5 ms·

Keepass and its various forks are open source. Keepass itself uses dotNet so Linux guys need mono which not all people like. Those people use KeepassXC (a fork

Keepass and its various forks are open source. Keepass itself uses dotNet so Linux guys need mono which not all people like. Those people use KeepassXC (a fork of KeepassX which is Keepass in C++ and is unmaintained). I use Keepass. Reasonable security but ugly gui in linux due to mono. Has plugins. Completely offline.

cat199 9y ago
ditto. + kpcli for TTY use, keepassdroid for android, sync to owncloud, voila. If you are extra concerned with security after storing your file remotely, you can have it use an addtional external keyfile in addition to the which you manually copy to 'authorize' devices
bmurphy1976 9y ago
If you can stomach an electron app Keeweb is a nice keepass compatible alternative.
- 6ak74rfy 9y ago
  This looks nice. How has your experience with it so far?
  - s_chaudhary 9y ago
    I have been using keeweb on mac, it's a delight.
- kronos29296 9y ago
  I can't. Atom has given me electron trauma (older versions about a couple of years back).
  - devcpp 9y ago
    Then forget about it. Keepass2 and KeepassXC (depending on your OS) are the best of the best.
6ak74rfy 9y ago
Have you used KeepassXC. I am panning to move to it from lastpass, and want to make sure I am making the right choice.
- kronos29296 9y ago
  KeepassXC does not support the latest kdbx 4 format which was recently released with Argon2 support. (which is supposed to be more secure). It will be supported in the next release 2.3.0. So for now I use Keepass until it supports kdbx 4 then I will move back. It has no plugins though compared to keepass. Other than that it has better gui if that is your thing (Keepass is ugly). It is mostly a fork of keepassx which is still usable but KeepassXC merged all pull requests and fixed a load of bugs in keepassx after the maintainer stopped maintaining. Try it. It works. It also has mutilple releases (snap, appimage etc.).
- AbacusAvenger 9y ago
  I've used KeePassXC, and I think it's the best KeePass variant. I don't like stock KeePass because it's horribly slow under Mono (Linux/OS X). And I like but am not as satisfied with KeePassX because it lacks some features I like. From what I recall, the maintainers of KeePassXC got frustrated with the feature set and development pace of KeePassX, so they made their own fork. And they added nice things like TOTP code generation (i.e. Google Authenticator style) and YubiKey support. I can't yet wean myself off of LastPass though, just because it's synced everywhere and is more reliable when doing form fills on websites. For example, KeePass and its variants don't have a concept of equivalent domains. For "equivalent domains" I should be prompted with the same lists of auto-fillable credentials, such as: * youtube.com/google.com/gmail.com * bing.com/hotmail.com/live.com/microsoft.com/msn.com/passport.net/windows.com * apple.com/icloud.com LastPass gets this right, but I sadly haven't seen any other password manager that does. I think there's an open issue with KeePassXC to address this but it's not merged or production ready.
  - cyphar 9y ago
    With KeePassXC you would do this by adding new entries for each alias and then reference the username and password values of the "base" entry. I believe the feature still isn't in a release, and the UX isn't there at the moment. The problem is that they can't deviate from the official KeePass database format, so adding something like aliases requires hacks like the above.
thinkmassive 9y ago
KeepassXC recently added support for Yubikey OTP too, in case that interests you. https://keepassxc.org/blog/2017-06-26-2.2.0-released/ https://keepassxc.org/blog/2017-06-26-2.2.0-released/
gerdesj 9y ago
I use KeePass on Linux via Mono (Arch and Gentoo). The UI is no worse than on Windows if you sort out your fonts. We have about 20 concurrent users of the same several DBs (one at least of which has many hundreds of entries) on a network share. It is absolutely rock solid. I'm not sure that KeepassXC can be considered unmaintained - their last release was in June, this year - https://keepassxc.org/blog/ https://keepassxc.org/blog/ . Also note the monthly tone of the updates - even the koolist of kool dev kids kant complain that is slow 8)
- Murrawhip 9y ago
  I think he's saying that KeepassXC is a fork of KeepassX, which is unmaintained.

