Hacker News Reader

Comment by pgt | Hacker News Reader

What are good alternatives to 1Password?

Bitwarden will be the most recommended. I tried it to move off of 1password a few months ago, there was a time where 1password kept breaking the extension in every OS I was using. I can't remember exactly what was missing but there were several things I was used to in 1password that weren't available in bitwarden that made it feel clunkier to me.

It's UI is definitely the closest you'll get to 1pass. I think a big reason I couldn't use it was the Android app is built off Electron and doesn't currently support Android fingerprinting.. So I'd have to fingerprint into 1pass to grab my Bitwarden pass..

edit: Err on my part, it's missing TouchID in OSX https://community.bitwarden.com/t/touch-id-support-for-macos...

How mature is Bitwarden? I know its open source, but IIRC the business address for Bitwarden is a random house in Jacksonville, Florida? And that was only found on Reddit or something.

If its open source thats great, but most people are not building the clients for iOS and MacOS at home. We trust the builds that they host to be true to the source.

1password lists its physical address on its home page (and I think every page).

Lastpass is part of Logmein, an established tech company in Boston.

I'm very wary of a password manager trojan horse, similar to the Kaspersky incident.

As far as I know, Bitwarden is a one-person company run by a guy who lives in Jacksonville, Florida. So the business address being a random house there would be exactly what I'd expect.

I guess it would be nice to have some background on him then, so we can be sure its not a front.

I would expect he actually reads Hacker News, so please provide us your backstory, much appreciated.

AFAIK he is involved in one of the BSDs (free or open) in some capacity, so you're not putting your security in the hands of some random Joe NPMbro

I understand the concern too.

It's also raised at their official forum but no reply from the author.

https://community.bitwarden.com/t/who-is-hosting-bitwarden/1...

The author did take an interview in 2018.

https://opensource.com/article/18/3/behind-scenes-bitwarden

I've been able to use fingerprint-to-unlock Bitwarden on my Android phone for more than a year, IIRC.

Oof, you're right, it's missing TouchID in OSX which was my problem, should've clued me in after I said electron app..

https://community.bitwarden.com/t/touch-id-support-for-macos...

Electron doesn't exist on Android, maybe you're thinking of something like Cordova.

For consumer (individual or family) or business?

Password management is a privacy and data sync problem.

As a consumer I use an Android device, Windows desktop, Linux laptop so OS or single ecosystem solutions don't work for me. They may be ideal for others.

For a business password manager I'd want to know who is storing my data and how it's being stored. It should be stored where the provider has no access to the passwords (data is encrypted client side before being sent through sync backend ).

Disclosure: TeamPassword is part of the business I run.

I wrote up a list of the most popular password managers to consider on this page https://ss64.com/docs/security.html

Dashlane is among the most polished ones. There's also Bitwarden which is free and open source.

LastPass, Bitwarden, and Dashlane are the main ones. All have their own pros and cons.

For those keeping track, Dashlane is developed in Paris FR and NYC.

Reply on news.ycombinator.com