5 ms·

Ask HN: Recommendations for a Password Manager

13 points by anshulag 6y ago

I am looking for a password manager that works - offline - locally, without an account - ability to backup - mac app It would be preferable if it is open source. Any suggestions are welcome.

robertcope 6y ago
I really like BitWarden: https://bitwarden.com/ https://bitwarden.com/
konar 6y ago
KeePassXC https://keepassxc.org/ https://keepassxc.org/
- anshulag 6y ago
  I tried this and it fits what I need. Thank you.
- auxym 6y ago
  I use this too. Keepass on windows, keepassxc on Linux and keepass2android on Android, with the db synced to all my devices via Nextcloud. The db is encrypted via a passphrase plus a keyfile that I copy manually to each device (that is, it's not synced with the db).
  - sethammons 6y ago
    I used to do this and leveraged dropbox for syncing. At some point, dropbox limited my number of devices so I self-host bitwarden. So much better now, and my wife actually uses it.
  - dyingkneepad 6y ago
    I have a great fear of things like the Android/IOS app from the store being compromised, resulting in my passwords going to someone. Do you do anything specific to overcome such fear?
konar 6y ago
Bitwarden is not offline by default - it stores you passwords in the cloud and keeps a local copy. So you can access it offline but you need online access to edit it. See: https://www.reddit.com/r/Bitwarden/comments/9yv32e/can_bitwarden_work_offline/ https://www.reddit.com/r/Bitwarden/comments/9yv32e/can_bitwa...
- robertcope 6y ago
  Sure, it depends on your definition if "offline". My guess is that most people asking for an "offline" password manager are not actually offline much of the time, but specific use cases may vary! Keepass is nice, it's what I used before Bitwarden. It's not great at syncing across devices or sharing passwords with others, though.
- alexriabtsev 6y ago
  +1 for Bitwarden
sandwhichmole 6y ago
1Password with the one-time $50 software license + its local WLAN synching functionality + automatically backing up your hdd/ssd locally.
- andremedeiros 6y ago
  Is this still true? As far as I can find on their website (and the reason I switched to self hosted Bitwarden) was that they switched to a subscription only model.
  - mulholio 6y ago
    I'm paying $35/year but I think it's still worth it. Solid integration with my Mac and iPhone.
  - MapleWalnut 6y ago
    You can purchase a license through the app. I don't think you can get one through the website.
replwoacause 6y ago
Yep, Bitwarden gets my vote too. I switched from LastPass (after 5 years of use) earlier this year and am very happy with it so far. Works great on all my devices (Win, Mac, Android).
- johntash 6y ago
  Does Bitwarden work offline? I thought it needed a server to sync to
  - thegagne 6y ago
    You can run your own locally using Docker.
  - sethammons 6y ago
    It does work offline and it does need a server to link to. It has a cached copy of your stuff, all still protected by your master password.
- aljgz 6y ago
  Can you tell us more about your problems with LastPass?
  - replwoacause 6y ago
    No problems with the service. I just wanted to go with something open source.
llampx 6y ago
I am looking for a password manager for my team as well. Keepass on a shared drive is not ideal anymore. Looking forward to seeing recommendations.
Shared404 6y ago
I use pass [1]. It's simple, terminal based, easy to back up, and open source. [1] https://www.passwordstore.org/ https://www.passwordstore.org/
- johntash 6y ago
  I haven't compared them recently, but gopass [0] is compatible with pass. It has a few more features that makes it nice to use with other people. [0] https://github.com/gopasspw/gopass https://github.com/gopasspw/gopass
zuhsetaqi 6y ago
Master Password [0] - It’s open source - Mac App does work well (also available as CLI software) - Possible to make backups - Works offline (also a Webversion so you have Access to passwords on any machine with internet access) - No account needed [0] https://masterpassword.app/ https://masterpassword.app/
chickahoona 6y ago
How about Psono? You can host everything on your own (so I assume that would count as "offline), client side encrypted and its free and open source. Full disclosure I am the main developer behind Psono.

