Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePass is the free, open source, light-weight and easy-to-use password manager

keepass.info

Post reply on HN
Print view View original

51–60 of 131 posts

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#51

Post by vetinari »

baal80spam wrote: post #22
slaymaker1907 wrote: post #12

Earlier quoted context omitted.

You should try out KeePassXC if you haven't already. It's cross platform and I think it's better than the official client on Windows.

I also use KeePassXC for several years now and think it is better (hey, it has dark mode!) however it doesn't support plugins so it might not be a viable solution for everyone. I love KeePass for many reasons but one of the killer features for me is notes and encrypted attachments. It's also one of the reasons why I won't switch to applications like Bitwarden.

> but one of the killer features for me is notes and encrypted attachments. It's also one of the reasons why I won't switch to applications like Bitwarden.

Bitwarden has both ;)

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#52

Post by ThunderSizzle »

barbazoo wrote: post #50
ZacharyPitts wrote: post #38

Earlier quoted context omitted.

Short answer: written in C++ instead of C# I also have used keepassxc for years now on mac/windows/linux/iphones

> written in C++ instead of C# what are the advantages of that?

Before .NET Core, C# can't run natively on non-Windows. That's probably the only real advantage.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#53

Post by cycomanic »

kemayo wrote: post #27

In a way this is a nice example of why 1Password or BitWarden are doing well. This might work out okay for a technical person, but the average user isn't going to look at the KeyPass downloads page [1] and feel confident about what to download -- even assuming they're using Windows, you need a phone app and sync for meaningful password management these days... and that's very worrying in their presentation. Whereas 1…

I am not sure what you are looking at, but when I go to the 1password page from my mobile I see big buttons with: memberships, families, business and team, Mac, Windows, Linux, IOS, apple watch, android, 1password in the browser, scim Bridge, cli, secrets automation, ssh, desktop betas, browsers,android betas, IOS betas, previous versions.

Now that is a whole different level of confusing then keepass. I mean I generally know what I'm looking for, but wouldn't know if I should click on the families or Linux button for example. So I think this refutes your point that market share is due to the download page.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#54

Post by n4r9 »

xtracto wrote: post #49
n4r9 wrote: post #10

Earlier quoted context omitted.

For the super paranoid, SyncThing provides a straightforward way for you to synchronise your database between various local devices without having any data in the cloud at all. [edit: Syncthing's Discovery Server probably counts as data, actually; you can work around that but then it's less "straightforward"]

OMG I tried to setup SyncThing a couple of months ago to sync my KeePassX (kdbx) between my PC, my MAC and my Android phone. It was hell, I had to fight SyncThing every step of the way (connecting between clients, which one is the receiver and which one is the sender and whatnot), and it just didn't sync. In addition I learned that in Android SyncThing cannot sync to an external SD card ( https://github.com/syncthing…

It works just fine for my PC, laptop and Android. Shame that you had a bad experience with it although perhaps your use case is a bit unusual. Although that's surprising about Android being so difficult to work with in Go. It sounds like this is being resolved in Android 10 upwards: https://github.com/syncthing/syncthing-android/wiki/Frequent...

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#55

Post by nix23 »

viridian wrote: post #19
nix23 wrote: post #2

Use KeePassXC please.... Or pass if your only on unix'es ;) https://www.passwordstore.org/

KeePassXC is one of the best pieces of software out there. Does exactly what it needs to do, runs on every device I've ever owned, and has been independently audited for implementation weaknesses. It's not just great FOSS software, it's just straight up great software.

>and has been independently audited for implementation weaknesses.

True, and also recommend by the EFF:

https://ssd.eff.org/en/module/creating-strong-passwords

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#56

Post by almog »

nimbius wrote: post #34

daily reminder: the standard password manager is pass. https://www.passwordstore.org/

I imagine it might be obvious for most users and potential users of pass, and being in line with the unix philosophy, it might be by design, but still, since I didn't see it mentioned in the documentation, it's worth mentioning:

By itself, Passwordstore will not encrypt file names or directory names (which by convention represent the names of the service/site you have an account with).

That might not pose a problem if no one else has access to the machine that hosts your git repo, but if that's not the case (even if it's a private repo on whatever platform), you might want to use either Tomb or git-crypt-remote to have full end-to-end encryption. There are even some tools that glue tomb and pass together (https://github.com/roddhjav/pass-tomb for one), though I'm not sure what's the situation is like when it comes to mobile integration with tomb/git-crypt-remote.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#57

Post by schlauerfox »

sizzzzlerz wrote: post #21

I've been using KeePass on my windows PCs and Mac/IOS compatible versions on macs, iPads, and iPhones for years. I have my database on Dropbox so that all the Apple devices sync to the same file and a keep a local copy on my PC that is automatically updated from the Mac using WinSCP, a .bat file, and task scheduler. I have to do the copy thing because Dropbox reduced the number of devices that can access it directly…

I keep the database in onedrive, but I keep a keyfile in addition to my password that I never put on the shared folders online.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#58

Post by viridian »

bloaf wrote: post #32
viridian wrote: post #19

Earlier quoted context omitted.

KeePassXC is one of the best pieces of software out there. Does exactly what it needs to do, runs on every device I've ever owned, and has been independently audited for implementation weaknesses. It's not just great FOSS software, it's just straight up great software.

It would regularly fail connect to the browser plugins when I tried it (despite successfully connecting previously), and the browser plugins failed to autofill more often than not. There were a ton of usability headaches in the core application too. The UI was quite unintuitive. It may be technically great, but that's just one dimension of greatness.

Sorry, I've never used the browser plugins. Personally, generally don't want code with squishy, hard to conceptualize access rights having more access to my web data than I intend, so I just run the desktop app or mobile app and use the copy password button to add it to the clipboard for 10 seconds.

Re: KeePass is the free, open source, light-weight and easy-to-use password manager

#59

Post by dathinab »

kemayo wrote: post #27

In a way this is a nice example of why 1Password or BitWarden are doing well. This might work out okay for a technical person, but the average user isn't going to look at the KeyPass downloads page [1] and feel confident about what to download -- even assuming they're using Windows, you need a phone app and sync for meaningful password management these days... and that's very worrying in their presentation. Whereas 1…

> phone app and sync for meaningful password management these days

Idk. I very intentionally decided to not have 98% of my passwords on my phone. (The remaining few rarely change and I put them in my phone by hand without sync.)

This decision was less because of security consider but more because I don't want to be able to access the services through my phone.

If then anyone (especially I myself) wants to pressure me into doing work or anything like that when I'm away it won't work because I simply can't. Makes it easier to switch off after work or on holidays.

Post reply on HN