Hacker News Reader

Comment by dtx1 | Hacker News Reader

This does not reallz discuss offline password managers like keepassx except for this one sentence

> Conceptually, what could be simpler than a password manager? It’s just a trivial key-value store. In fact, the simplest implementations are usually great. Good examples of simple and safe password managers are keepass and keepassx, or even pass if you’re a nerd.

I think keepass synched via nextcloud is a great solution, e2e encrypted, works basically everywhere (windows mac linux osx ios android) and it keeps the sync and backup in your hands. If copy and pasting a password or using autofill for keepass is too much to ask, then you propably don't care about security.

View on HN

What’s is the difference between keepass synced by X and another service which is completely online? Simplified with keepass I have a) the database and b) an online accessible Location for storage. If I use Bitwarden, I still have a) and b), right? So for keepass to be better it would need to be better (as in safer) for one of those. I’m not sure if that’s the case (you can even selfhost both Bitwarden and nextcloud to have „trusted“ storage, although it shouldn’t matter). But: if you don’t need multiple devices, Keepass is the surest choice.

With that in mind, I’m rolling with Bitwarden (maximal security afaik and great usability - it’s even linked with my iPhone) for personal stuff and keepass for work as I only have one machine I need passwords on. I don’t like Setting up something to sync a file if I don’t need to, so I’d never use keepass for multiple devices

Using keepass would decouple password management from your browser. Bitwarden, for example, usually runs as a browser addon.

https://bitwarden.com/download/

They seem to have desktop/mobile apps as well?

For one, it's completly free. I use a free nextcloud 1gig instance, you might use dropbox, onedrive, gdrive whatever. I don't think a trivial application like a password safe should require a personal server or a suscription, as the author rightly noted, it's not much more than a very, very small key value store

One advantage is that the password manager encrypts the password database on your device. So the encryption part is decoupled from the online service part.

Reply on news.ycombinator.com