pull down to refresh

First of all stackers, I'm not asking which PM is best!

I'm asking which one you like and what features stand out as better than the competition

I've used several of the well known offerings and here's my thoughts on each

  • I started off with a Proton Mail account and naturally progressed on to Proton Pass, their native password manager
  • This was my go to for a long time, I like the simplicity of it, I like the option of creating folders but there's a cap on the free version.
  • Then I thought, well what happens if I lose access to Proton? I know I'll create another account with a different PM and store the password there, and vice versa
  • So I originally just downloaded Bitwarden to store the Proton password and didn't really make use of it, but I'll come back to my thoughts on Bitwarden in a second
  • And just for belt and braces I downloaded KeypassDX, to again store the passwords from Proton and Bitwarden
  • But then Keypass started to become my daily driver, what I really like about the features, is the built in entropy password creator, very cool ๐Ÿ˜Ž

But one day last week, I was playing around with the settings and pressed something and it downloaded a file for some reason, so I deleted the file from downloads in my phone's file manager, went back to Keypass and the app wouldn't open!

  • My heart immediately sank and I thought if I can't access this, I've lost a fair amount of data
  • And being on the long uphill struggle learning about all things technical, I quickly thought about retrieving the file from the recycle bin and restore in downloads, et voila! It opened!
  • Feeling very pleased with myself, I did some research and turns out this is a feature not a bug, because you can store your data in this encrypted file, which the app can only open with the password

So for you stackers reading this, this is 101, like 1st day of easy tech, but I'm learning this shit from scratch

  • It took me ages to work out that I needed to store the file in a new folder [keypass] and delete the original database in the app, then open existing database and choose the new folder location, enter password, BOOM ๐Ÿ’ฅ we're cooking on gas now!
  • But the downside to all this in KeypassDX, is that your data is only as good as your last back up

So we go full circle and after my little scare with Keypass, I thought I'd add the most important information on Bitwarden, and that's when I really started to like it, each addition is replicated across devices, no need for downloaded files becoming differing data

So what would I rate these three PMs?

  • I'd give Proton Pass a 7/10
  • I'd give KeypassDX a 6/10
And
  • I'd give Bitwarden a 9/10

While writing this, I'm thinking, have I got way too many PMs, have I left gaps in security by having more than one?

  • But what if you put all your eggs in one basket and you can't access the ๐Ÿงบ?
  • That's the question isn't it, single point of failure has a double meaning here!
42 sats \ 1 reply \ @kepford 7h
I've used many of them for many years. I recommend Bitwarden for most people.
  • Open Source
  • Great UX
  • Can self-host
  • Been audited many times (including my company's team)
  • Has a working business model
  • Can start for free
  • Multiplatform support.
  • Family/Business accounts.
Its really great. There are others that are really good as well.
reply
I've also been using bitwarden for years and recommend it to everyone. No complaints!
reply
Keepass. Best if accessible via WebDAV tho
reply
42 sats \ 0 replies \ @kristapsk 2h
I use pass, cli with gpg encrypted storage on git.
reply
42 sats \ 0 replies \ @unboiled 3h
Passwordstore together with dmenu and a script that it feeds from. Use: I hit some keys, dmenu pops up and I start typing the key I'm after. The script filters options using pass find. I then highlight the one I'm after (or keep typing until only one is left) and press enter. The password is now in memory for 15 secs.
Previously, I used KeepassXC. It still is my recommendation for most users. I now only keep copies of some passwords from pass in there. So my wife could access the most important ones should something happen to me.
reply
Honestly, none of them. I get why PW managers are popular; you have to be more and more complex, everything requires a password now, and it's simply too much to remember everything instantly. But managing your own passwords only takes a slight bit of effort with at least three layers of defense. Can't remember them? Put them on a spreadsheet and give it a password. Then use an encryption tool and keep your files encrypted when not in immediate use. Lastly, make a redundant copy and update it regularly as a backup in another encrypted, locked place separate from your primary computer/tool. It's about a secure as things get without relying on faulty human memory. And do you really believe your PWmanager software will be better? Take into account that it is usually 1) Internet-based, 2) run by a third party you really don't know, and 3) they control your tool by license or portal access. Every online tool I've used for anything has eventually gone down or been hacked or compromised. PWmanagers are no different in that respect, especially online versions. But that's my two cents. My only hack damage as been due to the phone company of all things getting hacked and releasing my stuff (bastards). Looking forward to that class action lawsuit outcome, personally.
reply