Live data from Hacker News

KeePass: OpenSource Password Manager

keepass.info

21–30 of 138 posts

Re: KeePass: OpenSource Password Manager

#21
post #16

Guys, perhaps you should take a look at this and be a little careful with the use of this kind of programs. https://twitter.com/_sinn3r/status/429789012673302528

At a first glance this looks like a keylogger to me. When your system was already successfully attacked then you’re in trouble.

Re: KeePass: OpenSource Password Manager

#22
I put a tiny Truecrypt container on my file hoster (HiDrive, Skydrive, Dropbox, etc.) in which I store the KeePass keystore. The keystore itself can't get decrypted, but in case AES has weaknesses one first needs to crack the triple encryption of AES+Serpent+Twofish of the Truecrypt container.

Re: KeePass: OpenSource Password Manager

#26
post #19

How does it compare to 1Password? Lmgtfy, I know, just wanted HN's thoughts.

It is GPL and you have the control over your keyfile(s). A browser plugin for the commercial services could any time sneak evil bits in, so you might feel less safe with them (they could upload your masterkey or your decrypted keyfile, when asked by the NSA).

I'm not sure that would be the case based on http://blog.agilebits.com/2013/12/31/the-nsa-can-do-what-to-... (scroll to the Miscellany section)

Re: KeePass: OpenSource Password Manager

#27

It doesn't look so flash using my dark theme unfortunately (Gnome 3, Blackbird theme): http://i.imgur.com/NQYDBQ8.png

Looks like the menu widget and icons are not using GTK for whatever reason. It may be worth pinging the KeePass developers with a screenshot showing that the GTK theme is not being respected properly when rendering the menu - the menu even looks odd using a light-colored theme like Clearlooks because it doesn't match the theme.

Re: KeePass: OpenSource Password Manager

#28
I recommend OneShallPass (http://oneshallpass.com) over KeePass. It's open source and auditable like KeePass, but:

1) It doesn't have to be compiled or installed, since it's just a monolithic HTML page with all JS/CSS inline.

2) It has a free, optional hosted service that stores encrypted passwords with pure client-side decryption, so you can get your passwords from any web-enabled device without having to trust the host.

Re: KeePass: OpenSource Password Manager

#29
post #4

And if you need multiplatform, there is always KeePassX [1]. I use it on Mac OS X, Windows, iOS, Android and Linux, and it just works. [1] https://www.keepassx.org/

I was hoping I could find exactly this. Thanks.

The source[1] is also on GitHub too. As a non-c++ programmer, I found it pretty easy to follow along.

[1]: https://github.com/keepassx/keepassx

Re: KeePass: OpenSource Password Manager

#30
post #27

It doesn't look so flash using my dark theme unfortunately (Gnome 3, Blackbird theme): http://i.imgur.com/NQYDBQ8.png

Looks like the menu widget and icons are not using GTK for whatever reason. It may be worth pinging the KeePass developers with a screenshot showing that the GTK theme is not being respected properly when rendering the menu - the menu even looks odd using a light-colored theme like Clearlooks because it doesn't match the theme.

KeePass 2 is built on C# and works in Mono. It doesn't use Gtk# but WinForms, which on Linux doesn't follow theming well.
Post reply on HN