Hacker News Reader

> with good browser plugins

This latest version KeePassXC has a whole new browser plugin:

https://github.com/keepassxreboot/keepassxc-browser

So maybe it has reached that point now? Not that I've tried it, but it's at least promising that they've been working on it.

> but then you have the same security tradeoffs as more polished services like Bitwarden or LastPass.

Not exactly. The database is handled with an independent program. With the new model, AFAIK, the browser extensions have no idea what records exist and can only query - and record matching is actually authenticated before plugin sees anything.

Wasn't it shown recently that LastPass literally downloads JS from their servers to run on specified pages for compatibility? I suppose that's good for ease of use, but pretty scary from a security tradeoffs perspective and indeed KeePassHttp doesn't require you to make any sort of tradeoff like that.

I use KeeFox with it and really find it good (even better with the latest update, that made it compatible with Chrome as well)