Hacker News Reader

Comment by krupan | Hacker News Reader

I haven't lookek at keepass in a long time, and a quick glance at the website didn't help. The author of TFA says that keepass handles synchronization for you. Is that true? Because it didn't do that in the past.

Also, can keepass generate secure passwords for you? That's something I love about lastpass.

UPDATE: also, how easy is it to use on an Android?

View on HN

Keepass can generate secure passwords yes, with customizable rules. I think synchronization on Keepass's side is possible, but to me the fact that your password database doesn't talk to "the cloud" is a major selling point. I even use the alternate version of Keepass2Android that doesn't have internet permissions as an extra precaution.

See: http://keepass.info/help/v2/sync.html

From what I understand, the encryption is done client-side per individual item (e.g. if you use a cloud provider, unencrypted data never touches them), but there's some generally questionable stuff in how it handles secure things: https://news.ycombinator.com/item?id=9727297

I believe what the article was referring to with regards to synchronization is that it works fine with existing file sync software like Dropbox or Google Drive, and knows how to merge changes. I believe there are plugins for things like SFTP as well. It does not provide a hosted synchronisation server or anything like that, so that would still be a selling point for LastPass or 1Password's subscription services if you want that feature.

There are plugins for syncing to various cloud providers. For each device platform, there will be many apps available that support Keepass. Each app will vary in how useful it is to you (each one is a different third-party developer), but I've found the level of functionality is good enough that it ultimately became my password manager. I use it cloud synced with a Windows PC and Windows Phone app. I only install/use plugins/apps that are linked directly from the Keepass website as trustworthy projects.

Reply on news.ycombinator.com