10 ms·
KeePassXC 2.6.1
- mikece 6y agoKeePassXC and Bitwarden are the best password managers in existence right now: KeePassXC if you want to be disconnected from the cloud and Bitwarden if you want both the convenience of cloud-based password management AND high security.
- tarasmatsyk 6y agohow is your experience in a browser? I honestly tried to use Bitwarden, paid for premium for one time key feature and browser extensions comparing to 1pass are much less convenient. For instance, an ability to manage multiple website (e.g. google) accounts is priceless
- sigzero 6y agoI never had any problems using BW and my multiple gmail accounts?
- mikece 6y agoA habit I carried over from using KeePassXC is that I don't use a browser extension. Call it paranoia but I don't want the browser process to have the ability to reach into my password manager. What I do is pin the Bitwarden tab open and just copy & paste where needed. For the desktop app it would be awesome if it had an auto-type feature like KeePassXC (something that mystifies coworkers who see that in action for the first time, even remotely). Even though my employer has a corporate LastPass account for shared production passwords I insist on using KeePassXC for non-shared credentials. I've told those who need to be notified and there is general indifference what password manager I use for non-shared credentials (AWS login, GitLab credentials, storing SSH keys, etc) as long as it's secure.
- delroth 6y agoBrowser extensions have the benefit of being more resilient against phishing (since they can perform origin checks), which I would definitely recommend for most users.
- selykg 6y agoYou're losing out on certain types of phishing protections by doing this. You're also potentially opening yourself up to any apps/tools that are keeping an eye on your clipboard if you're copying and pasting. Auto-type might help with that, but I also wouldn't hold my breath for such a feature coming.
- mikece 6y agoThat is the one thing that worries me about iOS (okay: the BIGGEST concern, not the ONLY concern) now that's it has been shown that TikTok and LinkedIn (apps not on my phone) have been shown to be copying the contents of the clipboard. I had not thought of using a browser plugin to avoid clipboard scavengers on non-mobile OSes: I'll have to give that some thought now.
- TonyTrapp 6y agoAnd at the same time you win by not falling victim of "oops, there is a bug in our browser add-on that accidentally leaks arbitrary login data to websites", as it has happened in the past. Leaking all my credentials certainly sounds more concerning to me than leaking the credentials to a single page.
- selykg 6y agoBitwarden supports multiple accounts. If you have two logins for the same service with the same URLs they'll appear in the browser extension with the username shown by the title. If you're instead talking about using the same login credentials on multiple sites, it can do that as well, just edit the item and add a second URL to the site. Now that item will appear on both site URLs
- paulryanrogers 6y agoKeePass can support that too. If it sees more than one match when auto typing it'll prompt you to choose.
- tarasmatsyk 6y agoYep, I saw that, the feature I was trying to describe is a popup on a username that gives you a list of all accounts tied to this domain, which is quite handy. In Bitwarden I have to either right click or copy/paste from the extension. A bit awkward IMO
- jaimehrubiks 6y agoHow can anyone switch to bitwarden given how complex it is to switch back in the future? I love keepass because I am allowed to export my DBS to any other provider with ease. For bitwarden, there is not a good export system (that includes attachments,images...),meaning that I would be vendor locked.
- Spivak 6y agoNot an excuse for poor export capabilities but you can absolutely DIY with bitwarden-cli.
- driverdan 6y agoBitwarden is 100% open source. You can run your own server. There is no vendor lock in.
- oropolo 6y agoWhat vendor lock-in? They make it plainly clear how to export your data from BitWarden: https://bitwarden.com/help/article/export-your-data/ https://bitwarden.com/help/article/export-your-data/ Personally I think it would be awesome if Bitwarden gave you the option to export your password vault as a KDBX4 file. What's the best way to fund a bounty program for adding this feature to Bitwarden?
- gchamonlive 6y agoYou can also run your own bitwarden server either with their official server or with bitwarden_rs, a reimplementation in rust that runs better on lower-end hardware
- throwaway8941 6y agoIt runs better everywhere. I have set up both and see no difference between them feature wise. Why would you use the official one? It's so resource heavy, more difficult to set up, feels very enterprise-y.
- gchamonlive 6y agoexactly, it is suited for enterprises, where you have to stick with the official builds for compliance.
