3 ms·
I like keepassx. It just works and no need for any online account. You use a good master key/password and rest of the passwords, don't even remember.
by codegeek 10y ago
I like keepassx. It just works and no need for any online account. You use a good master key/password and rest of the passwords, don't even remember.
- el_benhameen 10y agoHow do you personally handle passwords on multiple devices? Just host it somewhere publicly accessible and use a really strong master?
- dannysu 10y agoI use Tresorit (https://tresorit.com https://tresorit.com) to sync across machines and phones.
- Ajedi32 10y agoMy setup is to store the database itself in a cloud storage service that supports 2FA like Dropbox, and encrypt it with a file/password combo key. The key file I manually copy to every device I use, and the master password is stored in my head. This way it's safe to store the database in the cloud without having to worry about attackers trying to brute force my master password if Dropbox gets compromised (since they'd also need the key file, which is only stored locally), and even if the key file is stolen the attacker would still need my master password to access the database.
- defined 10y ago+1 for keepassx. I use it on all platforms (well, keepass droid too). All passwords are randomly generated except the one for the keepassx db (and that also needs the key file).
- ce4 10y agoAnd keepass has also (some sort of) 2FA via a local key file. While it's of course not as good as a real token generator, it helps against password sniffing and makes cracking much harder.