4 ms·

Store and Sync Passwords with Dropbox Passwords

23 points by fniephaus 6y ago

manigandham 6y ago
This is a lot more useful than that terrible file browser app they created. However I find Chrome's password manager to be the best, especially when using different profiles for work/personal/etc
ITB 6y ago
What I want is to encrypt my Dropbox files with my own key. I’m constantly looking for alternatives because I find the lack of encryption problematic. I would seriously hope stored logins aren’t encrypted under a single Dropbox key.
- ecf 6y ago
  I’m being kinda cynical here, but one isn’t allowed to grow to be one of the largest online storage providers without the capability to hand over the keys to the government so we might not ever get to see a widely adopted service that uses encryption in the manner you want.
- dkobia 6y ago
  Personally I created 256 bit encrypted disk images for sensitive stuff and put them on Dropbox. this has worked for quite a few years.
- ncrmro 6y ago
  Check out rclone, encrypts file, filename, and file directory (last two are optional). It’s what freenas uses to back up to backblaze or any s3 bucket. Ive then verified the backups using rclone on ubuntu
- dddw 6y ago
  Check out cryptomator. Encrypted vaults for wherever you want, so also Dropbox
- luminadiffusion 6y ago
  If you don’t control your encryption keys, you don’t control your encryption. I’ve used AESCrypt for a while. Open source and no major bugs found under a third-party audit.
AnonsLadder 6y ago
I don't feel too strongly for this, something about paying monthly to a 3rd-party just to store your passwords seems like a ticking timebomb. I especially wouldn't rely on Dropbox to handle my credentials for $. You could essentially just stick with using a free Dropbox account, use your favorite Password Manager, ex. KeepPass, and save your password protected encrypted database backup to your Dropbox account, & load the file from another device, etc, Right? I'm just too used to using password managers on VM's that i've never found use-case in syncing them between other machines cause that already sounds rediculously dangerous enough, next to storing them on your Untrusted web-browser. It sounds extra, but i'm that paranoid after personally experiencing getting 'hacked'.
- dkobia 6y ago
  I am quite happy to pay 1Password for the same. The benefits of biometric access on my phone and auto filling forms is too hard to pass up.
- wildrhythms 6y ago
  Any tips on how I can decouple myself from the Google password manager? The convenience of having passwords synced across every signed-in Chrome instance on every device (and even in-app on Android) is still something I haven't found a suitable replacement for yet.
  - lern_too_spel 6y ago
    Google password manager doesn't support sharing passwords. As soon as you need that, Google's solution isn't going to be enough for you.
  - AnonsLadder 6y ago
    Privacy tools' has some great info on alternatives: https://www.privacytools.io/software/passwords/ https://www.privacytools.io/software/passwords/ Bitwarden is your best shot, it's the only open-source one that allows remote syncing across all devices. You can build everything yourself as well: https://github.com/bitwarden https://github.com/bitwarden
boromi 6y ago
Is the format compatible with other password databases?
droidno9 6y ago
Until Dropbox adopts zero-knowledge encryption across all of its products, it's going to be a hard "no" for me. I'd rather spend my money with companies that take zero-knowledge seriously. According to Dropbox, this product is zero-knowledge encrypted. So at least they're moving in the right direction.
inshadows 6y ago
How come it is suddenly accepted to share passwords, something we were always told to keep to ourselves only, with internet companies, in cleartext? Times sure are changing.
- Barrin92 6y ago
  >, in cleartext? at the bottom of the site: "zero-knowledge encryption means that only you can access your passwords." the data is locally encrypted, so the company in question never sees your data in cleartext. Generally with services like these your vault is unlocked with a master password.

23 points by fniephaus 6y ago

This is a lot more useful than that terrible file browser app they created. However I find Chrome's password manager to be the best, especially when using different profiles for work/personal/etc

ITB 6y ago

What I want is to encrypt my Dropbox files with my own key. I’m constantly looking for alternatives because I find the lack of encryption problematic. I would seriously hope stored logins aren’t encrypted under a single Dropbox key.

ecf 6y ago
I’m being kinda cynical here, but one isn’t allowed to grow to be one of the largest online storage providers without the capability to hand over the keys to the government so we might not ever get to see a widely adopted service that uses encryption in the manner you want.
dkobia 6y ago
Personally I created 256 bit encrypted disk images for sensitive stuff and put them on Dropbox. this has worked for quite a few years.
ncrmro 6y ago
Check out rclone, encrypts file, filename, and file directory (last two are optional). It’s what freenas uses to back up to backblaze or any s3 bucket. Ive then verified the backups using rclone on ubuntu
dddw 6y ago
Check out cryptomator. Encrypted vaults for wherever you want, so also Dropbox
luminadiffusion 6y ago
If you don’t control your encryption keys, you don’t control your encryption. I’ve used AESCrypt for a while. Open source and no major bugs found under a third-party audit.

AnonsLadder 6y ago

I don't feel too strongly for this, something about paying monthly to a 3rd-party just to store your passwords seems like a ticking timebomb. I especially wouldn't rely on Dropbox to handle my credentials for $. You could essentially just stick with using a free Dropbox account, use your favorite Password Manager, ex. KeepPass, and save your password protected encrypted database backup to your Dropbox account, & load the file from another device, etc, Right? I'm just too used to using password managers on VM's that i've never found use-case in syncing them between other machines cause that already sounds rediculously dangerous enough, next to storing them on your Untrusted web-browser. It sounds extra, but i'm that paranoid after personally experiencing getting 'hacked'.

dkobia 6y ago
I am quite happy to pay 1Password for the same. The benefits of biometric access on my phone and auto filling forms is too hard to pass up.
wildrhythms 6y ago
Any tips on how I can decouple myself from the Google password manager? The convenience of having passwords synced across every signed-in Chrome instance on every device (and even in-app on Android) is still something I haven't found a suitable replacement for yet.
- lern_too_spel 6y ago
  Google password manager doesn't support sharing passwords. As soon as you need that, Google's solution isn't going to be enough for you.
- AnonsLadder 6y ago
  Privacy tools' has some great info on alternatives: https://www.privacytools.io/software/passwords/ https://www.privacytools.io/software/passwords/ Bitwarden is your best shot, it's the only open-source one that allows remote syncing across all devices. You can build everything yourself as well: https://github.com/bitwarden https://github.com/bitwarden

boromi 6y ago

Is the format compatible with other password databases?

droidno9 6y ago

Until Dropbox adopts zero-knowledge encryption across all of its products, it's going to be a hard "no" for me. I'd rather spend my money with companies that take zero-knowledge seriously. According to Dropbox, this product is zero-knowledge encrypted. So at least they're moving in the right direction.

inshadows 6y ago

How come it is suddenly accepted to share passwords, something we were always told to keep to ourselves only, with internet companies, in cleartext? Times sure are changing.

Barrin92 6y ago
>, in cleartext? at the bottom of the site: "zero-knowledge encryption means that only you can access your passwords." the data is locally encrypted, so the company in question never sees your data in cleartext. Generally with services like these your vault is unlocked with a master password.