5 ms·

Why can't people use keepass in local environment, or store the database in sftp? Why do people try so hard to use "cloud" based clearly unsecure solutions?

dingo_bat 7y ago
> Why can't people use keepass in local environment How do I use it on my phone then? > or store the database in sftp SFTP where? The "cloud"? > Why do people try so hard to use "cloud" based clearly unsecure solutions? Because it is the easiest and most convenient and most useful.
- Macha 7y ago
  I have a setup with syncthing to transfer it between all my devices without going to devices I do not control. Previously I used Dropbox, which while putting your encrypted vault on a third party service, is easily accessible to non-techies
- fbnlsr 7y ago
  Trying to use Keepass on my phone is the exact reason I had to find another solution. I've switched to Bitwarden a few months ago, and I couldn't be happier.
  - rcxdude 7y ago
    +1 for bitwarden, it's open-source (both client and server), and does the job well (only issue is the UI in the firefox extension can be a little frustrating).
  - ahnick 7y ago
    As a Keepass(keepassxc on Ubuntu) user I recently switched to Strongbox from the now abandoned MiniKeePass, which I have been very happy with. It supports using FaceID with a Pin, which is great for quick access on my phone. Syncing with wireguard/resilio sync.
- ahnick 7y ago
  I have wireguard setup for my home network and phone. Then I use Resilio Sync to perform the synchronization between my phone and my home network once wireguard is connected. Allows me to synchronize from anywhere securely.
- system2 7y ago
  1-) Kypass for phone. 2-) Sftp = not cloud, dedicated non-public server which you can also setup in your home environment such as a nas drive which only and only you have access to. 3-) I am convinced it is the safest, because no 3rd party is involved in my perfectly synced password system.
deleted 7y ago
[deleted]
rcxdude 7y ago
This reeks of the infamous dropbox comment on HN. Let alone the fact that the average user has no idea what SFTP is nor has any easy way to use it, even as a tech literate used who has no difficulty setting up the solution you describe, I would not switch from a more dedicated solution, because quite frankly it sucks. You have to manually sync, the sync cannot deal with two different systems adding different accounts, you now have two systems to deal with (sftp and keepass), and you're not significantly more secure. I would go back to reusing passwords before I adopted such a solution.
- ipnon 7y ago
  Can you link to the infamous Dropbox comment for those who are not in the know?
  - lkbm 7y ago
    https://news.ycombinator.com/item?id=9224 https://news.ycombinator.com/item?id=9224
- system2 7y ago
  Keepass automatically syncs. Kypass (mobile) automatically syncs. All it takes is to enter sftp credentials to KeePass, and the rest is automatic. Not sure why you couldn't figure it out, but it works for the last 5+ years flawlessly. I didn't touch a single button to do anything extra, all I need is my SFTP credentials (once while setting up) and master password to open in my local machine.

dingo_bat 7y ago

> Why can't people use keepass in local environment How do I use it on my phone then? > or store the database in sftp SFTP where? The "cloud"? > Why do people try so hard to use "cloud" based clearly unsecure solutions? Because it is the easiest and most convenient and most useful.

Macha 7y ago
I have a setup with syncthing to transfer it between all my devices without going to devices I do not control. Previously I used Dropbox, which while putting your encrypted vault on a third party service, is easily accessible to non-techies
fbnlsr 7y ago
Trying to use Keepass on my phone is the exact reason I had to find another solution. I've switched to Bitwarden a few months ago, and I couldn't be happier.
- rcxdude 7y ago
  +1 for bitwarden, it's open-source (both client and server), and does the job well (only issue is the UI in the firefox extension can be a little frustrating).
- ahnick 7y ago
  As a Keepass(keepassxc on Ubuntu) user I recently switched to Strongbox from the now abandoned MiniKeePass, which I have been very happy with. It supports using FaceID with a Pin, which is great for quick access on my phone. Syncing with wireguard/resilio sync.
ahnick 7y ago
I have wireguard setup for my home network and phone. Then I use Resilio Sync to perform the synchronization between my phone and my home network once wireguard is connected. Allows me to synchronize from anywhere securely.
system2 7y ago
1-) Kypass for phone. 2-) Sftp = not cloud, dedicated non-public server which you can also setup in your home environment such as a nas drive which only and only you have access to. 3-) I am convinced it is the safest, because no 3rd party is involved in my perfectly synced password system.

deleted 7y ago

[deleted]

rcxdude 7y ago

This reeks of the infamous dropbox comment on HN. Let alone the fact that the average user has no idea what SFTP is nor has any easy way to use it, even as a tech literate used who has no difficulty setting up the solution you describe, I would not switch from a more dedicated solution, because quite frankly it sucks. You have to manually sync, the sync cannot deal with two different systems adding different accounts, you now have two systems to deal with (sftp and keepass), and you're not significantly more secure. I would go back to reusing passwords before I adopted such a solution.

ipnon 7y ago
Can you link to the infamous Dropbox comment for those who are not in the know?
- lkbm 7y ago
  https://news.ycombinator.com/item?id=9224 https://news.ycombinator.com/item?id=9224
system2 7y ago
Keepass automatically syncs. Kypass (mobile) automatically syncs. All it takes is to enter sftp credentials to KeePass, and the rest is automatic. Not sure why you couldn't figure it out, but it works for the last 5+ years flawlessly. I didn't touch a single button to do anything extra, all I need is my SFTP credentials (once while setting up) and master password to open in my local machine.