5 ms·

I use opensource keepass. Sync my password db via dropbox. Totally works for me.

by sri_cyberdude 11y ago

baldfat 11y ago
Using Dropbox for Security seems like a oxymoron? I fail to see that as anything I am willing to use.
- pixard 11y ago
  Why? The database itself is encrypted. Dropbox is just a easy way to sync it between devices.
- zipperhead 11y ago
  I store the private keyfile outside of Dropbox. To me it's a very acceptable tradeoff.
- sri_cyberdude 11y ago
  "Using Dropbox for sync". It's just an option. Password db is already encrypted, so it does not matter which service is used for sync :)
- 746F7475 11y ago
  What makes you trust LastPass to spread your database to your devices more? And what makes Dropbox so bad?
  - MichaelGG 11y ago
    Dropbox runs a binary on your machine; that's enough to suspect them. Stick with an open source password manager and an open sync service (S3 plus a script? Or a third party client like Arq).
    - 746F7475 11y ago
      Yeah... I'm not in the RMS camp
      - MichaelGG 11y ago
        Nothing to do with software freedom, everything to do with security/auditability.
        flashman 11y ago
        Yeah, with Dropbox software running on your machine, you not only have to trust them not to snoop on you, you have to trust their non-auditable code to be ~perfect~ against exploitation by others.
        746F7475 11y ago
        Unless you actually read through and understand your open source alternative line by line you aren't really running anything safer Of course there is the argument that since it's open source it's safe since someone has "audited" it, but many times that's not true. And even then unless you spend a lot of time trying to break it so you understand it completely you are way better off just writing your own solution, but that takes time and effort
toxican 11y ago
Does it work on mobile?
- sri_cyberdude 11y ago
  Yes, i have it running in my BlackBerry! Im pretty sure, iOS and Android alternatives would be available.
  - whatgoodisaroad 11y ago
    Yep. I have both an Android and iOS client that I use.
mitchty 11y ago
Are there plugins for safari/firefox/chrome and does it work on ios and have a nice little cli? I'm basically preparing to bail on lastpass with this news but need to have all my bases covered.
- discreditable 11y ago
  > Are there plugins for safari/firefox/chrome I just save+sync passwords in Firefox and use a strong master password. I (usually) only need to paste the password from Keepass once unless I elect to not save it (such as with financial logins). > does it work on ios? Google seems to return lots of results for iOS Keepass apps. You'll want to vet them on your own. I use KeePassDroid on Android and like it well enough.
  - mitchty 11y ago
    I tend to use all 3 of the browsers for slightly different things so having plugins would be ideal but I suppose I could slum it with copy/paste as long as I follow the password/login route to reduce the chance a password gets exposed. I forgot about my nexus tablet but android is the other thing to have a look into.
- WorldMaker 11y ago
  With KeePass I haven't felt the need for a browser plugin: Ctrl+C, Ctrl+V is easy enough for my tastes. Plus, in Windows the "auto fill" works more often than not (reducing things to just Ctrl+V in KeePass). There are multiple KeePass clients on iOS and just about all of them support things like Dropbox sync. A curses-based CLI for KeePass, KeePassC was just recently on HN: http://raymontag.github.io/keepassc/ http://raymontag.github.io/keepassc/
  - mitchty 11y ago
    Browser plugins saving me from having to copy/paste are a huge win in my opinion. Prevents me from accidentally copy/pasting things and makes for really nice login behavior. I'll look at some of this tonight thanks!

I use opensource keepass. Sync my password db via dropbox. Totally works for me.

baldfat 11y ago

Using Dropbox for Security seems like a oxymoron? I fail to see that as anything I am willing to use.

pixard 11y ago
Why? The database itself is encrypted. Dropbox is just a easy way to sync it between devices.
zipperhead 11y ago
I store the private keyfile outside of Dropbox. To me it's a very acceptable tradeoff.
sri_cyberdude 11y ago
"Using Dropbox for sync". It's just an option. Password db is already encrypted, so it does not matter which service is used for sync :)
746F7475 11y ago
What makes you trust LastPass to spread your database to your devices more? And what makes Dropbox so bad?
- MichaelGG 11y ago
  Dropbox runs a binary on your machine; that's enough to suspect them. Stick with an open source password manager and an open sync service (S3 plus a script? Or a third party client like Arq).
  - 746F7475 11y ago
    Yeah... I'm not in the RMS camp
    - MichaelGG 11y ago
      Nothing to do with software freedom, everything to do with security/auditability.
      - flashman 11y ago
        Yeah, with Dropbox software running on your machine, you not only have to trust them not to snoop on you, you have to trust their non-auditable code to be ~perfect~ against exploitation by others.
        746F7475 11y ago
        Unless you actually read through and understand your open source alternative line by line you aren't really running anything safer Of course there is the argument that since it's open source it's safe since someone has "audited" it, but many times that's not true. And even then unless you spend a lot of time trying to break it so you understand it completely you are way better off just writing your own solution, but that takes time and effort

toxican 11y ago

Does it work on mobile?

sri_cyberdude 11y ago
Yes, i have it running in my BlackBerry! Im pretty sure, iOS and Android alternatives would be available.
- whatgoodisaroad 11y ago
  Yep. I have both an Android and iOS client that I use.

mitchty 11y ago

Are there plugins for safari/firefox/chrome and does it work on ios and have a nice little cli? I'm basically preparing to bail on lastpass with this news but need to have all my bases covered.

discreditable 11y ago
> Are there plugins for safari/firefox/chrome I just save+sync passwords in Firefox and use a strong master password. I (usually) only need to paste the password from Keepass once unless I elect to not save it (such as with financial logins). > does it work on ios? Google seems to return lots of results for iOS Keepass apps. You'll want to vet them on your own. I use KeePassDroid on Android and like it well enough.
- mitchty 11y ago
  I tend to use all 3 of the browsers for slightly different things so having plugins would be ideal but I suppose I could slum it with copy/paste as long as I follow the password/login route to reduce the chance a password gets exposed. I forgot about my nexus tablet but android is the other thing to have a look into.
WorldMaker 11y ago
With KeePass I haven't felt the need for a browser plugin: Ctrl+C, Ctrl+V is easy enough for my tastes. Plus, in Windows the "auto fill" works more often than not (reducing things to just Ctrl+V in KeePass). There are multiple KeePass clients on iOS and just about all of them support things like Dropbox sync. A curses-based CLI for KeePass, KeePassC was just recently on HN: http://raymontag.github.io/keepassc/ http://raymontag.github.io/keepassc/
- mitchty 11y ago
  Browser plugins saving me from having to copy/paste are a huge win in my opinion. Prevents me from accidentally copy/pasting things and makes for really nice login behavior. I'll look at some of this tonight thanks!