pull down to refresh

On the topic of password management, what are your recommendations as far as the tools there are out there (password managers, hardware keys, etc.)? And what would you say are the best practices (both phone and pc)?
A bit of a broad topic on purpose as I am not sure exactly where I am going with this, but I know I want to do more research and gather more information. If you have good resources on this, please do share.
Cheers
I use KeePass and Bitwarden. Self hosted. On all platforms and synced on all devices, from my own NAS.
reply
Second that. KeePass and you can chose your client
reply
deleted by author
Keepass + syncthing
reply
deleted by author
deleted by author
Good question. I'm interested in getting some input also. I use a fairly lesser known password manager, not open source code, and I'm nervous that it will be the next hack victim.
I can't wait until bitcoin puts an end to all this password crap.
reply
deleted by author
I've been using Bitwarden for a while. The good thing is that their official server and clients (for desktop and mobile) are open-source.
I am actually running an alternative implementation of the server: https://github.com/dani-garcia/vaultwarden that is less resource-intensive and implements most of the official API: https://github.com/dani-garcia/vaultwarden/wiki#supported-features
Even when running your own server, you can still use the official clients (browser extensions or mobile apps), so you don't have to worry about all the different client implementations in the wild.
reply
I second bitwarden. Been using it for a while. Been great and really helps out.
reply
deleted by author
Thanks!
What are the tradeoffs of using official clients (browser extensions or mobile apps)?
reply
I don't see any, especially since their code is open-source: https://github.com/bitwarden
reply
deleted by author
deleted by author
deleted by author
KeePass. Self hosted. Automatic backups to external HD. Manual backups to usb drive.
reply
deleted by author
Bitwarden
reply
deleted by author
https://www.passwordstore.org/ Terminal only encrypted by gpg key backed up by a local git repo that you can push anywhere you like. No centralised service to honeypot you
reply
do you have a way to auto-complete on web browser and to access to your pwd on your phone with this method?
reply
No. It can write to paste buffer with a flag, so the browser workflow is cmd-tab based. I didn't try to solve for the phone
reply
deleted by author
deleted by author
deleted by author
KeePass + Syncthing
reply
deleted by author
Bitwarden, self-hosted (vaultwarden). I strongly recommend it.
reply
deleted by author
I am the old guy that just remembers passwords. I do have cloaked for generating throwaways though.
reply
deleted by author
Accounts.txt works for me
reply
deleted by author
If you are a command-line enthusiast, check out gopass. Really nice, and uses git to sync across machines.
reply
deleted by author
Used and payed for Bitwarden. But i found it too complicated to self-host IMO.
The best and simplest solution is a combination of KeePass+Syncthing. Both free, and available for desktop and mobile.
reply
deleted by author
Self-host bitwarden/vaultwarden
reply
deleted by author
JESUS CHRIST DON'T USE A PASSWORD MANAGER TO STORE YOUR SEED PHRASE!
Pen and paper only.
reply
Who said we are storing our seed phrase in password managers?
reply
It's implied when you post a password manager ad on a Bitcoin message board.
reply
reply
And denial is a river in Egypt.
reply
deleted by author
deleted by author
deleted by author
deleted by author
I prefer steel
reply
deleted by author
deleted by author
deleted by author
reply
Awesome, thank you for the write-up!
reply
deleted by author
deleted by author
deleted by author