this post was submitted on 11 Jul 2023
368 points (97.9% liked)

Asklemmy

43962 readers
1199 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago
MODERATORS
 

Okay so yesterday, I changed my password as a precaution because of the hack, and just now I decided to clean my browser tabs and re login and almost forgot my password. I'm done dealing with passwords.

What password manager do you recommend?

Features I’m looking for

-Open Source

-Can be synced to cloud (I don’t want self host)

-Can be accessed via a browser

-Cross platform, the more platforms, the better

-End to End Encrypted, and Encrypted at rest on my device, also need some way to authenticate before releasing the password, like a pin or biometrics

-Autofill for browser and apps

-Free (can be a freemium model, but I need the base tier to be free, too broke to spend money on this lol)

-Can export the passwords to a file

I never used a password manager before so sorry if I seem like a noob.

I know I could google it, but I want the lastest info, not some outdated reddit post.

Edit: Woah, those replies are fast. I think I'll use Bitwarden. Thanks for recommendations! Now I don't need to worry about forgetting passwords anymore. 😄

Edit 2: It seems I've forgotten my email password as well as a few other accounts I haven't logged into for a while. Damn, should've used a password manager earlier.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] Jackolantern@lemmy.world 9 points 1 year ago

Bitwarden is ok

[–] xtremeownage@lemmyonline.com 9 points 1 year ago

Vault warden. (Implements bitwarden).

Works with bitwarden apps / browser plugins. Locally hosted. Rust.

[–] ChrislyBear@lemmy.world 8 points 1 year ago* (last edited 1 year ago) (1 children)

Keepass all the way. Checks all the boxes. Access via browser: If you have a Nextcloud instance, theres a NC-Addon to open kdbx files in the browser.

re: Bitwarden I tried it and it wasn't sufficient for me. Is it now possible to also store and generate TOTPs? Can you store SSH keys and retrieve them directly from the password storage?

[–] knoland@kbin.social 9 points 1 year ago* (last edited 1 year ago) (2 children)

You definitely do not want to generate TOTPs in your password manager. That makes it a single point of failure in the event of a breach.

load more comments (2 replies)
[–] ebits21@lemmy.ca 8 points 1 year ago* (last edited 1 year ago) (6 children)

There’s only two real choices imo.

Bitwarden or Keepass (KeePassXC for desktop, you’ll need one of many app choices for your phone).

Keepass you would sync to your own cloud provider and use a key file for protection.

Bitwarden is the obvious answer that fits all your criteria.

load more comments (6 replies)
[–] Version@feddit.de 8 points 1 year ago

Definitely Bitwarden, but there‘s also a new product from Proton called Proton Pass. It works similarly to Bitwarden, but a few features are still missing.

[–] pirate526@kbin.social 7 points 1 year ago (1 children)
[–] lukstru@feddit.de 5 points 1 year ago

As someone who uses Bitwarden, what’s the advantage of using buttercup?

[–] Broom2101@feddit.ch 6 points 1 year ago

Bitwarden would be a good fit for what you are looking for, especially the cross-platform aspect. Keepass-derived solutions typically require trusting multiple developers, whereas Bitwarden is developed and maintained by a single team.

[–] majorgator13@kbin.social 6 points 1 year ago

Currently using bitwarden. Moved over from LastPass. Free and works on browser plus mobile. Like it so far.

[–] wilberfan@lemmy.world 6 points 1 year ago

Gratifying to see all the love for Bitwarden!

[–] ablackcatstail@lemmy.goblackcat.com 5 points 1 year ago (1 children)

I am a fan of Vault Warden.

[–] Fisch@lemmy.ml 5 points 1 year ago

He specifically stated that he doesn't want to self host

[–] SeaOtter@lemmy.ca 5 points 1 year ago

Thanks for this! I have been using iCloud Keychain for a while and was generally satisfied. However, it wasn’t until I recently switched from desktop Safari to Arc that I considered a third party password manager, but was stuck in decision paralysis.

Given the overwhelming responses in this post, BitWarden it is!

[–] Dirk@lemmy.ml 5 points 1 year ago (2 children)

Since you don't want to selfhost anyway just use the one built-in to your browser. Nowadays you can set up synch with a password

load more comments (2 replies)
[–] shapis@lemmy.ml 5 points 1 year ago* (last edited 1 year ago) (4 children)

protonpass for sure.

Bitwarden is great, but it's way too easy to lock yourself out of it if it's your first pw manager ever.

load more comments (4 replies)
[–] smallpanther@lemmy.dbzer0.com 5 points 1 year ago (1 children)

I've been using Google's password manager mainly for convenience but had been looking to switch for a while, this thread made up my mind to switch to Bitwarden!

load more comments (1 replies)
[–] SecretPancake@feddit.de 4 points 1 year ago (1 children)

Been using 1Password since 2010. I tried Bitwarden a few years ago just because of the price. In theory it ticks all boxes but it was a pain to use. I does not flow like 1P, some things did not work the way I expected and it looks like shit. Don't ask for details because I forgot. So I switched back. The new design of 1Password made it a little worse but it's still great and the integration into iOS and macOS is amazing.

load more comments (1 replies)
[–] andreluis034@lm.put.tf 4 points 1 year ago

I think bitwarden fills all of your requirements.

[–] japps13@lemmy.physfluids.fr 4 points 1 year ago

I like the Password for Nextcloud app. I self-host mine, but I think there might be Nextcloud instances that you can access. It is encrypted, and has an app for smartphones.

[–] Double_A@discuss.tchncs.de 4 points 1 year ago

For important things Keepass (which I sync in Onedrive). For casual things whatever the browser offers... or some random long password and password reset ._.

load more comments
view more: ‹ prev next ›