471–480 of 723 posts
Earlier quoted context omitted.
I would love to know how that works. I was so not able to select an option to enter a different vault url. I could only enter email and password yesterday.
It’s a slightly hidden option on the login page.
Earlier quoted context omitted.
Will again take a look. I used Google to find a tutorial and that dpole of said cog, but I wasn't able to find it.
I just made this screenshot in a chrome-based browser for you: Top left here: https://imgur.com/xCgrot0 If you click on that, the "Server URL" field is where you want to put your private instance: https://imgur.com/Gua3jSb
Earlier quoted context omitted.
My wife uses KeepassXC and KeepassAndroid now and syncs it with her own Dropbox. But yes, 1Password takes a lot less time for people to get used to. But to some extent it took her compromised passwords to finally start using everything.
F-Droid lists at least 4 Keepass-compatible password managers (KeePassDX, KeePassDroid etc.). Is there one which is best for most users?
- Website: https://www.keepassdx.com
- F-Droid: https://www.f-droid.org/packages/com.kunzisoft.keepass.libre...
- Source: https://github.com/Kunzisoft/KeePassDX/releases
Another FOSS app called Keepass2Android has the same feature, but recent versions of that app are not on F-Droid.
Earlier quoted context omitted.
I like Bitwarden too, but can't dismiss the fact that 1Password is superior to Bitwarden in many ways: - Mobile UI is beautiful on 1Password. - The UX from creating a password entry to auto-filling is easily better on 1Password. Bitwarden doesn't show autofill entries on login forms yet. That's a deal breaker, at least for me. - Account recovery via a trusted family member. - Additional security measure: private key…
You think they'll keep that price for forever?
Not sure what... eg. perhaps some server-facing & app-facing API that would log customers in more touchlessly in a bid to become the SSO nexus of the world.
Earlier quoted context omitted.
> Maybe you can't. Everybody has their own risk tolerance, but at some point, everybody's going to have to draw a line. I'm in agreement with parent, I think putting your passwords in the cloud is a wild single point of failure. Even if you can tell a compelling story about how they carefully encrypt everything right now, you're always a silent update away from it all being dumped on the internet. I think people (in…
> you're always a silent update away from it all being dumped on the internet. This is true of all password managers that have any ability to connect to the internet. You’re one silent update away from your manager suddenly uploading all your passwords to a random endpoint in Russia.
Its not fool proof, but it feels better than a black box that could be a different black box tomorrow or after the next acquisition or round of investment.
Earlier quoted context omitted.
For something as important as protecting passwords, why on earth would you want something that is free?
Because much like privacy, password security shouldn't always be only a premium option. Plus like the parent said, proprietary code is a deal break for lots of people.
So then who foots the bill? Password managers are the duct tape used to protect a user because we don't inherently trust application providers.
> proprietary code is a deal break for lots of people
Sort of. First, "lots of people" seems like "lots of people" because we're on HN. The wider population doesn't care whether your application is proprietary or not - they just want something that works. Apple's wall garden is proof of this. Second, you can still charge for a product and it be open source. An application being open source simply provides an audit log of the code and allows for "wisdom of the crowd" when it comes to bug and security issues. So yes I agree that having a password manager be openly auditable is a great feature, but I (and many others) likely would rather have the features of strong UX and known tenure (OSS tools get abandoned all of the time) then we would having an auditable source code.
Earlier quoted context omitted.
> Nerds continue to fail to grasp the value of UI/UX. Or perhaps nerds do grasp the negative value of anti-patterns in UI/UX, and reject attempts to create interfaces and usage models that remove control from the user, create vendor lock-in, or compromise privacy and security.
I think a better way of saying this is that "nerds" (i.e. power users, the type of people typically on HN) want different things out of their UI/UX than the average user. That's the beauty of having different solutions to choose from: the power user is free to use something like KeePass, where it's not as easy to use, but you can set it up exactly the way you like; and the "normal" user can go with something like 1P…
"1Password Has Raised $620M" Ah fuck. They now need to grow at any cost to earn all that money back. And they'll throw their users under the bus, if they have to, because it's either grow like a unicorn or go bust. Also, I sincerely have no clue how a password manager could be so expensive. Last time I checked, the excellent KeePassXC was still free open source and developed by volunteers in their free time. How come…
They already through their consumer users under the bus when they switched to a subscription business.
I haven’t upgraded since v6, and I plan to avoid it as long as I can.
People thinking this is an absurd amount of money are sleeping on how 1Password is quietly positioning itself to become the ground truth storage solution for corporate secret management, across devops and non-technical groups alike. Given Hashicorp's market cap of 11B, and 1Password's narrative on how to become even more central to corporate use cases by being the storage layer for Vault deployments, it's a very reas…
Pretty typical for people here to be zoomed-in on the b2c side of a business because that's what they use, and fail to see the b2b side, the underwater mass of the iceberg.