Still using KeepassXC on desktop and laptop and KeePassDX on mobile.
this post was submitted on 02 Mar 2024
181 points (100.0% liked)
Privacy
789 readers
7 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
This is exactly my setup. How did you know? LOL.
File synchronized with Syncthing? :)
I've thought about it, but for now at least I just use a USB flash drive to keep the file synchronized.
I could say I know because i'm an elite haxxor but it would be a lie. I'm not even at script kiddie level.
I use Bitwarden for passwords. Just works so well.
KeepassXC and KeePassium for TOTP codes. I keep the database in the cloud but sync a key with Syncthing that’s needed to unlock the database on the devices themselves.
Locally hosted bitwarden (vault warden) that is only accessible on your local network is the way to go. When a new sync is needed away from home, wireguard VPN to connect back in makes everything nice and secure. Otherwise most of the time the vault is cached to the device locally so you don't need to phone home to access passwords.
I do it exactly like that, except that im connected via vpn most of the time, since my pihole is also located in my lan
Exactly my setup
My setup
load more comments
(3 replies)
For Keepass users: KeepassXC can read your keepass file just fine, but KeepassXC can also run on Linux, whereas Keepass runs only on Windows.
KeepassXC & Syncthing
And I do keepassdx on Android, with a (phone-specific) database synced with syncthing
P.S. syncthing is fantastic: I hope more people consider hosting discovery servers and especially relays
Syncthing is so good!
If you are into the command line, pass is also neat. You can even have your keys in a git repo and access it with a FOSS Android app (requires some dedication to set it up). It's very useful to feed passwords to scripts without hardcoding them in the source.
No mention of Enpass? Stores more than just passwords, can be synced locally over wifi or in the cloud without using Enpass servers.
It's not open source and they haven't had a security audit in a while AFAIK, I used to use it too but migrated to Proton Pass for these reasons https://discussion.enpass.io/index.php?/topic/404-security-audit/page/6/
Been using Enpass for something like a decade and it's been perfect. One time licenses can be found on stacksocial, I think.
KeePassXC my beloved
I use keepass with my database on onedrive.
Then i connect every device to said onedrive account, copy the private key manually on each device that i need to use.
I secure my databse with said private key + a passphrase.
Might not be the best setup, but i feel like with passphrase+key i am secure enough to have the db file in the cloud.
you could encrypt onedrive with cryptomator
I really enjoy 1Password for easy vault sharing between family members. I was able to get my (not so technically literate) siblings and dad onto my family plan. Baby steps!
Pass (Password Store)
Vaultwarden
I love Dashlane, someone tell me why it’s bad.
I know they recently published the code for their clients, so that's a plus. But I can't find any independent audits for their architecture or clients.
While all mentioned options does have independent audits done.
Dashlane’s app experience across platforms was hit and miss for me. 1Password has been much better.
No love for Nextcloud Passwords or Passman? Both have plugins for Nextcloud and have Android Apps.
No love for Nextcloud
Pretty much in general for me now. I gave it an honest go for six years but there were at least four instances where a server upgrade required nontrivial intervention to bring it back.
Syncthing + Keepass[DX] has been solid for me.
Which one was that Passman or Nextcloud? I've run two instance of Nextcloud Password and one of Passman, for about the same time, with no issues.
Other people do seam to have issues running Nextcloud in general, but I've never had anything but PHP version stuff that is easier fixed. I love Nextcloud!
Buttercup Foss is not mention and is a nice alternative
I've been using 1Password for about a year now and like it a lot
I use Passy because I like the purple UI lmao