Hacker News Reader

Comment by zmix | Hacker News Reader

I wonder, why not a single word has been spoken about Keepass/X, which is available on all platforms (not sure about iOS, though), can work with UbiKeys, afaik, has huge im- and export support and is free from any corporate interests.

View on HN

A number of features we looked at are only relevant in an enterprise (i.e., business) environment. For example, for just personal use, you probably won’t care about linked personal accounts, fine-grained access control, or what abilities company administrators have, but all of these questions were important to us.

They were not evaluating pw managers from point of personal user but as a company. You don't want to share one file with all passwords with all company.

If you want the Qt one, make sure to use KeyPassXC, the active fork of KeePassX.

https://keepassxc.org/

I use keepassxc on MacOS, Windows, Linux, along with MiniKeePass on iOS. It's synced through my free Dropbox account. I just make sure to set the preferences so that every change to the key database results in a file save.

I daily use the exact same setup for all three, but with the Android equivalent.

...so it's not like this app is unheard of, per this thread's parent comment. Super odd that they didn't include it haha

> synced through my free Dropbox account

I was always a bit paranoid about this, even though I did it myself.

The decentralised alternative is to use something like SyncThing[0]. It's what I use and is only slightly more involved.

[0] https://syncthing.net

I use syncthing for some backups, no idea why I've never considered it for keepass. Probably cause I don't want to mix the two and clients don't offer it already integrated. Or are there any? It for sure wouldn't make building the project more easy, and the password manager is the one thing i still want to build form source to at least imagine I have full control over it.

What about Resilio Sync? They have a discount for one-time license. And it was formerly BitTorrent Sync. I'll have to check out Sync Thing.

Well, SyncThing is open source as well as being free.

I use keepassx and yeah it could use some tlc, but overall I consider stability a feature in security software. How does one tell if xc isn't just a bunch of wannabes making keepassx with blackjack and hookers until they break it? At least keepassx has taviso's off-handed Twitter comment that it "looks sane".

What I like about keypass is that it's not networked and not running in the browser, making the attack surface a lot smaller.

Keypassxc having such features(and apparently the old network protocol was vulnerable lol) is for me a strike against it.

When I migrated from Ubuntu to mac os, I started using macpass, for convenience, and in order to avoid decrypting my passwords when switching to another password manager. Macpass is free, fully compatible with keepass and has on top of it, a much nicer UI than keepass on Linux or Windows.

https://macpassapp.org

Couldn't find any mention of a 3rd party security assessment? Open source doesn't necessarily guarantee security though I'm really glad to see this is open source.

Given macOS's security track record - especially with High Sierra - and how particularly verbose Mach-O binaries tend to be, I'd be kinda worried about something relying so heavily on proprietary APIs (and potentially the system keystore?) Though I'm sure using Keepass with Mono (that the Macpass site lightly implies is the only Keepass macOS alternative) isn't exactly an impenetrable fortress either haha

Got that Hopper license around here somewhere...

MiniKeePass for iOS works with Keypass/X and Keypass/XC files

In iOS I’ve been using Strongbox, which has been excellent for my needs so far (cloud sync and iOS integration). Also supports TouchID.

Reply on news.ycombinator.com