Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePass is the free, open source, light-weight and easy-to-use password manager

keepass.info

Post reply on HN
Print view View original

111–120 of 131 posts

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#111

Post by cam_l »

mos_basik wrote: post #110

I see nobody's mentioned TOTP support yet. My stack is KeePassXC on computers, Keepass2android on mobile and Dropbox for syncing. A few months ago I realized that both of my clients showed a TOTP option. Went digging a little and realized that there was enough support that I felt completely comfortable jumping ship away from Google Authenticator. Google Authenticator had been worryingly opaque to me until then - you…

Not only totp, but you can also get it to populate ssh-agent with a select set of keys only when kpxc is logged in.

You can also have multiple files to handle different contexts, if you want some separation ie. 2FA-ness.

(you might also try keepassdx on android if you want a bit more polish)

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#112

Post by aborsy »

almog wrote: post #56
nimbius wrote: post #34

daily reminder: the standard password manager is pass. https://www.passwordstore.org/

I imagine it might be obvious for most users and potential users of pass, and being in line with the unix philosophy, it might be by design, but still, since I didn't see it mentioned in the documentation, it's worth mentioning: By itself, Passwordstore will not encrypt file names or directory names (which by convention represent the names of the service/site you have an account with). That might not pose a problem i…

You may not need to encrypt file names. Those are website address and perhaps with usernames, and public information.

It’s like suggesting to encrypt public keys.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#113

Post by stjohnswarts »

I just installed my vaultwarden as a stand alone bitwarden and imported my bitwarden data to it. It was actually pretty painless and runs in like 1/10 the space of the bitwarden (self hosted) server on a cloud instance. In the next couple days I think I'll test backup and such and if it works I'll be moving over to that from bitwarden. I have used keepass in the past but I prefer programs like lastpass and bitwarden with browser plugins.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#114

Post by stjohnswarts »

xtracto wrote: post #49
n4r9 wrote: post #10

Earlier quoted context omitted.

For the super paranoid, SyncThing provides a straightforward way for you to synchronise your database between various local devices without having any data in the cloud at all. [edit: Syncthing's Discovery Server probably counts as data, actually; you can work around that but then it's less "straightforward"]

OMG I tried to setup SyncThing a couple of months ago to sync my KeePassX (kdbx) between my PC, my MAC and my Android phone. It was hell, I had to fight SyncThing every step of the way (connecting between clients, which one is the receiver and which one is the sender and whatnot), and it just didn't sync. In addition I learned that in Android SyncThing cannot sync to an external SD card ( https://github.com/syncthing…

I remember trying something similar and I kept getting weird results like repeated folders that didn't sync and then when they would I'd have 2 copies of somethign not knowing which I should keep. Maybe it's gotten better a couple years later?

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#115

Post by stjohnswarts »

rvz wrote: post #39
jamessb wrote: post #16

Earlier quoted context omitted.

If you don't want to trust Bitwarden with your data, you can self-host a server yourself (either running the official server [1] or the compatible Vaultwarden [2]). [1]: https://github.com/bitwarden/server [2]: https://github.com/dani-garcia/vaultwarden

Exactly. If you can self-host a password manager then surely you can self-host a Git repository as well and use that instead and avoid this: [0] [0] https://news.ycombinator.com/item?id=32735734

and get into merge hell when you forget to push and have passwords added on two different binary blobs? no thanks. I prefer using something that was meant to be a password server

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#116

Post by stjohnswarts »

presto8 wrote: post #79

KeePass looks nice. Currently I'm using pass but I will investigate KeyPass either as a recommendation for others or possible alternative to my current solution. I set up pass (on Linux and Mac, using brew) with two GPG keypairs, a soft keypair and a YubiKey. The YubiKey goes in a physical safe along with instructions for next of kin (and as an ultimate backup for me). YubiKey is protected with PIN. For daily use, us…

Look at KeepassXC and vaultwarden as well before you decide on a final app.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#117

Post by stjohnswarts »

viridian wrote: post #58
bloaf wrote: post #32

Earlier quoted context omitted.

It would regularly fail connect to the browser plugins when I tried it (despite successfully connecting previously), and the browser plugins failed to autofill more often than not. There were a ton of usability headaches in the core application too. The UI was quite unintuitive. It may be technically great, but that's just one dimension of greatness.

Sorry, I've never used the browser plugins. Personally, generally don't want code with squishy, hard to conceptualize access rights having more access to my web data than I intend, so I just run the desktop app or mobile app and use the copy password button to add it to the clipboard for 10 seconds.

ehhhhh lots of programs can watch your clipboard.... 10 seconds is an eternity in the lifetime of malware.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#118

Post by stjohnswarts »

behnamoh wrote: post #41

Here we go again: Some company (in this case, Bitwarden) "betrayed" its customers by doing what every other firm does. And Hn goes brrr over it. I wonder, aren't the majority of HNers working at a for-profit company funded by VCs? The hypocrisy is just intolerable at this point.

I took more as "bitwarden is now involved with VC so watch the news for changes". We all know what happens when VC take over a private company. Customer focus often suffers as the bean counters start making the company thing in terms of quarters as issue #1

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#119

Post by stjohnswarts »

behnamoh wrote: post #96
dathinab wrote: post #66

Earlier quoted context omitted.

Doesn't mean the companies the work for did so. Doesn't mean they agreed with their employers decision. Doesn't mean they don't complain about it when their company does it. Doesn't mean they don't raise complains internally with their employer. But what do you expect? They quitting their job about this, many can't afford it. They mentioning how bad their employer is too every time they complain about a different com…

At the end of the day, engineers/programmers are the ones who implement these changes. I find it unacceptable that lots of HNers get so high minded about these issues but then go on to contribute to the problem by working at for-profit companies. Nothing wrong with either one, just choose one.

At the end of the day engineers and programmers receive dollars for hours worked and can often be ambivalent about whether that is good or bad for customers because they no longer are valued by management as input to features and the future direction of the company.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#120

Post by stjohnswarts »

ReptileMan wrote: post #5

Does anyone has a good self hosting sync scheme? Keepass is awesome... But hadn't managed the sync to work smoothly yet

password-store is another solution if you're CLI and scripting inclined. It also has browser plugins. KeepassXC + a cloud "dropbox", make sure that it is set to save after every change to the password database. It also has plugin for popular browsers. Vaultwarden is another option and the one I am likely to switch over to after this announcement.
Post reply on HN