61–70 of 131 posts
Does anyone has a good self hosting sync scheme? Keepass is awesome... But hadn't managed the sync to work smoothly yet
In a way this is a nice example of why 1Password or BitWarden are doing well. This might work out okay for a technical person, but the average user isn't going to look at the KeyPass downloads page [1] and feel confident about what to download -- even assuming they're using Windows, you need a phone app and sync for meaningful password management these days... and that's very worrying in their presentation. Whereas 1…
I am not sure what you are looking at, but when I go to the 1password page from my mobile I see big buttons with: memberships, families, business and team, Mac, Windows, Linux, IOS, apple watch, android, 1password in the browser, scim Bridge, cli, secrets automation, ssh, desktop betas, browsers,android betas, IOS betas, previous versions. Now that is a whole different level of confusing then keepass. I mean I genera…
Edit: Ah, I guess you might be talking about the small Downloads section in the footer. Even that's much more clear than a page with a 2.x download, 2.x portable download, 1.x download, 1.x portable download, and then 30+ unofficial ports.
I've been using KeePass on my windows PCs and Mac/IOS compatible versions on macs, iPads, and iPhones for years. I have my database on Dropbox so that all the Apple devices sync to the same file and a keep a local copy on my PC that is automatically updated from the Mac using WinSCP, a .bat file, and task scheduler. I have to do the copy thing because Dropbox reduced the number of devices that can access it directly…
Sounds pretty simple for about .000001% of users who could potentially use it. The rest would have no idea how to do any of this.
Earlier quoted context omitted.
KeePassXC is one of the best pieces of software out there. Does exactly what it needs to do, runs on every device I've ever owned, and has been independently audited for implementation weaknesses. It's not just great FOSS software, it's just straight up great software.
It would regularly fail connect to the browser plugins when I tried it (despite successfully connecting previously), and the browser plugins failed to autofill more often than not. There were a ton of usability headaches in the core application too. The UI was quite unintuitive. It may be technically great, but that's just one dimension of greatness.
IMHO The UI of the Linux app is ok, not grate but very usable. The Android app I think is worse though.
Failing to fill auto-fill is in my experience 100% to blame on the website in question. It happens more often then with some commercial alternatives. They just don't have the same amount of resources to work around websites doing stupid quirky things with password input fields. Which websites would stop doing quirky password input field stuff.
I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't). Web-based password managers can be hacked, or have their login interface laced with third-party code that could be exfiltrating your master passphrase. My strategy is using KeePass and keeping multiple copies of the database in various cloud providers in case my local copy is lost/corrupted. It takes under a m…
I feel more comfortable with that than syncing a KeePass file over dropbox or google drive, mostly because I got myself into a nasty situation that way with a corrupted KeePass database a while back.
Here we go again: Some company (in this case, Bitwarden) "betrayed" its customers by doing what every other firm does. And Hn goes brrr over it. I wonder, aren't the majority of HNers working at a for-profit company funded by VCs? The hypocrisy is just intolerable at this point.
Doesn't mean they agreed with their employers decision.
Doesn't mean they don't complain about it when their company does it.
Doesn't mean they don't raise complains internally with their employer.
But what do you expect?
They quitting their job about this, many can't afford it.
They mentioning how bad their employer is too every time they complain about a different company? That would be just annoying (close to) no one wants that.
Sure some people which also work for much worse companies wrt. such properties and are not currently looking for a different employer are hypocrites.
But so what? Better voice your complains even if you don't act on them then to not even voice your complains and just accept bad things. (Sure acting on them would be even better, way better.)
Does anyone has a good self hosting sync scheme? Keepass is awesome... But hadn't managed the sync to work smoothly yet
I mean you can only run into a problems when you change it in two devices without sync in between. But that is super unlikely (in general; if you have reliable internet; you can improve reliably of this setup by syncing to a kind of server/file storage as "source of truth" as it won't be e.g. out of battery or disconnected from the internet ;-) ).
And as long as what you use for syncing doesn't blindly overrides when conflicting syncs happen you can resolve the problem by hand, not that I would expect it to happen. (At least with KeePassXC this works well, I haven't use keepass as most places strongly recommend XC over keepass without XC.)
I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't). Web-based password managers can be hacked, or have their login interface laced with third-party code that could be exfiltrating your master passphrase. My strategy is using KeePass and keeping multiple copies of the database in various cloud providers in case my local copy is lost/corrupted. It takes under a m…
For the super paranoid, SyncThing provides a straightforward way for you to synchronise your database between various local devices without having any data in the cloud at all. [edit: Syncthing's Discovery Server probably counts as data, actually; you can work around that but then it's less "straightforward"]