Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What password managers can you recommend?

news.ycombinator.com

Post reply on HN
Print view View original

111–120 of 136 posts

Re: Ask HN: What password managers can you recommend?

#111

Post by aidenn0 »

itake wrote: post #86
aidenn0 wrote: post #42

Earlier quoted context omitted.

On firefox, their browser extension is excellent for me; what issues do you have?

I use FF too. Common problems are: 1a/ If I am trying to transfer money between two banks, a Plaid iframe pops up requesting the credentials of another bank's website. Since the bank's credentials are typically configured on another domain, you need to search for it, copy the username, paste the username, then re-search, copy the password, paste the password. I wish the drop down had more 'memory'. 1b/ Similar proble…

1a: I don't use plaid, but I suspect that adding the plaid domain to valid domains for your bank's passwords might work. I consider any time I need to copy/paste to be a big issue because it significantly increases the chances of successful phishing.

1b: yes desktop app seems like an afterthought

2: This is annoying and should be fixed. I didn't think of it because I so rarely register for new websites.

Re: Ask HN: What password managers can you recommend?

#112

Post by senectus1 »

jstx1 wrote: post #2

Bitwarden. The free version does everything I need from a password manager (which is to store, sync and generate passwords); decent browser extension, decent mobile app.

Same here. My self, wife and kids all use it. I have my father and mother using it.

I default to it for anyone looking for this solution.

Re: Ask HN: What password managers can you recommend?

#113

Post by Leftium »

Bowes-Lyon wrote: post #71

Enpass. https://www.enpass.io/

I second Enpass.

OP says "I've tried BitWarden and Enpass, but their integration is worse and they suffer from some of the same problems as 1Password (subscription/server-based, not really in control of own data, etc.)" but I don't think this is accurate.

Enpass offers a lifetime license and is local-first with syncing via your choice of cloud service. (Enpass also supports wifi-only sync, too. No cloud required.)

Re: Ask HN: What password managers can you recommend?

#114

Post by kemayo »

torstenvl wrote: post #98
kemayo wrote: post #56

Earlier quoted context omitted.

> They stopped supporting the mobile extension. I can no longer invoke 1Password from Safari on iOS. They did provide an alternative, to be fair -- they're shipping a Safari web extension that you can turn on, which gives you about the same behavior as in a desktop browser. Honestly, I find that the built in iOS autofill stuff works fine for my purposes. I recognize that's probably very specific to the exact sites I'…

> they're shipping a Safari web extension that you can turn on, which gives you about the same behavior as in a desktop browser I'm sorry, but this is not accurate. The extension they're shipping is intentionally crippled unless you pay the monthly ransom and give Agile Bits sole control over your passwords. https://ibb.co/XC0PkD9

Huh, I didn't realize the extension didn't support standalone vaults. That's pretty shitty of them, then.

Re: Ask HN: What password managers can you recommend?

#115

Post by knowingpark »

madmonk wrote: post #101

I've been working on a concept where, instead of storing passwords in a manager I use a generator that creates pseudorandom passwords based on a few, easy to remember things. It's essentially a hashing algo created in javascript. You provide a site name, a password length and a pin code and it will consistently generate the same pseudorandom string. Nothing is stored and the generator can be publicly hosted. https://…

I've been using https://chriszarate.github.io/supergenpass/mobile/ a similar idea. I'm going to switch to yours though, its designed better. Thanks

Re: Ask HN: What password managers can you recommend?

#116

Post by torstenvl »

Leftium wrote: post #113
Bowes-Lyon wrote: post #71

Enpass. https://www.enpass.io/

I second Enpass. OP says "I've tried BitWarden and Enpass, but their integration is worse and they suffer from some of the same problems as 1Password (subscription/server-based, not really in control of own data, etc.)" but I don't think this is accurate. Enpass offers a lifetime license and is local-first with syncing via your choice of cloud service. (Enpass also supports wifi-only sync, too. No cloud required.)

You're right, I'm not sure why I thought that. I think I'll give enpass a second look.

Re: Ask HN: What password managers can you recommend?

#118

Post by f1refly »

BuckRogers wrote: post #100
ryandvm wrote: post #58

Am I the only one that thinks that password managers are a terrible idea? Lets take all of a user's credentials (mixing the critical and the trivial) and put them into a single database and then use Javascript-based browser extensions to control access to the DB. What could go wrong? The LastPass communications brouhaha from last week was just a whiff of the total shit show we're going to see when the client code fro…

I agree, that's why I've never used anything except KeePass. Biometrics will take over, I definitely love FaceID on my iPhone. It just works and the fail rate is near zero on my 12 mini. FaceID that works similarly to Microsoft Authenticator for approvals should be all I need but we're not quite there yet. Effectively, given that I need FaceID to open MS Authenticator, we are already there.

Biometrics are not passwords though, biometrics are usernames. They can be forged from something as simple as a regular photograph and you cannot change them.

Re: Ask HN: What password managers can you recommend?

#119

Post by f1refly »

firepacket wrote: post #70

I believe the most popular password managers have been cracked already, that is why I did a LOT of research and built my own. It was not easy, but it was fun, and if anyone wants to decrypt my files they have a lot of difficult hurdles to jump through. Of course, keylogging is easier, but then they still have to run my software or at least seriously read the source code.

I don't believe GPG has been cracked. Also, running your own crypto is in 99.9% of cases a terrible idea.

Re: Ask HN: What password managers can you recommend?

#120

Post by sebazzz »

koheripbal wrote: post #29
SamuelAdams wrote: post #14

Earlier quoted context omitted.

I thought they were stored on-disk in a non-encrypted SQLite database. So anyone with physical access to your computer has all your passwords.

I believe they are encrypted with you Windows credentials.

Yes, with DPAPI. In addition, you can choose a master password on Firefox.
Post reply on HN