Live data from Hacker News

KeePass: OpenSource Password Manager

keepass.info

41–50 of 138 posts

Re: KeePass: OpenSource Password Manager

#41
A while back I set off half a day to setup KeePass, not that setting up KeePass takes that long - but generating random passwords for all the sites that I use did. KeePass is great, there's an app for Windows Phone that is great and there is a third party plugin for Chrome that will both enter and help me save passwords when the vault is open.

Great software, everyone should be using password vaults.

Re: KeePass: OpenSource Password Manager

#43

I recommend OneShallPass ( http://oneshallpass.com ) over KeePass. It's open source and auditable like KeePass, but: 1) It doesn't have to be compiled or installed, since it's just a monolithic HTML page with all JS/CSS inline. 2) It has a free, optional hosted service that stores encrypted passwords with pure client-side decryption, so you can get your passwords from any web-enabled device without having to trust th…

> 2) It has a free, optional hosted service that stores encrypted passwords with pure client-side decryption, so you can get your passwords from any web-enabled device without having to trust the host.

This is an unbelievably audacious security shell game; I can't really believe this nonsense idea has somehow managed to gain traction.

The server is ephemerally delivering the code that supposedly encrypts your content securely.

How do you not have to trust the host?

Re: KeePass: OpenSource Password Manager

#44
post #38

The only problems I have with KeePass are it is Windows-first (though I know there are third part native clients for Linux, OS X, Android etc) and that browser integration is not comparable to something like LastPass. I do want to get away from LastPass as my trust in the cloud (especially US based cloud services) took a dive after Snowdon.

Except that Lastpass doesn't know your passwords. Everything is encrypted before it is sent to Lastpass using a password you control.

Re: KeePass: OpenSource Password Manager

#45
Does anyone know a way to read usernames/passwords from a KDBX file hosted on Dropbox/Google Drive (similar to 1passwordAnywhere)? That way, if I'm at a new computer, I do not need to download KeePass to open my KDBX.

Re: KeePass: OpenSource Password Manager

#47
post #42
post #23

Any way to transfer LastPass passwords? I've got a huge deal of entries in Lastpass

As of 2.23 via Debian yes: http://i.imgur.com/vCKvoZF.png

Great! What I did was download Lastpass Portable Version and then exported it as a CSV and imported it into KeePass. KeePass already seems more ideal than LastPass.

Re: KeePass: OpenSource Password Manager

#48

I've been having it on my various systems (Windows, Linux, Android) in the sidelines for a couple months, and after initial fiddling, still haven't actually started using it. This is mostly because I don't want to have to deal with copy-pasting my password between the KeePass app and the browser (where most of my passwords are needed). Luckily, there are autofill plugins that exist for Chrome [1], Firefox [2], and An…

For personal use, I've been using LastPass for a few years but have been slowly migrating away from it in recent months. I'm switching to KeePassX which I already use for $work-related data. (I have intentionally avoided the Mono-based applications.)

KeePassX has similar "auto-fill" functionality as well. It's not as perfect or as seamless as LastPass but it is definitely usable (after a bit of one-time per-site tweaking in some cases). Having recently decided that using LastPass presents a non-zero risk, the extra effort I have to spend w/ KeePassX is certainly worth it, IMO.

Although I don't do it now, I have in the past kept my password databases in Dropbox. With Dropbox also installed on my iPhone, I am able to access my password databases use "MiniKeePass" on iOS without any issues.

In addition, there are Windows, Linux, and OS X versions of KeePassX and all of them can open up my .kdb files without any issues.

Re: KeePass: OpenSource Password Manager

#49
post #10

Earlier quoted context omitted.

The dependencies for this seem more appealing than KeePass but unless my searching skills are not up to par there don't appear to be any browser autocompletion plugins.

I've found autotype to be more than enough personally: http://keepass.info/help/base/autotype.html In fact, I usually just copy the password with Ctrl-C and the username with Ctrl-B. You can configure a secure clipboard erase after n seconds. One thing I really wish had better support is ssh-based entry-level sync of databases[1]. Keepass has a plugin for it but I don't know the status for KeepassX 2 (currently in a…

I've used autotype before and it works fantastic, but you have to be super careful with it. It basically switches back to the last window you had open and immediately types your username and password in. It is very easy for this to type your credentials into the wrong window. When using it (I used it a lot for vmware sessions through an rpd connection), I would find myself clicking back and forth from the target window to keepass a couple times to ensure I was going to hit the right window.

Re: KeePass: OpenSource Password Manager

#50
post #44
post #38

The only problems I have with KeePass are it is Windows-first (though I know there are third part native clients for Linux, OS X, Android etc) and that browser integration is not comparable to something like LastPass. I do want to get away from LastPass as my trust in the cloud (especially US based cloud services) took a dive after Snowdon.

Except that Lastpass doesn't know your passwords. Everything is encrypted before it is sent to Lastpass using a password you control.

...and a mechanism provided by the party you are attempting to secure passwords from. I use LastPass, but just sayin'.
Post reply on HN