13 points by anshulag 6y ago

I am looking for a password manager that works - offline - locally, without an account - ability to backup - mac app It would be preferable if it is open source. Any suggestions are welcome.

robertcope 6y ago

I really like BitWarden: https://bitwarden.com/ https://bitwarden.com/

konar 6y ago

KeePassXC https://keepassxc.org/ https://keepassxc.org/

anshulag 6y ago
I tried this and it fits what I need. Thank you.
auxym 6y ago
I use this too. Keepass on windows, keepassxc on Linux and keepass2android on Android, with the db synced to all my devices via Nextcloud. The db is encrypted via a passphrase plus a keyfile that I copy manually to each device (that is, it's not synced with the db).
- sethammons 6y ago
  I used to do this and leveraged dropbox for syncing. At some point, dropbox limited my number of devices so I self-host bitwarden. So much better now, and my wife actually uses it.
- dyingkneepad 6y ago
  I have a great fear of things like the Android/IOS app from the store being compromised, resulting in my passwords going to someone. Do you do anything specific to overcome such fear?

konar 6y ago

Bitwarden is not offline by default - it stores you passwords in the cloud and keeps a local copy. So you can access it offline but you need online access to edit it. See: https://www.reddit.com/r/Bitwarden/comments/9yv32e/can_bitwarden_work_offline/ https://www.reddit.com/r/Bitwarden/comments/9yv32e/can_bitwa...

robertcope 6y ago
Sure, it depends on your definition if "offline". My guess is that most people asking for an "offline" password manager are not actually offline much of the time, but specific use cases may vary! Keepass is nice, it's what I used before Bitwarden. It's not great at syncing across devices or sharing passwords with others, though.
alexriabtsev 6y ago
+1 for Bitwarden

sandwhichmole 6y ago

1Password with the one-time $50 software license + its local WLAN synching functionality + automatically backing up your hdd/ssd locally.

andremedeiros 6y ago
Is this still true? As far as I can find on their website (and the reason I switched to self hosted Bitwarden) was that they switched to a subscription only model.
- mulholio 6y ago
  I'm paying $35/year but I think it's still worth it. Solid integration with my Mac and iPhone.
- MapleWalnut 6y ago
  You can purchase a license through the app. I don't think you can get one through the website.

replwoacause 6y ago

Yep, Bitwarden gets my vote too. I switched from LastPass (after 5 years of use) earlier this year and am very happy with it so far. Works great on all my devices (Win, Mac, Android).

johntash 6y ago
Does Bitwarden work offline? I thought it needed a server to sync to
- thegagne 6y ago
  You can run your own locally using Docker.
- sethammons 6y ago
  It does work offline and it does need a server to link to. It has a cached copy of your stuff, all still protected by your master password.
aljgz 6y ago
Can you tell us more about your problems with LastPass?
- replwoacause 6y ago
  No problems with the service. I just wanted to go with something open source.

llampx 6y ago

I am looking for a password manager for my team as well. Keepass on a shared drive is not ideal anymore. Looking forward to seeing recommendations.

Shared404 6y ago

I use pass [1]. It's simple, terminal based, easy to back up, and open source. [1] https://www.passwordstore.org/ https://www.passwordstore.org/

johntash 6y ago
I haven't compared them recently, but gopass [0] is compatible with pass. It has a few more features that makes it nice to use with other people. [0] https://github.com/gopasspw/gopass https://github.com/gopasspw/gopass

zuhsetaqi 6y ago

Master Password [0] - It’s open source - Mac App does work well (also available as CLI software) - Possible to make backups - Works offline (also a Webversion so you have Access to passwords on any machine with internet access) - No account needed [0] https://masterpassword.app/ https://masterpassword.app/

chickahoona 6y ago

How about Psono? You can host everything on your own (so I assume that would count as "offline), client side encrypted and its free and open source. Full disclosure I am the main developer behind Psono.