Live data from Hacker News

KeePass is the free, open source, light-weight and easy-to-use password manager

keepass.info

81–90 of 131 posts

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#81
It seems to me KeepassXC is currently one of the most secure options for password management. The attack surface of offline password managers such as KeepassXC is much smaller than that of the online password managers.

You may sync it with your tool of choice, eg, Dropbox.

The desktop application is excellent, reliable, and with state of the art protections (Yubikey, Argon2 KDF, memory protections, etc).

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#82
post #10

Earlier quoted context omitted.

For the super paranoid, SyncThing provides a straightforward way for you to synchronise your database between various local devices without having any data in the cloud at all. [edit: Syncthing's Discovery Server probably counts as data, actually; you can work around that but then it's less "straightforward"]

It's a strange commercial offering with a weird relationship to BitTorrent (it's "ex"), but Resilio Sync is an interesting device to device option as well.

Why is it strange?

It’s closed source though.

I would like to see a comparison with Syncthing.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#83

Earlier quoted context omitted.

I am not sure what you are looking at, but when I go to the 1password page from my mobile I see big buttons with: memberships, families, business and team, Mac, Windows, Linux, IOS, apple watch, android, 1password in the browser, scim Bridge, cli, secrets automation, ssh, desktop betas, browsers,android betas, IOS betas, previous versions. Now that is a whole different level of confusing then keepass. I mean I genera…

I'm really not sure what you're looking at, but on 1Password's mobile site there's a huge button to download from your phone's store on the homepage. The "Try 1Password FREE" button takes you to a well laid-out pricing page. Edit: Ah, I guess you might be talking about the small Downloads section in the footer. Even that's much more clear than a page with a 2.x download, 2.x portable download, 1.x download, 1.x porta…

I replied in a different comment that I landed on the community page.

But I have to say, arguing that the downloads buttons on keepass are more friction than "get started" (I don't see a app store link) which takes me to the business offer and then the family offer where I have to register an account and provide payment details, is a bit of a stretch. And bitwarden is very similar.

Sure I can search on the playstore, but then I also find keepass quite easily there.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#85
post #27

In a way this is a nice example of why 1Password or BitWarden are doing well. This might work out okay for a technical person, but the average user isn't going to look at the KeyPass downloads page [1] and feel confident about what to download -- even assuming they're using Windows, you need a phone app and sync for meaningful password management these days... and that's very worrying in their presentation. Whereas 1…

I am not sure what you are looking at, but when I go to the 1password page from my mobile I see big buttons with: memberships, families, business and team, Mac, Windows, Linux, IOS, apple watch, android, 1password in the browser, scim Bridge, cli, secrets automation, ssh, desktop betas, browsers,android betas, IOS betas, previous versions. Now that is a whole different level of confusing then keepass. I mean I genera…

Replying to myself, seems like I went to 1password.community which is the first result I get when I search. I guess this goes to show for the perils of having to be high in the search rankings.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#86
post #76

Earlier quoted context omitted.

Plus I feel that once one has experienced the browser integration of 1Pass, BW, LastPass, etc it's hard to go back to manually filling credentials again. That and the seamless sync across devices. It's just too much to handle for non techie folk.

I'm willing to tolerate a little friction to setup syncing, but keepass has friction at almost every level. Their importer is powerful... but I had to manually configure it to import from lastpass. Just bake that in ffs. There is no "generate password" button on the main application screen despite that being the #2 use for a password manager behind autofilling. Instead the main screen has "find", "find entries" and "…

This is the “disturbingly long list” of plugins that the commenter is likely referring to: https://keepass.info/plugins.html

Some plugins on the list require other plugins to also be installed.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#88
post #82

Earlier quoted context omitted.

It's a strange commercial offering with a weird relationship to BitTorrent (it's "ex"), but Resilio Sync is an interesting device to device option as well.

Why is it strange? It’s closed source though. I would like to see a comparison with Syncthing.

Mostly because it is closed source, and also the odd behind-the-scenes drama of Resilio's spin out from BitTorrent (the company, not the tech). (The BitTorrent company of today is a strange cryptocurrency/NFT zombie of the tech company it originally was.) To my understanding that drama and corporate spin out in part even influenced the creation of Syncthing as an alternative.

From my view, Resilio is still easier to use with better apps than Syncthing, and in theory their corporate business model seems sustainable (more so than the previous parent company) and can provide useful corporate support when such needs occur. But there's still lingering doubts after all this time that they will continue to do the right things, support the software well, and it is closed source so there's not a lot of community support options if the company's business model pivots in any accidentally similar way to the events that lead to Resilio existing in the first place.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#89
post #71

Is there something that would allow a keepass db file to be shared through a REST API? At my current work, we have a lot of credentials to test environments shared on one single keepass file and I am wondering if I could securely use it as a network accessible (VPN only) vault and ideally something I could programmatically fetch those credentials for CI.

This feels like an XY problem to me. I for sure wouldn't want anyone to reinvent a security API, and that goes doubly for doing so on top of a system that is inherently single-user. As the others have pointed out, Vaultwarden exists and is GPLv3. The bitwarden CLI should work with it and is also GPLv3

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#90
post #67

Earlier quoted context omitted.

Before .NET Core, C# can't run natively on non-Windows. That's probably the only real advantage.

I guess mono never happened...

In fact, Keepass is actively supporting mono (they regularly have patches that improve mono support)
Post reply on HN