- kspacewalk2 6y ago>best password managers in existence right now I am using 1Password with a standalone licence (sunk cost, so 'free' doesn't matter much. Also, C$70 is essentially free when it comes to securing my digital life). I sync a vault with a few co-workers via Dropbox and this is sufficient for us, no need for 1Password.com 'cloud' yet. We like the UI, and to our knowledge 1Password has the best track record for security, with extensive and continuous testing and no major fuck-ups yet. What advantages to switching to KeePassXC or Bitwarden are there for us?
- shmerl 6y agoSuch tools should be open source.
- chucky 6y agoSource code access, and being free of charge seems to be the main things you would get compared to 1Password. Also, great Linux support (from what I've heard 1Password only recently even added a Linux-compatible client). But to me it sounds like you have a solution you are very happy with, and you don't mind paying for that solution, so my recommendation would be to stick with it. Although, as a happy user of KeePassXC, I'm tempted to ask the counter-question: why would I want to pay for 1Password when KeePassXC gives me a great solution for free (and also gives me source code access)?
- kspacewalk2 6y agoGood question. I can't think of compelling reasons why a standalone user, or a small team, would switch to 1Password if they're already happy with KeePassXC.
- benhurmarcel 6y agoI did that switch after using Keepass(XC) for about 10 years. For me it was for the seamless sync across devices, and nicer polish of the various apps/addons (iOS, Firefox, etc).
- spanhandler 6y ago
- mimimi31 6y ago>convenience of cloud-based password management AND high security. One attack vector I see with Bitwarden is that if the server hosting the web client or the Firefox/Google account that owns the browser extension gets compromised, they could easily be modified to exfiltrate all your data. So unless you always package the browser extension yourself and check the web client's code before using it, your passwords are essentially only as secure as the developer's security measures are strong.
- chromedev 6y agoNope, pass (Password Store) is way better IMO.
- k33n 6y agoCurrently running KeePassX. Maybe I'll give this a whirl. The key concept with the KeePass family of projects is that your passwords remain on your device, and don't get synced to some cloud you have no control over.
- nickcw 6y agoI moved from KeepPassX to XC recently. It has the same features but the user interface is so much better. The android app is great too. I use rclone to sync my keepass file to Google Drive which means it is always up to date on my phone too
- ObsoleteNerd 6y agoI’ve been using KeePassXC almost as long as it’s been available, and couldn’t be happier. Database stored on my NAS and synced to Dropbox for when I’m out, gives me access on all my devices without having to worry about whether x or y service will still be around in a year or 2.
- szszrk 6y agoI do this as well, although tried lastpass and bitwarden. It just wasn't that great and those "standalone" apps were just silly compared to keepass/keepassXc. One thing that was a killer feature for me: keepass2Android was WAY better to in integration to my android devices. Tried to convince family to use a password manager, but lastpass was a failure on some devices. Keepass with sync to some cloud is perfect - database with multiple copies, works well.
- 40four 6y agoStarted using Keypass about a year ago, I really like it. Just wondering if Dropbox is considered a safe place to store the DB files? I did this for a while, but then I got paranoid and switched to something fully encrypted. For sharing between devices I found Firefox Send to be useful (before it went down, hope it comes back), also Keybase filesystem is one of my go-tos as well. Maybe I’m being overly cautious, but I sleep better at night knowing my DBs are encrypted.
- Nullabillity 6y agoKeePass(XC) encrypts the database on its own.
- vbezhenar 6y agoYour database is encrypted by default. Additional encryption won't hurt, of course, but you can absolutely use Dropbox.
- 40four 6y agoRight, I guess my concern was a brute force attack on a DB file if it fell into the wrong hands. I looked at the main website again though, and apparently the official Windows app has some protection against this. It says however, KeypassX (and I assume therefore KeypassXC) does not have the same level of protection. Another comment mentioned using a key-file, so maybe I will revisit that approach, since I used password only when I started.
- roel_v 6y agoI switched to KeePassXC a few months ago from KeePass. The UI is quite clunky in places, but that's easier to live with than being beholden to some online service...
- nix23 6y agoKeePassXC and pass (the standard unix password manager) are the absolut best. Thanks allot to the maintainers!!
- random_dork1 6y agoIs there an easy way to import/export between them?
