Just use KeePass.

In today's tantilizing episode of Just use Software, Denshi takes a stroll down the world of password managers, and explains why the best password manager is one you manage entirely yourself: A KeePass database!

UNIX Pass is "ok" too, just doesn't have many features.

[KatzRool]

I've used KeePass for nearly a decade and had never once considered KeeP ass until the moment you said "and also yeah, the name is really funny".

[steveman]

Bitwarden is locally encrypted before being sent out if I remember right, so a server would have a hard time doing anything with it. Still less secure than a local copy, but I usually set it up for relatives because it's more convenient and simple for them to use. I use keepass with syncthing myself.

[duser]

Here is a tip for using Keepass on multiple devices. You'll need to update all the databases across all your devices if you make new passwords or update existing ones; this is a pain to do usually but there is a way. Set up syncthing and learn how to use it (documentation is really good). Syncthing basically allows you to sync entire folders across your devices as long as they are on the same network as each other. It will automatically search for changes to the file/folder and automatically upload them to your other devices.
Now what if someone intercepts your database through Syncthing? While however unlikely, it is a possibility. In that case, set up a key file in the keepass settings and save it somewhere safe. This will be your second password and loosing it is like loosing your password so be careful; be sure to keep backups of this file. Now don't ever sync the key file across any cloud storage or wireless tech like syncthing. For maximum trust, always copy the file between devices by physically connecting them together through USB. Once its on the device, you wont ever have to copy it again like the database; it just needs to be there.

[simonmaersk]

KeePass and Syncthing used together provides security and convenience that's unbeatable by any other password manager out there

[winterland]

It's called KeePass cuz it Keeps your Ass safe

[sussycatgirl]

I selfhost bitwarden not because I'm paranoid, but because I'm too stingy to pay for the premium features lol

[AdamS-lomr]

as long as the client app is open source, and that you can verify that its not sending unencrypted passwords or backdoor ed passwords then it does not matter what server its getting sent to as long as your master password is strong

[mathisblair]

Am I crazy because I just store my passwords in a notebook with paper and pen and I actually keep up with and update it as needed?

[activelivingchallenger]

KeePass has a portable app. Useful because I can't install keepass on my work computer but I can install it on my USB. Students could probably use the portable app too for the library or computer labs.

[lazur]

what i used before keepass was sheets of paper
now in my divine wisdom i decided not to order anything in any sensible way, just writing a password here an email there.
im still trying to decode this arcane sheet of paper with accounts ranging from minecraft to email accounts ive used for vps services



--i had to contact support for the latter and it was very embarrassing--

[deegaming]

Thanks, I'll definitely keep my ass safe.

[linxbit]

i'd switch off bitwarden but i dont have any sort of offsite backups

[Nakla]

Are there any password managers which can autofill without an extension?

[NoEggu]

keepass is amazing.

Its user interface is not exactly elegant. It could use some improvement. But it is decent.
However, for the main purpose of a password manager, nothing is more secure -- at least nothing that can be verified.

keepass's core functionality and features are complete and all top-notch.

I do, however, have a question about plug-ins for keepass.
Since plug-ins are made by anyone, can they compromise keepass's integrity? Can plug-ins do anything untoward, or make anything unstable, or breach any aspect of keepass's privacy or security?

Some plug-ins look enticing. But is there any risk by using them?

[bone-a-lisa]

Ultimately, it's a balancing act. Sure, I can use KeePass if I wanted to be completely and 100% sure my passwords are safe. I have enough knowledge to assess that risk as I see fit. But getting my parents to use it? Yea good luck with that...

To me, bitwarden is that balancing act. All their clients and server code are FOSS, so if I really starting to not trust them, I could just run my own server. But it's still accessible enough that I could recommend my parents to use it, and they have a chance of actually being able to lol. I will happily pay the few bucks month it is to support a company that provides that kind of service :)

[benf]

I need syncing between phone, home computer, and work computer. I don't think keepass really accommodates my fast-paced computing lifestyle. 🏎

[bententen]

I use my serebrum part of the brain the store my password, best way guys!!

[egecelikci]

you talked nonsense about bitwarden and signal

[laciachan]

use keepass and then use google drive, onedrive or dropbox to autosync the data base file to the cloud LMAO

[JohnSmith-zlrz]

why KeePass is fucking ugly? just because is Open Source need to be awful gui ? 1password is so beautiful