Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePass is the free, open source, light-weight and easy-to-use password manager

keepass.info

Post reply on HN
Print view View original

31–40 of 131 posts

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#31

Post by RajT88 »

liberia wrote: post #3

I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't). Web-based password managers can be hacked, or have their login interface laced with third-party code that could be exfiltrating your master passphrase. My strategy is using KeePass and keeping multiple copies of the database in various cloud providers in case my local copy is lost/corrupted. It takes under a m…

> I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't).

This is the conundrum I am in. I have been looking for a pocket-sized password manager, which can sync from something like a spreadsheet I keep in cold storage. This seemed to fit the bill:

https://www.beamu.io/

So I purchased one. It's pretty cool, although the controls are a bit clunky. Overall, pretty cool bit of tech.

However, to import your passwords into the device, there is no way to do so with the stock software which does not involve uploading all of your passwords to their servers. That is asinine, if I am being generous.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#32

Post by bloaf »

viridian wrote: post #19
nix23 wrote: post #2

Use KeePassXC please.... Or pass if your only on unix'es ;) https://www.passwordstore.org/

KeePassXC is one of the best pieces of software out there. Does exactly what it needs to do, runs on every device I've ever owned, and has been independently audited for implementation weaknesses. It's not just great FOSS software, it's just straight up great software.

It would regularly fail connect to the browser plugins when I tried it (despite successfully connecting previously), and the browser plugins failed to autofill more often than not.

There were a ton of usability headaches in the core application too. The UI was quite unintuitive.

It may be technically great, but that's just one dimension of greatness.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#36

Post by nerdponx »

kemayo wrote: post #27

In a way this is a nice example of why 1Password or BitWarden are doing well. This might work out okay for a technical person, but the average user isn't going to look at the KeyPass downloads page [1] and feel confident about what to download -- even assuming they're using Windows, you need a phone app and sync for meaningful password management these days... and that's very worrying in their presentation. Whereas 1…

KeePassXC is overall a much better experience. Even the website is significantly less intimidating-looking.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#37

Post by xenago »

ReptileMan wrote: post #5

Does anyone has a good self hosting sync scheme? Keepass is awesome... But hadn't managed the sync to work smoothly yet

I use WebDAV. Just throw up a container like dgraziotin/nginx-webdav-nononsense and connect to keepass2android and keeweb. I then use regular backup software to back up the mounted WebDAV files.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#39

Post by rvz »

jamessb wrote: post #16
liberia wrote: post #3

I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't). Web-based password managers can be hacked, or have their login interface laced with third-party code that could be exfiltrating your master passphrase. My strategy is using KeePass and keeping multiple copies of the database in various cloud providers in case my local copy is lost/corrupted. It takes under a m…

If you don't want to trust Bitwarden with your data, you can self-host a server yourself (either running the official server [1] or the compatible Vaultwarden [2]). [1]: https://github.com/bitwarden/server [2]: https://github.com/dani-garcia/vaultwarden

Exactly. If you can self-host a password manager then surely you can self-host a Git repository as well and use that instead and avoid this: [0]

[0] https://news.ycombinator.com/item?id=32735734

Post reply on HN