cat199 9y ago

ditto. + kpcli for TTY use, keepassdroid for android, sync to owncloud, voila. If you are extra concerned with security after storing your file remotely, you can have it use an addtional external keyfile in addition to the which you manually copy to 'authorize' devices

bmurphy1976 9y ago

If you can stomach an electron app Keeweb is a nice keepass compatible alternative.

6ak74rfy 9y ago
This looks nice. How has your experience with it so far?
- s_chaudhary 9y ago
  I have been using keeweb on mac, it's a delight.
kronos29296 9y ago
I can't. Atom has given me electron trauma (older versions about a couple of years back).
- devcpp 9y ago
  Then forget about it. Keepass2 and KeepassXC (depending on your OS) are the best of the best.

6ak74rfy 9y ago

Have you used KeepassXC. I am panning to move to it from lastpass, and want to make sure I am making the right choice.

kronos29296 9y ago
KeepassXC does not support the latest kdbx 4 format which was recently released with Argon2 support. (which is supposed to be more secure). It will be supported in the next release 2.3.0. So for now I use Keepass until it supports kdbx 4 then I will move back. It has no plugins though compared to keepass. Other than that it has better gui if that is your thing (Keepass is ugly). It is mostly a fork of keepassx which is still usable but KeepassXC merged all pull requests and fixed a load of bugs in keepassx after the maintainer stopped maintaining. Try it. It works. It also has mutilple releases (snap, appimage etc.).
AbacusAvenger 9y ago
I've used KeePassXC, and I think it's the best KeePass variant. I don't like stock KeePass because it's horribly slow under Mono (Linux/OS X). And I like but am not as satisfied with KeePassX because it lacks some features I like. From what I recall, the maintainers of KeePassXC got frustrated with the feature set and development pace of KeePassX, so they made their own fork. And they added nice things like TOTP code generation (i.e. Google Authenticator style) and YubiKey support. I can't yet wean myself off of LastPass though, just because it's synced everywhere and is more reliable when doing form fills on websites. For example, KeePass and its variants don't have a concept of equivalent domains. For "equivalent domains" I should be prompted with the same lists of auto-fillable credentials, such as: * youtube.com/google.com/gmail.com * bing.com/hotmail.com/live.com/microsoft.com/msn.com/passport.net/windows.com * apple.com/icloud.com LastPass gets this right, but I sadly haven't seen any other password manager that does. I think there's an open issue with KeePassXC to address this but it's not merged or production ready.
- cyphar 9y ago
  With KeePassXC you would do this by adding new entries for each alias and then reference the username and password values of the "base" entry. I believe the feature still isn't in a release, and the UX isn't there at the moment. The problem is that they can't deviate from the official KeePass database format, so adding something like aliases requires hacks like the above.

thinkmassive 9y ago

KeepassXC recently added support for Yubikey OTP too, in case that interests you. https://keepassxc.org/blog/2017-06-26-2.2.0-released/ https://keepassxc.org/blog/2017-06-26-2.2.0-released/

gerdesj 9y ago

I use KeePass on Linux via Mono (Arch and Gentoo). The UI is no worse than on Windows if you sort out your fonts. We have about 20 concurrent users of the same several DBs (one at least of which has many hundreds of entries) on a network share. It is absolutely rock solid. I'm not sure that KeepassXC can be considered unmaintained - their last release was in June, this year - https://keepassxc.org/blog/ https://keepassxc.org/blog/ . Also note the monthly tone of the updates - even the koolist of kool dev kids kant complain that is slow 8)

Murrawhip 9y ago
I think he's saying that KeepassXC is a fork of KeepassX, which is unmaintained.