How is KeepassDX? It's on F-Droid.
It's great, but lacks yubikey support. Might arrive very soon, though, beta is already available in play store, see https://github.com/Kunzisoft/KeePassDX/issues/8
KeePass is the free, open source, light-weight and easy-to-use password manager
91–100 of 131 posts
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#92Earlier quoted context omitted.
If you don't want to trust Bitwarden with your data, you can self-host a server yourself (either running the official server [1] or the compatible Vaultwarden [2]). [1]: https://github.com/bitwarden/server [2]: https://github.com/dani-garcia/vaultwarden
yes but don't you still need a 'license key' to unlock the full set of features? E.g. sharing among a team?
Yes, but only to use the official Bitwarden server. The Vaultwarden project is an alternate server implementation that does not require a license key.
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#93Earlier quoted context omitted.
For the super paranoid, SyncThing provides a straightforward way for you to synchronise your database between various local devices without having any data in the cloud at all. [edit: Syncthing's Discovery Server probably counts as data, actually; you can work around that but then it's less "straightforward"]
OMG I tried to setup SyncThing a couple of months ago to sync my KeePassX (kdbx) between my PC, my MAC and my Android phone. It was hell, I had to fight SyncThing every step of the way (connecting between clients, which one is the receiver and which one is the sender and whatnot), and it just didn't sync. In addition I learned that in Android SyncThing cannot sync to an external SD card ( https://github.com/syncthing…
> In addition I learned that in Android SyncThing cannot sync to an external SD card ( https://github.com/syncthing/syncthing-android/issues/1366 ) .
This should be fixed: https://github.com/syncthing/syncthing-android/pull/1724
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#94Earlier quoted context omitted.
I'm really not sure what you're looking at, but on 1Password's mobile site there's a huge button to download from your phone's store on the homepage. The "Try 1Password FREE" button takes you to a well laid-out pricing page. Edit: Ah, I guess you might be talking about the small Downloads section in the footer. Even that's much more clear than a page with a 2.x download, 2.x portable download, 1.x download, 1.x porta…
I replied in a different comment that I landed on the community page. But I have to say, arguing that the downloads buttons on keepass are more friction than "get started" (I don't see a app store link) which takes me to the business offer and then the family offer where I have to register an account and provide payment details, is a bit of a stretch. And bitwarden is very similar. Sure I can search on the playstore,…
I think that's just the downside of 1Password/Bitwarden's business model. The best they can do is explain the core features on the splash page, as you'd need a valid account to actually use the app in the first place.
KeePassXC is probably the closest to ideal. It could just use more info about what it does on the homepage, and change its name for better marketing. But the project states itself that their audience is "for people with extremely high demands of secure personal data management" so I doubt that would ever be addressed.
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#95I've been using Bruce Schneier's Password Safe for years - very happy with it. I was recently looking at KeePass. I've dug into the comparison a little bit, but I'd be interested to hear this community's take on KeePass vs. PasswordSafe.
I've used PasswordSafe for some years. My only complaint is I'd like a way to access the user, pass and notes in a view-only mode without editing so I don't accidentally trash something.
I switched to KeePassXC on one of my laptops and it seems OK but requires more clicking to access and autotype a username and password. I haven't switched on any other devices. Still undecided.
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#96Here we go again: Some company (in this case, Bitwarden) "betrayed" its customers by doing what every other firm does. And Hn goes brrr over it. I wonder, aren't the majority of HNers working at a for-profit company funded by VCs? The hypocrisy is just intolerable at this point.
Doesn't mean the companies the work for did so. Doesn't mean they agreed with their employers decision. Doesn't mean they don't complain about it when their company does it. Doesn't mean they don't raise complains internally with their employer. But what do you expect? They quitting their job about this, many can't afford it. They mentioning how bad their employer is too every time they complain about a different com…
At the end of the day, engineers/programmers are the ones who implement these changes. I find it unacceptable that lots of HNers get so high minded about these issues but then go on to contribute to the problem by working at for-profit companies. Nothing wrong with either one, just choose one.
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#97Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#98Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#99Earlier quoted context omitted.
There are two: Strongbox[1] and KeePassium[2]. [1]: https://strongboxsafe.com/ [2]: https://keepassium.com/
Thanks! Do you recommend any of them?
I do not, although I use Strongbox - liked the UI a tick better. They are pretty similar feature-wise, KeePassium is a tick cheaper for the pro-tier, and sources are available. Strongbox is able to merge the DB in case of conflict. And in reality both apps are written by a single guy, so I would say it is a draw :)
Re: KeePass is the free, open source, light-weight and easy-to-use password manager
#100I hate KeePass so much at work. But we still have to use it because our security leadership insist on it. It's not a bad tool for a home user with one PC but it's totally inadequate for an enterprise scenario. But they keep insisting it's safe because it's been audited and the encryption is strong. Sure but what's the point of encryption if you store the password in a text file in the same folder or in some cases in the actual filename :(
I've compiled a huge list of issues to convince them. Like no audit logs. No password complexity enforcement. No single password sharing with third parties (you have to give them the entire thing and password or create a new one which they can open forever). No central overview. We have no idea how many passwords are stored, how well they are secured (the master password) and who they are shared with and when.
Has anyone found a good argument to convince your leadership? And what did you move to?