1Password is another good option, but it will cost you a bunch.
It's completely worth it. It took me ages to decide, but it's absolutely indispensable now.
KeePass: OpenSource Password Manager
81–90 of 138 posts
Re: KeePass: OpenSource Password Manager
#82Using KeePass combined with btsync - fairly decent combination. Have my db synch'd across all my devices, and available from any desktop machine I have access to. Haven't tried using the android version, but I'm sure it works well.
Now I just have to trust the security of btsync
Re: KeePass: OpenSource Password Manager
#83Earlier quoted context omitted.
For personal use, I've been using LastPass for a few years but have been slowly migrating away from it in recent months. I'm switching to KeePassX which I already use for $work-related data. (I have intentionally avoided the Mono-based applications.) KeePassX has similar "auto-fill" functionality as well. It's not as perfect or as seamless as LastPass but it is definitely usable (after a bit of one-time per-site twea…
As others have said, why migrating away from LastPass? They definitely seem to be doing things properly in terms of security and I've been very happy with the security, as well as the ease of use when I set it up on a new machine.
The problem with in-browser password management is that the attacker does not need to escape the browser. Code injection (via XSS or a browser exploit) into a running extension is likely easier than defeating the seccomp-IPC implementation or the AppArmor/SELinux profiles which protect the system. Addons like LastPass are mainly concerned with remote server weaknesses, but nothing will protect the browser from itself.
Another opinion: It's weird loading a browser+environment for non-browser passwords (SSH, HTTP/WebDAV, etc), and it's equally weird managing the passwords separately.
Re: KeePass: OpenSource Password Manager
#84If I save the database to dropbox so that I have it on multiple PC's at once, how can I ensure I do not overwrite a database that has new entries? For example say on PC-A I make a change and save it. On PC-B I have the old database still opened and loaded in KeePass. What happens if I then save in PC-B without opening the database up? That means I just lost the one password?
I've had this experience with 2.x and as I recall, on machine B where the file was already open with unsaved changes, I was prompted to merge changes after Dropbox updated the file on disk. Without recalling the details, I was pretty impressed.
Ah okay. Did not know there was a merge function!
Re: KeePass: OpenSource Password Manager
#85I use this small commandline application called assword[1]. Available on Debian and probably quite easy to get it to work on other GNU/Linux based systems.
Re: KeePass: OpenSource Password Manager
#86I'm quite surprised to see this on HN homepage, I mean this is such a great and popular tool that I would expect everyone to know about it and find it just an obvious link not to upvote. Does anyone know if there is a lib to read and write into keepass archives programmatically, e.g. from a C# app? that would be quite useful to manage in an automated way some credentials for production systems, sharing tha archive vi…
This may work: http://keepass.info/help/v2_dev/scr_index.html
Re: KeePass: OpenSource Password Manager
#87Installed it, seen "I understand that my encrypted data will be sent to LastPass" then uninstalled it. O_O Yeah, definantly better use KeePassX software. Passwords should never be stored online no matter how secure the service claims to be. Especially with recent revelations about all this privacy/security issues in USA. The KeePassX is still in alpha stages, the only availble stable linux version right now for KeePassX is v0.4.3
Re: KeePass: OpenSource Password Manager
#88Being on OS X, I have moved to 1Password. I'm, to this day, a dedicated proponent of Keepass. Anyone, asking me to suggest a Password Manager - my first answer is Keepass (Windows or Linux). Even for OS X, if one cannot afford 1Password yet or do not want to buy it just yet, Keepass is the one. * Spend some time learning the Keyboard shortcuts and you're all set. * Keep the Keepass File on Dropbox, so it's sync acros…
Regarding password generation, if you're using OS X you can use Alfred with a workflow to generate a password.
Re: KeePass: OpenSource Password Manager
#89I started using KeePassX because it was a good cross-platform way to store my passwords. I'd had a couple cases where a password had simply gone -missing- for me, so I figured it was time to put all my eggs in one basket and try to not drop that. I figured it was less of a security vulnerability than reusing the same password a bunch of times. I've currently got the kbd file up on the internet at large, in case my house burns down. I figure it'll make HN if the .kbd files are ever found to be hackable, right?
It's a sort of wishful, hopeful approach to password security, really.
Re: KeePass: OpenSource Password Manager
#90For those looking for something ultra lightweight, I highly recommend pwdhash ( http://pwdhash.com ). It's not a password manager, it's just an open source hashing algorithm that protects you from sites storing your password poorly. Instead of depending on them to store your password in a one-way hash, it does it on your end before sending the password to the site. The algorithm is very roughly base64encode(hash(pass…
I built something like this a while back* but with a slightly more complex algorithm to make it more difficult to find the master password from a set of hashes. I ended up ditching it in favor of KeePass mostly because if a site is hacked and your plaintext hash is compromised there isn't a clean way to generate a new password every time.