Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.6.1

keepassxc.org

Post reply on HN
Print view View original

31–40 of 119 posts

Re: KeePassXC 2.6.1

#31

Post by paulryanrogers »

selykg wrote: post #12
tarasmatsyk wrote: post #5

Earlier quoted context omitted.

how is your experience in a browser? I honestly tried to use Bitwarden, paid for premium for one time key feature and browser extensions comparing to 1pass are much less convenient. For instance, an ability to manage multiple website (e.g. google) accounts is priceless

Bitwarden supports multiple accounts. If you have two logins for the same service with the same URLs they'll appear in the browser extension with the username shown by the title. If you're instead talking about using the same login credentials on multiple sites, it can do that as well, just edit the item and add a second URL to the site. Now that item will appear on both site URLs

KeePass can support that too. If it sees more than one match when auto typing it'll prompt you to choose.

Re: KeePassXC 2.6.1

#32

Post by driverdan »

jaimehrubiks wrote: post #10
mikece wrote: post #2

KeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.

How can anyone switch to bitwarden given how complex it is to switch back in the future? I love keepass because I am allowed to export my DBS to any other provider with ease. For bitwarden, there is not a good export system (that includes attachments,images...),meaning that I would be vendor locked.

Bitwarden is 100% open source. You can run your own server. There is no vendor lock in.

Re: KeePassXC 2.6.1

#33

Post by kspacewalk2 »

mikece wrote: post #2

KeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.

>best password managers in existence right now

I am using 1Password with a standalone licence (sunk cost, so 'free' doesn't matter much. Also, C$70 is essentially free when it comes to securing my digital life). I sync a vault with a few co-workers via Dropbox and this is sufficient for us, no need for 1Password.com 'cloud' yet.

We like the UI, and to our knowledge 1Password has the best track record for security, with extensive and continuous testing and no major fuck-ups yet.

What advantages to switching to KeePassXC or Bitwarden are there for us?

Re: KeePassXC 2.6.1

#34

Post by Mikescher »

mikece wrote: post #21

I have read that the KDBX4 password database is "very secure" but am curious if any hacking challenges have been conducted to see if anyone can break it? The challenge I have in mind put some kind of contact info in an entry and then post the KDBX file on a public site for anyone to download and try to hack. If you get it open, use the info to contact the contest organizers and once you explain how you overcame the s…

I'm no cryptographic expert, but I always liked the simple design of the kdbx files. So simple that I can understand it and see tat there are no (obvious, assuming the underlying algorithms are called correctly) problems:

The whole database is a single big xml document which is then encrypted with a normal symmetrical encryption method (most of the time AES). And that is already the core of it. There are a few additional things (A user-chosen key-derivation-function is used to increase the brute-force time and there is a header in the binary format with such things as keepass version, which algorithms are used for encrypting and a checksum...).

But in comparison to other cloud-based password managers it's a nice feeling to intuitively "know" whats happening under the hood.

Re: KeePassXC 2.6.1

#35

Post by throwaway8941 »

gchamonlive wrote: post #13
mikece wrote: post #2

KeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.

You can also run your own bitwarden server either with their official server or with bitwarden_rs, a reimplementation in rust that runs better on lower-end hardware

It runs better everywhere. I have set up both and see no difference between them feature wise. Why would you use the official one? It's so resource heavy, more difficult to set up, feels very enterprise-y.

Re: KeePassXC 2.6.1

#36

Post by cpburns2009 »

40four wrote: post #20
ObsoleteNerd wrote: post #4

I’ve been using KeePassXC almost as long as it’s been available, and couldn’t be happier. Database stored on my NAS and synced to Dropbox for when I’m out, gives me access on all my devices without having to worry about whether x or y service will still be around in a year or 2.

Started using Keypass about a year ago, I really like it. Just wondering if Dropbox is considered a safe place to store the DB files? I did this for a while, but then I got paranoid and switched to something fully encrypted. For sharing between devices I found Firefox Send to be useful (before it went down, hope it comes back), also Keybase filesystem is one of my go-tos as well. Maybe I’m being overly cautious, but…

I store the KDBX file in Dropbox, store the key file elsewhere, and use a strong password. Without the key the database file is useless.

Re: KeePassXC 2.6.1

#37

Post by otachack »

nickcw wrote: post #25
mikece wrote: post #17

Earlier quoted context omitted.

Keepass2Android is what I've used.

That is what I'm using too

Same! If you haven't already, please consider Patreon or just donating to the dev directly. We use his app constantly and it's great to support him!

Re: KeePassXC 2.6.1

#38

Post by shmerl »

kspacewalk2 wrote: post #33
mikece wrote: post #2

KeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.

>best password managers in existence right now I am using 1Password with a standalone licence (sunk cost, so 'free' doesn't matter much. Also, C$70 is essentially free when it comes to securing my digital life). I sync a vault with a few co-workers via Dropbox and this is sufficient for us, no need for 1Password.com 'cloud' yet. We like the UI, and to our knowledge 1Password has the best track record for security, wi…

Such tools should be open source.

Re: KeePassXC 2.6.1

#39

Post by ffpip »

MikusR wrote: post #23
roel_v wrote: post #6

I switched to KeePassXC a few months ago from KeePass. The UI is quite clunky in places, but that's easier to live with than being beholden to some online service...

KeePass doesn't have any online service.

I think he was talking about both Keepass and KeepassXC's UI

Re: KeePassXC 2.6.1

#40

Post by chucky »

kspacewalk2 wrote: post #33
mikece wrote: post #2

KeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.

>best password managers in existence right now I am using 1Password with a standalone licence (sunk cost, so 'free' doesn't matter much. Also, C$70 is essentially free when it comes to securing my digital life). I sync a vault with a few co-workers via Dropbox and this is sufficient for us, no need for 1Password.com 'cloud' yet. We like the UI, and to our knowledge 1Password has the best track record for security, wi…

Source code access, and being free of charge seems to be the main things you would get compared to 1Password. Also, great Linux support (from what I've heard 1Password only recently even added a Linux-compatible client).

But to me it sounds like you have a solution you are very happy with, and you don't mind paying for that solution, so my recommendation would be to stick with it.

Although, as a happy user of KeePassXC, I'm tempted to ask the counter-question: why would I want to pay for 1Password when KeePassXC gives me a great solution for free (and also gives me source code access)?

Post reply on HN