Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
1. All posts must be relevant to Android devices/operating system.
2. Posts cannot be illegal or NSFW material.
3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.
4. Non-whitelisted bots will be banned.
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Community Resources:
We are Android girls*,
In our Lemmy.world.
The back is plastic,
It's fantastic.
*Well, not just girls: people of all gender identities are welcomed here.
Our Partner Communities:
I don't but I should even though my threat level is zero.
But then isn't a single point of failure a problem? I guess we use these to make life easier with strong passwords, but what if the cloud with sync gets leaked, or someone keylogs my pass manager then I lose all passwords not just those incidentally affected by a leak or hack?
I use KeepassDX, one of the variants of Keepass. I don't know if it's any better or worse than the other variants but it has worked well for me so far.
The advantage is you are hosting your own password database so you aren't reliant on some cloud platform that inevitably gets hacked.
But a cloud platform is arguably more secure and has more resources for security than your personal database. True, you are a much smaller target and less likely to get targeted, but it still stands to reason that you are vulnerable.
They are totally necessary - if you don't use the same passwords across the internet I mean.
How many accounts do you have on the web? I can count at least twenty accounts that I have and use from a variety of services. Keeping different usernames, emails (through alias) and passes in mind is no easy task, so a good password manager is absolutely needed.
People are recommending Bitwarden and I can't say it's bad, truly, it's a really secure and private alternative. Although, in my opinion, keeping a offline safe for your accounts is way better because only you have the absolute control over all the credentials. I use KeePassDX on my PC and phone, synced by Synching, and being loving it for some years still.
Yeah I use Lastpass, it's very useful. I'd like to switch to something FOSS and locally encrypted, but honestly I've tried a couple times and never got it working properly, meanwhile Lastpass always works. I hate their blinding white UI lol.
KeePassX(C?) both on Windows and Linux. I used the windows version KeePass2 but there was a recent security vulnerability in it so I switched to KeePassX. Maybe it's already patched... auto-type doesn't seem to work in KeePassX on Windows so I might switch back but it's not that critical.
I would love to use one, but to be honest, I have not found one that I trust, so far.
The perfect "password manager" would require 2FA, has some kind of "online backup" (cloud) that I can host myself and has to be open source. So far nothing really seems to offer all this.
I couldn't imagine not using a password manager anymore, so I'd certainly recommend it. At work we use 1Password, and I use NordPass privately. Both are great IMO.
Keepass with syncthing is GOAT
I use 1password. I heard that Apple uses 1password internally. I figure their IT guys are more expert than me, a random internet dude. So I chose 1password. Works great on desktop, mobile, and even Linux. Family plan is a good deal. You can even share passwords between users for common things like bank accounts, etc, between family members.
There are a lot of people recommending a very specific program in this thread. Be skeptical, everyone. Do your research on the strengths and weaknesses of these types of tools, and the specific offerings of all current leading services.
I'm probably going to get grilled for this but I've Been using Firefox's Saved passwords, I really don't need anything better.
Anyone not using a password manager is shooting themselves in the foot and often time not realizing till its too late. Along with that sign up for a service that notifies you of data breaches, I think bitwarden has one built in (might only be for subscribing members though) and there is always https://haveibeenpwned.com/