91–100 of 136 posts
Earlier quoted context omitted.
Bitwarden is just as user-hostile. They go out of their way to make it harder to own your data, when it should just be local-first vaults. Import/export is irrelevant. I want to own my data, not just be able to check out a copy whenever I want.
How so? It's easy to run vault warden if you want local, and their android app supports connecting to your local vault warden. You can also export your data. How could they be less user-hostile?
Earlier quoted context omitted.
Bitwarden is just as user-hostile. They go out of their way to make it harder to own your data, when it should just be local-first vaults. Import/export is irrelevant. I want to own my data, not just be able to check out a copy whenever I want.
How so? It's easy to run vault warden if you want local, and their android app supports connecting to your local vault warden. You can also export your data. How could they be less user-hostile?
As for the software I use to access the database:
* On Windows/Linux, I use KeePassXC with the corresponding browser extension. I also use the built-in SSH agent integration so I don't need to store my private keys in ~/.ssh nor manually type in their encryption passphrase.
On Windows, auto-type works great for the most part, except in ancient applications that only support scan-code-based input and not Unicode-based input (shakes fist at IPMI consoles of brand new servers that _still_ use ancient noVNC versions without support for Unicode input). I build KeePassXC from source to include a not-yet-merged patch for scan-code support.
* On Android, I use KeePassDX (open source). It integrates with Android's autofill API, but also has a keyboard for typing the username/password/TOTP code into apps that don't support autofill.
* Back when I still used iOS, I used Strongbox (open source, but does not accept contributions). It integrates with iOS' autofill API.
For syncing, I use SyncThingTray on Windows/Linux and SyncThingFork on Android. On iOS, I used to have Strongbox connect via sftp to my server running SyncThing because I could not find a decent SyncThing client. (I'm not even sure it's possible to implement on iOS without resorting to abusing location services for background execution, like iSH or most SSH clients.)
Earlier quoted context omitted.
Bitwarden is just as user-hostile. They go out of their way to make it harder to own your data, when it should just be local-first vaults. Import/export is irrelevant. I want to own my data, not just be able to check out a copy whenever I want.
How so? It's easy to run vault warden if you want local, and their android app supports connecting to your local vault warden. You can also export your data. How could they be less user-hostile?
I use KeePass databases synced with SyncThing. One database for passwords and private keys, another for TOTP 2FA (which I only ever update/unlock on my phone). As for the software I use to access the database: * On Windows/Linux, I use KeePassXC with the corresponding browser extension. I also use the built-in SSH agent integration so I don't need to store my private keys in ~/.ssh nor manually type in their encrypti…
Earlier quoted context omitted.
They made generating passwords more difficult. You can no longer tell it how many, e.g., special symbols to use, only to use them or not. This means regenerating new passwords over and over until one fits site requirements, and/or manual tweaking that might unintentionally reduce entropy. They stopped supporting the mobile extension. I can no longer invoke 1Password from Safari on iOS. If I'm lucky , then Safari's ow…
> They stopped supporting the mobile extension. I can no longer invoke 1Password from Safari on iOS. They did provide an alternative, to be fair -- they're shipping a Safari web extension that you can turn on, which gives you about the same behavior as in a desktop browser. Honestly, I find that the built in iOS autofill stuff works fine for my purposes. I recognize that's probably very specific to the exact sites I'…
I'm sorry, but this is not accurate. The extension they're shipping is intentionally crippled unless you pay the monthly ransom and give Agile Bits sole control over your passwords.
I use one of these password managers that folks have been sharing here but I'm curious why folks don't like using the ones built into firefox/chrome. Chrome at least allows you to provide a separate encryption password so they don't have any visibility into what the passwords are.
Web browser password managers don’t integrate with iOS and isn’t very usable if you need to retrieve a password that isn’t linked to the website you are visiting
Am I the only one that thinks that password managers are a terrible idea? Lets take all of a user's credentials (mixing the critical and the trivial) and put them into a single database and then use Javascript-based browser extensions to control access to the DB. What could go wrong? The LastPass communications brouhaha from last week was just a whiff of the total shit show we're going to see when the client code fro…
Biometrics will take over, I definitely love FaceID on my iPhone. It just works and the fail rate is near zero on my 12 mini. FaceID that works similarly to Microsoft Authenticator for approvals should be all I need but we're not quite there yet. Effectively, given that I need FaceID to open MS Authenticator, we are already there.