Live data from Hacker News

Evaluation of five password managers

medium.com

71–80 of 216 posts

Re: Evaluation of five password managers

#71

I rarely see it mentioned, but when 1Password changed to a subscription model I switched to Enpass ( https://www.enpass.io ) and I've been very happy with it.

they don't make it very obvious, but note that 1password doesn't require a subscription. i use it with vaults shared and kept in sync via dropbox for example.

Same. Happy macos 1pwd user here.

Re: Evaluation of five password managers

#72
post #44
post #30

Earlier quoted context omitted.

It really doesn't. I'm a full time linux user and I can tell you the support from both lastpass and 1password is abysmal. I have to copy and paste my passwords from both of those platforms using their half-baked browser plugins that rarely work with linux clipboards.

Interesting. Browser plugins, by nature, include source code. I wonder if there's an easy fix. Can you describe the issue in a little more detail?

Password managers usually use native messaging, ie a native helper app

https://developer.chrome.com/apps/nativeMessaging

Re: Evaluation of five password managers

#73
post #5

No keepass? Disappointed.

The one issue I had with Keepass is that on iOS (and this is Apple's fault!) it is not possible to choose different cloud storage providers to keep the password database file on.

This silly thing alone would preclude me ever buying an iOS device! (My wife ran into it when I tried to get her up and running with Keepass, she gave up...)

I love keepass's simplicity, no browser plugins with pop up dialog boxes or UIs that conflict with the browser's own password management, just, a list of accounts and passwords.

Re: Evaluation of five password managers

#74
post #63

Earlier quoted context omitted.

Unfortunately, 1Password may find its engineers compromised by their government, by virtue of being Australian.

They have literally one support person in Australia.

My apologies, I was mistaken.

Re: Evaluation of five password managers

#75
post #8

> Mac OS, Windows, Linux, Android, and iOS ... full functionality can’t be dependent on an app which is only available on Mac OS and/or Windows. In other words, lack of full Linux support is a show-stopper for us. This ruled out 1Password... ...Huh? 1Password supports all of those platforms (including Linux) https://1password.com/downloads/linux/

That page says, "Requires Google Chrome or Firefox," and the download link takes you to the Chrome web store. I'm not sure the poster considers that full support.

That's somewhat fair, although the 1Password X page (which is what AgileBits calls their in-browser version) describes it as being comparable to the native versions, which to me goes against OP's statement that

> full functionality can’t be dependent on an app which is only available on Mac OS and/or Windows.

The existence of 1Password X means that full functionality is not _dependent_ on a MacOS/Windows app. The argument that there should be a graphical (because there _is_ a multi-platform CLI), native app for Linux, which does not depend on any browser, is a perfectly valid one -- but it is also an argument that I don't believe they've made.

Re: Evaluation of five password managers

#76

Earlier quoted context omitted.

That page says, "Requires Google Chrome or Firefox," and the download link takes you to the Chrome web store. I'm not sure the poster considers that full support.

How many Linux users don't have chrome or firefox installed? I think the article would be a bit more accurate to say there's not native client support for Linux.

None of my headless servers have Chrome or Firefox installed.

Re: Evaluation of five password managers

#77
post #8

> Mac OS, Windows, Linux, Android, and iOS ... full functionality can’t be dependent on an app which is only available on Mac OS and/or Windows. In other words, lack of full Linux support is a show-stopper for us. This ruled out 1Password... ...Huh? 1Password supports all of those platforms (including Linux) https://1password.com/downloads/linux/

That page says, "Requires Google Chrome or Firefox," and the download link takes you to the Chrome web store. I'm not sure the poster considers that full support.

How is this different than just trusting the browser to handle saved passwords in an encrypted manner?

Re: Evaluation of five password managers

#78
post #69

Earlier quoted context omitted.

I love this as well. It supports OTP and there is an awesome Android app for it called Password Store, and a browser extension called Browserpass.

OTP as in Open Telephony Platform? Edit: it turns out OTP is one time password, that's neat! I'm only familiar with that through Erlang and consider it an architectural pattern for supervision trees, would you be willing to expound a teeny bit more on what you mean?

Search for TOTP or HOTP, basically one time passwords, usually shown to end users as QR codes stored in an authenticator on a mobile phone.

Re: Evaluation of five password managers

#79
post #52

In the end I've just been using the Unix pass password manager [1]. It's just cobbling together of GPG and git with shell scripts but it works like a normal git repository so you get all your synchronization, from that, your security from GPG which are all things I know and trust without introducing other components that I don't know / understand. [1] https://www.passwordstore.org/

And because it's using GPG one can easily have secrets unlocked with a Yubikey and only when the blinking button is touched. On a PC and Android both using the same Yubikey token.

For me the combination of features in pass is just perfect! But it's from the same person that created Wireguard so it's no surprise...

Re: Evaluation of five password managers

#80

I've been using masterpassword [1] which is stateless and requires no sync. I wonder what the HN crowd thinks of its features. Another option with the same paradigm is lesspass [2]. 1. https://masterpassword.app/ 2. https://lesspass.com/#/

+1 for deterministic, I use (and wrote) MemPa: https://hackernoon.com/how-i-manage-my-passwords-technical-v...
Post reply on HN