for 3 months now after I've migrated from 1password, I can say that everything that extension has (password generation, notes, file upload etc.) is supported by the server as well as nice web UI.

Security-wise, I used nginx over my custom domain to enforce HTTPS and put bitwarden app itself behind a firewall.

As a bonus, bitwarden_rs also enables all premium features for you ("You are a premium member!" label is by default in every client).

Re: Ask HN: Password manager with best experience on Linux?

#62

Post by wazoox »

dmacvicar wrote: post #23

KeepassXC ( https://keepassxc.org ) combined with: * It's browser plugin ( https://addons.mozilla.org/firefox/addon/keepassxc-browser/ ) * Syncthing ( https://syncthing.net/ ) to synchronize across devices and mobile * Keepass2Android Offline for Mobile access ( https://play.google.com/store/apps/details?id=keepass2androi... ) Then the experience is close to Lastpass but only using opensource components.

Same setup, but I use Nextcloud to synchronize across systems.

Re: Ask HN: Password manager with best experience on Linux?

#63

Post by Wowfunhappy »

Blackstone4 wrote: post #7

Why not use Bitwarden through their Browser add-ons (Firefox, Chrome etc.)? I’ve only used the desktop app on OSX but I tend to default back to the in-browser experience since it’s more integrated.

I use both. When I need to login to a desktop application (iTunes, Steam, etc), opening up my web browser just to copy out my password is a little awkward.

Re: Ask HN: Password manager with best experience on Linux?

#64

Post by Wowfunhappy »

rochacon wrote: post #15
highhedgehog wrote: post #3

Bitwarden

This! I’ve moved from LastPass to BitWarden and I like the clients way better. Browser extensions, Desktop, Mobile (iOS), CLI all work pretty great. It’s core is opensource and you can run your own server if you want. For my less critical accounts even the 2FA token is stored in it.

I was actually under the impression the whole thing was open source. Out of curiosity, what is closed?

Re: Ask HN: Password manager with best experience on Linux?

#65

Post by swozey »

CraftThatBlock wrote: post #46
swozey wrote: post #16

1passwordx nowadays is actually better than my 1password OSX experience. You should try it. I'm slowly moving myself off of OSX over to manjaro and I was shocked at how good 1px worked. It's more "the full app" than it is a "mini mini" like I assumed it'd be, but admittedly I haven't used it for a full 8 hour work day yet so maybe I'll have complaints in a few months. I cannot wait to finally get off of 1password com…

1Password's Android app definitely has the password generator, it's the little gear next to the password field.

I mean in the context of creating a new account, when the 1p app pops up in a password field, AFAIK there's no way from that to create a password. So you have to go into the app, generate one, then back out of the app and back to the app you're creating the password for.

Unless I'm just missing a part of the UX, which is totally possible.

Re: Ask HN: Password manager with best experience on Linux?

#66

Post by tzs »

ben509 wrote: post #50
mruts wrote: post #6

Honest question: why doesn’t everyone just use hash functions for passwords. Generating a Base64 string from a secret salt + the website name sounds ideal. This is what I do, and it works very well.

Standard issues with these derived password schemes: * Are you sure your algorithm can't be reversed? * What do you do if your normal username is taken? * What do you do when the site's name changes? * How do you handle forbidden and mandatory characters? * How do you handle forced rotation? * What about extraneous crap like security questions, phone PINs, emails, related sites, &c.? * How do you access it on other d…

> If you go on listing the issues, you wind up writing the requirements document for a password manager.

One difference, though, is that most of the issues can be addressed by some sort of persistent data store that does not need high security. Once you've taken the passwords themselves out of what your password manager stores, I think this is the only thing on your list that requires storing highly sensitive data:

> What about extraneous crap like security questions, phone PINs, emails, related sites, &c.?

For the rest, such as some sort of per site version serial number to handle password rotation, or a map from current site name to original site name for sites whose names have changed, it is also sensitive data, but it is on a level of sensitivity like a contact list or browser bookmarks for which your ordinary OS security mechanisms for file protection should be sufficient.

Re: Ask HN: Password manager with best experience on Linux?

#67

Post by CraftThatBlock »

swozey wrote: post #65
CraftThatBlock wrote: post #46

Earlier quoted context omitted.

1Password's Android app definitely has the password generator, it's the little gear next to the password field.

I mean in the context of creating a new account, when the 1p app pops up in a password field, AFAIK there's no way from that to create a password. So you have to go into the app, generate one, then back out of the app and back to the app you're creating the password for. Unless I'm just missing a part of the UX, which is totally possible.

Ah yes you are totally right. My bad!

Re: Ask HN: Password manager with best experience on Linux?

#68

Post by anotherevan »

SteveArmstrong wrote: post #38
beilabs wrote: post #8

I quite like keepassx. Sync's with a dropbox file and I can use it across all my devices. It's not that fancy but has done the job for years on my systems.

I've used KeePassX + Dropbox for 5 years across Windows, Linux, OSX, iPhone and Android. With Dropbox's restriction to 3 devices, and since this is the only thing I use Dropbox for, I'm currently looking at LastPass instead

I would recommend BitWarden over LastPass any day of the week and twice on Sundays.

I originally used LastPass for a long time, but it went downhill fast with its sale to LogMeIn and the retirement of the old Firefox extension.

Switching to BitWarden was a delightful experience and I haven't been disappointed with it yet.

Re: Ask HN: Password manager with best experience on Linux?

#69

Post by rootshelled »

auscompgeek wrote: post #41
rootshelled wrote: post #4

I'm lazy so I use FF's built-in for anything web. Then gnome keyring with PAM auth upon user login.(again, lazy)

I'm curious; how do you generate your passwords?

Google chrome has a nice feature for that. Yeah I know it isn't an efficient workflow but to lazy to change at the moment.

Re: Ask HN: Password manager with best experience on Linux?

#70

Post by stunt »

I stumble upon Buttercup a while ago. https://buttercup.pw/

It's cross-platform with decent user experience. The only thing that bothered me was using a lot of NPM packages from random vendors. It is a minor thing. I assume they do NPM audit and everything. worth to take a look.

Post reply on HN