Live data from Hacker News

Evaluation of five password managers

medium.com

161–170 of 216 posts

Re: Evaluation of five password managers

#161

Earlier quoted context omitted.

I use keepassxc on MacOS, Windows, Linux, along with MiniKeePass on iOS. It's synced through my free Dropbox account. I just make sure to set the preferences so that every change to the key database results in a file save.

> synced through my free Dropbox account I was always a bit paranoid about this, even though I did it myself.

The decentralised alternative is to use something like SyncThing[0]. It's what I use and is only slightly more involved.

[0] https://syncthing.net

Re: Evaluation of five password managers

#162
No mention of enpass.io, i found their method to be completely safe. Encrypted sqlite files, shared across Dropbox/onedrive/Google-drive.

Apps used for Mac, Linux, windows, browser integration also works fine. All boxes are checked, don't know why isn't it popular among masses or nerd community.

Re: Evaluation of five password managers

#163
post #102

I wonder, why not a single word has been spoken about Keepass/X, which is available on all platforms (not sure about iOS, though), can work with UbiKeys, afaik, has huge im- and export support and is free from any corporate interests.

In iOS I’ve been using Strongbox, which has been excellent for my needs so far (cloud sync and iOS integration). Also supports TouchID.

Re: Evaluation of five password managers

#164
post #161

Earlier quoted context omitted.

> synced through my free Dropbox account I was always a bit paranoid about this, even though I did it myself.

The decentralised alternative is to use something like SyncThing[0]. It's what I use and is only slightly more involved. [0] https://syncthing.net

I use syncthing for some backups, no idea why I've never considered it for keepass. Probably cause I don't want to mix the two and clients don't offer it already integrated. Or are there any? It for sure wouldn't make building the project more easy, and the password manager is the one thing i still want to build form source to at least imagine I have full control over it.

Re: Evaluation of five password managers

#165
Hi folks,

That's a thorough comparison. I just wanted to make an attempt on why someone should consider using Zoho Vault for password management.

Zoho Vault is an online password manager for teams, used by more than 20,000 small and medium sized companies across the globe. We offer client-side encryption, multi-platform support, auto-fill, auto login websites and cloud apps, fine-grained password sharing, bulk folder sharing with user groups, audit, reports, two-factor & multi-factor authentication, US/EU data centers, browser extensions (Chrome, Firefox, Safari), and mobile apps (iOS, Android, Windows), option to maintain personal vault.

Integrations: G Suite, Microsoft Office 365, Zoho Mail, Zoho Desk, OKTA, OneLogin, Single Sign-On for 90+ Cloud Apps, Windows Active Directory/LDAP, Azure Active Directory

Disclaimer: I work for Zoho Vault. If you need a comparison document of Zoho Vault with any product, drop an email to support@zohovault.com.

Re: Evaluation of five password managers

#166
post #85

Glad to see Bitwarden up on top. They tick all the boxes for me - open source, transparent security (including recently published audit), feature-rich, optional self-hosted, and easy to use.

Used to be a keepass user until I found bitwarden. It does everything better, more simply. Sync is handled so much better and the browser extensions are super intelligent at picking up login fields.

Is Bitwarden a native app?

Re: Evaluation of five password managers

#167
I only found out about Bitwarden a few weeks ago and it got me to change from KeepassXC and I'm overall very happy with the change.

The main selling points for me were that it's open source and they allow you to host it yourself.

Apart from these, I really enjoy the browser addons which don't require any jumping through hoops[1] and that they provide their own Android client and you don't have to play Play Store Columbus to find a decent one. It can also be used as an autofill service which allows it to interact with other apps which is incredibly useful.

But because nothing in this world is perfect, the downsides so far are:

1. Lack of shortcuts to copy only the username or only the password and forcing me to reach for the mouse. That's really annoying.

2. With KeepassXC you could have a keyfile that you was necessary to unlock your database while Bitwarden doesn't have that option. They do provide 2FA[2] but only TOTP and email for the free version (although $10/year for the premium subscription, arguably, is not much).

1: https://keepassxc.org/docs/keepassxc-browser-migration/ 2: https://help.bitwarden.com/article/setup-two-step-login/

Re: Evaluation of five password managers

#168
post #167

I only found out about Bitwarden a few weeks ago and it got me to change from KeepassXC and I'm overall very happy with the change. The main selling points for me were that it's open source and they allow you to host it yourself. Apart from these, I really enjoy the browser addons which don't require any jumping through hoops[1] and that they provide their own Android client and you don't have to play Play Store Colu…

> The main selling points for me were that it's open source and they allow you to host it yourself.

KeepassXC is open source too. And it does not require hosting. You can simply store your db onto a synced folder between devices and that's about the same anyway.

As for your comment regarding browser addons, I am not sure what "hoops" you are referring to. I installed the browser addons for KeePassXC and it took 5 minutes to setup and I have had no issue since. And the link you refer to is pretty self explanatory. Maybe Bitwarden makes that even more simple, but it's not that KeePassXC is utterly complex in the first place either.

On Android, KeePassDX is a good client that works with KeePassXC databases.

Re: Evaluation of five password managers

#169

No mention of enpass.io, i found their method to be completely safe. Encrypted sqlite files, shared across Dropbox/onedrive/Google-drive. Apps used for Mac, Linux, windows, browser integration also works fine. All boxes are checked, don't know why isn't it popular among masses or nerd community.

We use enpass too, and it has worked really well for us.

Re: Evaluation of five password managers

#170
post #167

I only found out about Bitwarden a few weeks ago and it got me to change from KeepassXC and I'm overall very happy with the change. The main selling points for me were that it's open source and they allow you to host it yourself. Apart from these, I really enjoy the browser addons which don't require any jumping through hoops[1] and that they provide their own Android client and you don't have to play Play Store Colu…

> The main selling points for me were that it's open source and they allow you to host it yourself. KeepassXC is open source too. And it does not require hosting. You can simply store your db onto a synced folder between devices and that's about the same anyway. As for your comment regarding browser addons, I am not sure what "hoops" you are referring to. I installed the browser addons for KeePassXC and it took 5 min…

You are right about the synced folder, and that's pretty much the approach that I was using. But I was keeping my DB in one provider and my keyfile in another, which means that I had to remember (or have otherwise access to) a total of 3 passwords to unlock my db. It worked, but when I recently had to change phones two times in a period of a few days it was increasingly annoying. Of course I could have kept my keyfile and the DB in the same provider, but still that's one password too many for me.

Thanks for the recommendation for KeePassDX, I will take a look.

Post reply on HN