- nix23 6y agoYeah under "Migrating to" https://www.passwordstore.org/ https://www.passwordstore.org/
- random_dork1 6y agothanks! If I find a way to use multiple stores in pass, I will switch to it. It seems that it's autofill on Android is a lot better than any Keepass app that I tried.
- random_dork1 6y agoFound this tutorial: https://www.gilesorr.com/blog/shared-passwordstore.html https://www.gilesorr.com/blog/shared-passwordstore.html There are two ways of having multiple stores and sharing them, but I am not too sure I like these solutions....
- mikece 6y agoI have read that the KDBX4 password database is "very secure" but am curious if any hacking challenges have been conducted to see if anyone can break it? The challenge I have in mind put some kind of contact info in an entry and then post the KDBX file on a public site for anyone to download and try to hack. If you get it open, use the info to contact the contest organizers and once you explain how you overcame the security and it's replicated you get however much has been donated as a hack bounty. I'll put $100 in right now if the maintainers of KeePassXC are down with this.
- paulryanrogers 6y agoThere have been audits of the official KeePass.info software which some argue still has open vulnerabilities. Not sure if there have been audits of this popular fork or the format itself. IIRC the format is relatively simple: an encrypted XML stream. So it may be OK.
- Mikescher 6y agoI'm no cryptographic expert, but I always liked the simple design of the kdbx files. So simple that I can understand it and see tat there are no (obvious, assuming the underlying algorithms are called correctly) problems: The whole database is a single big xml document which is then encrypted with a normal symmetrical encryption method (most of the time AES). And that is already the core of it. There are a few additional things (A user-chosen key-derivation-function is used to increase the brute-force time and there is a header in the binary format with such things as keepass version, which algorithms are used for encrypting and a checksum...). But in comparison to other cloud-based password managers it's a nice feeling to intuitively "know" whats happening under the hood.
- swayson 6y agoLove this project.
- ProNeo 6y agoAny reason to switch over from KeePass to KeePassXC? I'm only using Windows so the cross platform argument doesn't hit me actually.
- Marsymars 6y agoNot really. I use KeePass on Windows and KeePassXC on macOS for the same password db that I have cloud synced.
- michaelcampbell 6y agoThere are some nice quality of life features; the "auto-save" being the one I use the most. So my changes don't get lost, and they get synced (for me via Syncthing) virtually immediately. I find the browser integration extension(s) more robust/stable as well, but that could be environmental.
- oropolo 6y agoThe KeePassXC developers are quite conscious about memory security and implement that in XC in a way that's not really possible with a .NET application like KeePass: https://keepassxc.org/blog/2019-02-21-memory-security/ https://keepassxc.org/blog/2019-02-21-memory-security/
- urtrs 6y agoKeePassXC supports TOTP. This is the main reason why I switched.
- ProNeo 6y agoArguments sound good but I didn't seem to find any biometric authentication for KeePassXC. In KeePass I could use some plug-ins to connect Windows Hello with KeePass so I could unlock the DB with my fingerprint or via looking into the camera. Maybe I simply didn't search good enough, is there any possibility to have such functionality in KeePassXC?
- flytram 6y agoI have a free drop box account and use it to store kdb file. What is a better alternate if I want to access to kdb file from more than 3 devices (combination of windows + ios devices.)
- ProNeo 6y agoSyncthing
- flytram 6y agoI did read the other comment about syncthing; but that requires setting up a server. Do not want to go that route.. :)
- trulyrandom 6y agoSyncthing does not require setting up a server. Your devices connect to each other directly, or through a relay if that's not possible.
- flytram 6y agoThanks.. Will give a try...
- mintplant 6y agoOneDrive, if you don't want to self-host. I switched from Dropbox when they added the device limit.
- whatsmyusername 6y agoWhen will we reach 3 letters after keepass being the new hotness?
- brokenmachine 6y agoCan anyone tell me which Keepass they recommend? There's so many different Keepasses... I'd like to use the same db file between Windows, Linux and Android, and I'd like to be able to autoenter without a browser plugin, at least on Windows.
- lytedev 6y agoI believe this one, KeePassXC, is the most-recommended one.
- brokenmachine 6y agoIs the db format standard - ie can I sync the same file between Android/Linux and KeePassXC and use it in all of them?
- benhurmarcel 6y agoYes, it’s the same format
- purerandomness 6y agoKeePassXC is the only one actively maintained.