Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Password Managers

lock.cmpxchg8b.com

Post reply on HN
Print view View original

101–110 of 342 posts

Re: Password Managers

#101

Post by kiwijamo »

dijksterhuis wrote: post #34
hobos_delight wrote: post #23

Earlier quoted context omitted.

I recently moved my passwords from an expired 1Password account to Bitwarden (right at the time they announced linux support actually, which was always the biggest thing I missed). Bitwarden has a FF extension and allows me to use it across mac/windows/linux.

I was looking at Bitwarden yesterday as I've been putting off moving over from LastPass and 1Password seemed weird with importing from it. Is Bitwarden decent enough? The fact that it has a cli, FF extension etc. on a free plan is pretty tempting.

It's fantastic. I use the Firefox extension on my laptops. On my Android I have the app. It is very convenient having access to the same password store across multiple devices. If you have iOS it's even better as it hooks into the iOS password manager API so apps and websites that present a login screen can be autofilled using Bitwarden. Android has something similar but doesn't work quite as well but it's easy enough to copy and paste from the Android app. Very happy with it.

Re: Password Managers

#103

Post by prophesi »

arkadiyt wrote: post #12
prophesi wrote: post #10

tl;dr: browser extensions are bad therefore all password managers are bad Also find it odd the author uses Chrome, which doesn't even let you set a master password to E2E encrypt its password store.

That's not true, you can set a sync passphrase which e2e encrypts your synced content (all of it, not just passwords).

Nice, that wasn't the case when I was still okay with Google.

In that case, I find it odd that the author doesn't recommend setting a sync passphrase, as that's not enabled by default.

Re: Password Managers

#105

Post by FooHentai »

Dedime wrote: post #97

Here's a the best solution I've found for those looking for password manager recommendations. It's secure, free open source, easy to use, and syncs to all of your devices 1. Password manager for PC / Laptop: KeePassXC. It's not built into your browser, it's a seperate application. It's totally open source, and trusted by many. It also supports two factor authentication, I use a passphrase and a key file. Supports TOT…

My setup is almost identical, though I skip the browser plugins and let the password manager auto-paste into the browser. Keepass inside GDrive, job done. Very occasionally I'll make a copy out to a portable drive.

I've been running this setup for about a decade,since some big breach (I forget which one) made it clear to me that using the same or similar passwords across multiple sites was not gonna fly any longer.

The initial time investment was surprisingly heavy - I iterated through every online login I could find for myself (searching through email history mostly for signups confirmations) and changed the password on every account I had. Took about two full days.

Re: Password Managers

#106

Post by marcus_holmes »

I get that nowadays the alternative to password managers is browsers. But they were mostly developed when the real alternative was trying to remember all those passwords, or duplicate them, or write them down somewhere.

I used to have random passwords scattered over multiple browsers, because I change browsers.

Then I got a password manager, and imported all my chrome passwords... and there were hundreds of them. All the old ones, all the weird little ones that I never cared about. It took me ages to clean this data set and delete all the crap.

So no... never going back to storing passwords in the browser, thanks. I realise that technically a malicious site could possibly mess with my password manager. But I'm more worried about what the browser is doing.

Re: Password Managers

#107

Post by newdude116 »

A4ET8a8uTh0 wrote: post #15

After building my new rig, I also made a successful jump from Windows 7 to PopOS. It was mostly a very smooth transition, but I am having real problems with replacing Password Safe I used on Win. I eventually defaulted to using FF for passwords, but it still feels wrong. Password Safe had password generators, space for notes.. lil things that I keep missing.

This is the best password manager I know: https://www.enpass.io/

It should solve your problems. It is not open source and costs money if you want to use it on your phone (which I don't). Saves everything. PW, CC, notes, certificates etc.

Re: Password Managers

#108

Post by ramraj07 »

FooHentai wrote: post #105
Dedime wrote: post #97

Here's a the best solution I've found for those looking for password manager recommendations. It's secure, free open source, easy to use, and syncs to all of your devices 1. Password manager for PC / Laptop: KeePassXC. It's not built into your browser, it's a seperate application. It's totally open source, and trusted by many. It also supports two factor authentication, I use a passphrase and a key file. Supports TOT…

My setup is almost identical, though I skip the browser plugins and let the password manager auto-paste into the browser. Keepass inside GDrive, job done. Very occasionally I'll make a copy out to a portable drive. I've been running this setup for about a decade,since some big breach (I forget which one) made it clear to me that using the same or similar passwords across multiple sites was not gonna fly any longer. T…

After realizing how every program running on your machine can Snoop on your clipboard I'm never allowing any program to send my password to the clipboard again.

Re: Password Managers

#109

Post by massysett »

Wowfunhappy wrote: post #57
ajsnigrutin wrote: post #46

For my parents, i tell them to just write the password down on a piece of paper. If someone breaks in their house,they have a bigger problem than someone reading their emails, and since they live off givernment pensions, there is not a lot of money that can be stolen via the internet.

I wouldn't be worried about someone breaking in, so much as the paper getting lost.

For most people who need advice on how to manage passwords, they're a lot more likely to hose their computer in some way than they are to lose a piece of paper.

Re: Password Managers

#110

Post by newdude116 »

r6203 wrote: post #51
A4ET8a8uTh0 wrote: post #15

After building my new rig, I also made a successful jump from Windows 7 to PopOS. It was mostly a very smooth transition, but I am having real problems with replacing Password Safe I used on Win. I eventually defaulted to using FF for passwords, but it still feels wrong. Password Safe had password generators, space for notes.. lil things that I keep missing.

I'm using KeepassXC [1] for that. [1]: https://keepassxc.org/

I used it before I moved to enpass. There were a few reasons. I think the main one was that it did not offer pw synchronization between my desktop and laptop. Once I got used to enpass, it felt much more convenient. I don't use the browser add-ons. I C&P PWs
Post reply on HN