Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Evaluation of five password managers

medium.com

Post reply on HN
Print view View original

81–90 of 216 posts

Re: Evaluation of five password managers

#81

Post by zeveb »

zmmmmm wrote: post #52

In the end I've just been using the Unix pass password manager [1]. It's just cobbling together of GPG and git with shell scripts but it works like a normal git repository so you get all your synchronization, from that, your security from GPG which are all things I know and trust without introducing other components that I don't know / understand. [1] https://www.passwordstore.org/

My one concern with pass is that it doesn't encrypt filenames; it's a real pity, as that's an information leak itself.

Re: Evaluation of five password managers

#82

Post by amanzi »

vbezhenar wrote: post #56

For me an important selling point of 1Password was that their software looks like native Windows software and native iOS software while Bitwarden is just Chrome wrapper or something like that for desktop and C# for mobile and I don't want to support that kind of cross-platform software.

1Password felt like Mac/iOS software ported to other platforms.

Re: Evaluation of five password managers

#83

Post by amanzi »

Avamander wrote: post #43
beat wrote: post #19

Has anyone gone through the process of switching? I use Keeper for personal stuff, and I suppose there's always the chance to switch if one turns out to be technically or politically much superior, but there are dozens and dozens of passwords in there to transfer...

I switched from LastPass to Bitwarden, I do not miss a single thing and quite a few irritating things have been fixed.

Agree - switching to Bitwarden was super easy.

Re: Evaluation of five password managers

#84

Post by clairity »

rrdharan wrote: post #70
clairity wrote: post #22

Earlier quoted context omitted.

they don't make it very obvious, but note that 1password doesn't require a subscription. i use it with vaults shared and kept in sync via dropbox for example.

Same. I recently purchased an upgrade and consider it well worth the price, although I'm considering switching to the subscription model / family plan to make it easier to support my parents and in-laws. However my main concern is that you can't disable browser access when using ay of the subscription plans: https://discussions.agilebits.com/discussion/80105/cant-disa...

yup, i don't use 1password.com because of those security concerns.

not sure if it would work for your situation, but it's possible to set up different vaults for different groups of people and share them via separate dropbox folders (or even just different share settings on the vault files). i have 5 vaults set up that way.

Re: Evaluation of five password managers

#86

Post by mnussbaum »

zmmmmm wrote: post #52

In the end I've just been using the Unix pass password manager [1]. It's just cobbling together of GPG and git with shell scripts but it works like a normal git repository so you get all your synchronization, from that, your security from GPG which are all things I know and trust without introducing other components that I don't know / understand. [1] https://www.passwordstore.org/

When I switched to pass one thing I felt the lack of was a keyboard shortcut triggered HUD style search interface on os x. I've been working on a project to do this in case anyone else is in the same boat - https://github.com/mnussbaum/PassHUD

Re: Evaluation of five password managers

#87

Post by _vi99 »

Thriptic wrote: post #47
vhost- wrote: post #30

Earlier quoted context omitted.

It really doesn't. I'm a full time linux user and I can tell you the support from both lastpass and 1password is abysmal. I have to copy and paste my passwords from both of those platforms using their half-baked browser plugins that rarely work with linux clipboards.

Interesting. Lastpass works perfectly for me on Debian based Linux, and I have friends that use it on arch. I can't speak to use on other distros though.

Same, Lastpass works just just fine for me on Solus in both Firefox and Vivaldi.

Re: Evaluation of five password managers

#88

Post by dcreemer »

vhost- wrote: post #30
mithr wrote: post #8

> Mac OS, Windows, Linux, Android, and iOS ... full functionality can’t be dependent on an app which is only available on Mac OS and/or Windows. In other words, lack of full Linux support is a show-stopper for us. This ruled out 1Password... ...Huh? 1Password supports all of those platforms (including Linux) https://1password.com/downloads/linux/

It really doesn't. I'm a full time linux user and I can tell you the support from both lastpass and 1password is abysmal. I have to copy and paste my passwords from both of those platforms using their half-baked browser plugins that rarely work with linux clipboards.

I use 1Password via the CLI (https://support.1password.com/command-line/) on Linux (well -- FreeBSD) Desktop all the time. I wrote a wrapper for the CLI (https://github.com/dcreemer/1pass) to make it a bit more ergonomic to use with things like FZF.

I used to use "pass" like others here, but did not like the Android experience.

*edited to add: and we use the 1Password team account at my day job -- and are satisfied customers. I'm sure other products work well too -- just my one data point.

Re: Evaluation of five password managers

#89

Post by dgacmu »

beat wrote: post #19

Has anyone gone through the process of switching? I use Keeper for personal stuff, and I suppose there's always the chance to switch if one turns out to be technically or politically much superior, but there are dozens and dozens of passwords in there to transfer...

I tried last week to switch from 1Password (local) to LastPass, because I wanted Chromebook support. The import process was awful, and I gave up and went with 1password.com (cloud). It's working well.

Re: Evaluation of five password managers

#90

Post by pietroglyph »

hkri wrote: post #54
zmmmmm wrote: post #52

In the end I've just been using the Unix pass password manager [1]. It's just cobbling together of GPG and git with shell scripts but it works like a normal git repository so you get all your synchronization, from that, your security from GPG which are all things I know and trust without introducing other components that I don't know / understand. [1] https://www.passwordstore.org/

For developers/tech-savvy people it is more or less perfect. I love the fact that it is based on git giving you a history and great control over synchronization. I use it to store all kinds of things such as passwords and files containing environment variables that can be sourced directly from the output of pass (source https://github.com/mssun/passforios

I love the iOS app, but things like this concern me (not quite a dealbreaker though): https://github.com/mssun/passforios/issues/223
Post reply on HN