Hacker News Reader

Hacker News

Comment by ssbash | Hacker News Reader

Parent Full thread

ssbash

Strongbox is a fantastic KeePass client on iOS and macOS.

- fully native apps

- open source

- fully offline option (Strongbox Zero)

- one time purchase

- solid browser extensions for Chrome and Firefox

- native keychain autofill for Safari and Orion

- compatible with other KeePass apps on other platforms

- multiple sync options iCloud, G Drive, Dropbox, OneDrive, SFTP, WebDav, Syncthing

- support for offline vaults

- biometrics, Apple Watch unlock, and Yubikey support

- TOTP codes, attachments, and markdown notes can be stored

- supports password auditing with Have I Been Pwned

- supports importing 1PW vaults

Most importantly, Strongbox is made by a small and transparent company. Unlike Bitwarden or 1Password, they are solely focused on making high quality macOS and iOS apps.

https://strongboxsafe.com

View on HN

This might be what I need to finally get off the stupid 1pass treadmill.

I really really like Strongbox.

My only resistance from going the route of strongboxsafe is the lack of app-specific PIN, opposed to OS-specific PIN that is still missing from the free version.

While a master password covers the specific database, the PIN covers the app.

This is a problem for me there:

1. No OS-specific PIN/passcode in free version

  A wider acceptance should borne with this simple feature in the free version.

Also Netwrix is more enterprise-ready with their SOC 2, ISO 27001 and HIPAA ready but that is a moot point for most SMBs, SMEs, family-servers and homelabs.

I do do like the simple fact that Strongbox has it all out with their Github repository.

https://github.com/strongbox-password-safe/Strongbox

You have two options:

1. Pay and support this small developer. A password manager is a critical tool that needs to be constantly updated to support the latest OS. This isn't Adobe, it's a bootstrapped indie developer making an app for a small audience. I think the free version is already quite generous. Plus Strongbox includes a one time purchase for all platforms, no subscription unlike 1Password or Bitwarden.

2. Compile and build from source. It's an open source app, you are free to sideload the app if you want to.

An excellent case for StrongBox Safe, support the indie who did all the hardwork. This would save you, the end-user, from having to do the following:

Sideloading a self-compile app for Apple ecosphere often requires a DUNS ID by Apple App store which in essence will plunge you, the developer, into a yearly subscription.

Sure that one can do a TestApp, but that one-time DUNS ID requirement still remains.

That is not true. To sideload an app a free Apple Developer is required. A 7 day limit is placed on that app before it has to be refreshed. If you pay for Apple's Developer subscription then that limit is increased to 1 year.

Alternatively you can use Altstore [0] and avoid paying for an Apple Developer subscription.

[0] https://altstore.io

Oooooo, that is cool to know.

When you say refresh after 7-day, is the original installation of your downloaded developer app gets affected/disabled or that 7-day is just a time-limit on how often you can upload your development app?

The provisioning profile expires after 7 days; you can transfer your development app to your devices as often as you want. Not sure if you lose data, when the profile expires, though.

Right. My bad: DUNS ID is only required if you want over the air (OTA) update to your Apple devices through the use of Mobile Device Management (MDM) tool. (I was looking for ease of use, easiest, that is.)

Was unclear on how to circumvent this DUNS ID for just the sideloading. of apps.

> I really really like Strongbox.

> still missing from the free version

The obvious solution is to pay. Any reason you are opposed to this?

Not for me. I am currently evaluating Strongbox and will consider a purchase of Strongbox Zero for seemingly unlimited use.

But for others, it should be a caveat that you would not get the full security provided by Strongbox Zero or Strongbox Pro.

> a caveat that you would not get the full security

Paying the developer for access to the full security version, while the free one has more than security than most actually use, seems reasonable to me?

ummm, and you expect me to evaluate a freebie that wont keep my password secured enough.

In short, make the leap before you really safely try it out?

> one time purchase

I can only see a monthly or yearly subscription option?

Strongbox Zero - offline version, upfront one time purchase https://apps.apple.com/us/app/strongbox-zero/id1581589638

Strongbox Pro - upfront one time purchase https://apps.apple.com/us/app/strongbox-pro-lifetime/id14818...

Strongbox - same as Strongbox Pro offers free trial and subscription https://apps.apple.com/us/app/strongbox-password-manager/id8...

Ah thanks for clearing it up. I didn't realise they had 3 different versions of the app.

Reply on news.ycombinator.com