Hacker News Reader

Comment by mercnet | Hacker News Reader

Anyone have recommendation for replacing Lastpass? I need support for Android, Linux, and Windows. I would like to be in control of my data if possible (sync to cloud) and a nice to have would be a browser extension for autocomplete.

View on HN

KeePass, it's well supported on mobile platforms and has decent browser addons.

Looks like their Argon2/ChaCha20 based KDBX4 format is now out too, so I've got some upgrading to do.

KeePass doesn't have sync or sharing features.

Sync is easily achievable, I use Syncthing to go between my phone, dev server and desktop. Other options are the usual suspects, Dropbox, BT Sync, etc.

As for sharing - yeah, you probably lose that. Well, unless you sync a separate DB or something.

You can easily use it in conjunction with drop box or any other file sync program.

Yes it does you just have to run your own server.

http://keepass.info/help/v2/sync.html

it isn't difficult to share a database file for KeePass and you could easily set up a sync interface for it with github

I put my keepass in a veracrypt container and sync it over dropbox, then you can retrieve it on your phone.

That's a tad on the paranoid side since KeePass already encrypts it. If you're using the latest version which has significantly improved the encryption you should have a very good margin of security.

Its a bit of extra work to get my passwords but my entire "internet identity" is stored there so I don't mind the paranoid security.

KeePassX - I've been using it for years now. I just put the database on my Dropbox. Quick, convenient, and most importantly for me, always in my own hands.

I've used KeePassX for offline/cold storage for years. I like KeePassX so much wrote a YubiKey extension [0] years ago but it was never merged. I assume the maintainer wasn't interested, never responded, but allowed the discussion to continue. Turns out this was more the norm than the exception, I assume the maintainer was too busy or lost energy/interested in maintaining what became a big project.

Years later KeePassXC[1] was forked and slowly growing.

[0] https://github.com/keepassx/keepassx/pull/52

[1] https://github.com/keepassxreboot/keepassxc

With a key file stored outside of dropbox, for a bit more security. Requires an extra step of manually copying the file to each device but it seems worth it to me.

The article mentions https://bitwarden.com/. I haven't tried it but on a quick glance it seems to match most of your requirements.

I don't really trust "free" cloud services. Hosting has a cost, if they aren't charging to get that money, how else are they going about getting it?

Hi, I am the lead developer of bitwarden. bitwarden is currently sponsored by the Microsoft BizSpark program which covers many of our operation costs and allows us to offer services for free to our users. We are working to introduce enterprise features for businesses in the future which will allow us to monetize. For now though, everything is free for users.

Why has the issue to remove analytics been closed on the project's GH without the change being implemented? https://github.com/bitwarden/browser/issues/27

He says it's implemented, but I couldn't find the option.

Did you or someone affiliated with Bitwarden write the posted article?

Totally. Plus, the creator of BitWarden has been shown to try and sneak egregious things by people, for example Google Analytics inside BitWarden [0].

[0] https://news.ycombinator.com/item?id=12676979

Indeed. There Is Always A Business Model, there is no such thing as a free service online.

Codebook by Zetetic, going strong since 1998. Uses an open-source extension to SQlite for encryption.

https://www.zetetic.net/codebook/

https://www.zetetic.net/sqlcipher/

That one is also missing Linux support.

I use Password Safe. Clients for many platforms. Only drawback for me is that the iOS client does not support ownCloud for syncing.

Reply on news.ycombinator.com