4 ms·
I use KeePassXC [1], which is open-source, and I sync it across my iPhone, Windows laptop, and Linux desktop via Tresorit [2] (like Dropbox but end-to-end encry
by dannysu 9y ago
I use KeePassXC [1], which is open-source, and I sync it across my iPhone, Windows laptop, and Linux desktop via Tresorit [2] (like Dropbox but end-to-end encrypted). It's secured with a password that I know, and a keyfile that I have. I don't sync the keyfile and always manually transfer to new computers.
I also use Arq [3] to automatically backup to S3 every hour, and I also do manual backup to my external backup drives once in a while.
[1]: https://keepassxc.org
[2]: https://tresorit.com
[3]: https://www.arqbackup.com
- Jedd 9y agoAgreed on use of keepassxc - fantastic utility. I don't, and wouldn't, use dropbox or any other non-free non-self-hosted system to manage the storage or synchronisation of my secure data, so it's unison(rsync) and/or ssh'd between desktop and laptop.
- dannysu 9y agoIf only there's a way to do that with my iPhone :(
- ZenoArrow 9y agoThere are file sync apps that work with iOS devices that work with self-hosted file sync solutions.
- dannysu 9y agodo you have a particular one you recommend?
- ZenoArrow 9y agoI don't use one, but to give an example, Google for "nextcloud iphone".
- mockindignant 9y agoSeafile has an iOS client.
- deleted 9y ago[deleted]
- nialv7 9y agoI store my password file on my phone, and use KDEConnect to access it on my desktop when needed.
- rhlala 9y agoWhy not use dropbox? It is only used for sync databases, not access them, I always though if someone found my keypass database encrypted it would be useless.
- dannysu 9y agoParanoia Yeah, the KeePass database is encrypted and I secure it with both password and keyfile, but I still want something that won't leave my database "out there" available for bruteforce attempts or other attempts at it.
- roryisok 9y agoIt's hardly "out there" though. A hacker would still need to hack dropbox before they could access your keepass db and begin brute forcing. What makes your own private server more secure than dropbox's network?
- dannysu 9y agoYou're trusting them to not have issues like this: https://blogs.dropbox.com/dropbox/2011/06/yesterdays-authentication-bug/ https://blogs.dropbox.com/dropbox/2011/06/yesterdays-authent... I don't trust the servers (Dropbox or my), and thus I want it encrypted on my computer prior to sending it out on the Internet.
- roryisok 9y agoI suppose it couldn't hurt!
- stephengillie 9y agoWhat is the cause for your paranoia about keeping your keyfile in your Dropbox? I have used and advocated this model for years with no ill effects. My Dropbox is secured by MFA, with the Dropbox password itself being a random password within the KeePass keyfile. I store the whole Keepass program for Windows inside the same Dropbox account, feel free to indicate that as a security gap. On mobile I use the KeePass2Android app.
- dabber 9y agoWhat do you use to read the DB files on your phone? I'm new to iPhone and looking for an app I trust right now.
- Confusion 9y agoSame, but using Keepassdroid + DropSync use it on, and sync it to, my Android phone. Crashplan is my backup tool of choice and also backs up the Dropbox, just in case...
- rkcf 9y agoThis is my solution as well. I back it up to a sftp server to keep it synced across my devices.
- daleswanson 9y agoI recently did a bunch of research into password managers, and went with Keepassxc as well. I'm using Syncthing to sync the password archive across Linux, Mac, Android, and Windows devices. The whole setup is working very well and is all open source.
- antongribok 9y agoI've used various KeePass variants for the past 10 years or so. For anyone on Windows, I still recommend the original at http://keepass.info/ http://keepass.info/. For everyone else KeePassXC is really nice. I really like that there are so many "clones" and variants that can read/write the file format natively: https://en.wikipedia.org/wiki/KeePass#Unofficial_KeePass_releases https://en.wikipedia.org/wiki/KeePass#Unofficial_KeePass_rel...
- kuzimoto 9y agoI use the standard keepass 2 client on my windoes machines, and keepass2android on my phone. Clients only access the file via ssh to my server at home so it doesn't require storing the database on other machines.
- kuzimoto 9y agoI use the standard keepass 2 client on my windoes machines, and keepass2android on my phone. Clients only access the file via ssh to my server at home so it doesn't require storing the database on other machines.