4 ms·
There are only three meaningfully "correct" recommendations for password managers as of today, depending on the use case: 1Password, Bitwarden, or KeepassXC. 1
by scrollaway 5y ago
There are only three meaningfully "correct" recommendations for password managers as of today, depending on the use case: 1Password, Bitwarden, or KeepassXC.
1Password is fantastic, but expensive and closed source. Bitwarden is open source, but lacks certain auditing, team and sync features useful for enterprise. KeepassXC is excellent and open source, but with zero collaboration features is only suitable for self use.
- jfktn5ntkfl 5y agoDo you think KeePassXC is better than original KeePass?
- scrollaway 5y agoAbsolutely, xc has been far better maintained in the last few years.
- 1cvmask 5y agoHave you taken a look at saas pass that has 2fa as the default and the password manager identifies sites with 2fa? disclaimer: was involved on the 2fa part of it.
- AvocadoCake 5y agoI used SaaS pass at work for a while, and it made my day a little bit worse every time I had to use its 2FA. The app's login on push notification thing was very slow, and would fail too often (maybe 5-10% of the time). I ended up using the QR code scanning for 2FA more often than not, but even that was slow, not even accounting for for the time it takes a human to unlock their phone and open the app. Doing thing multiple times throughout the workday was a real drag. It's a shame, because I think the idea of it is nicer and no less secure than Google Auth, but I'd much rather enter 6 numbers than wait for the app. Disclaimer: This was around a year ago, perhaps it's improved since.
- ch33zer 5y agoAnd how did you come up with this list of 'correct' password managers?
- scrollaway 5y agoQuite simply through experience.
- throwaway24006 5y agoThere's also 'pass', created by Jason Donenfield, who also created WireGuard. But I think it's not for laypeople. https://www.passwordstore.org/ https://www.passwordstore.org/
- jacoblambda 5y agoThere's some collaboration features. You can create "keeshares" between multiple separate databases. All the databases can append, update, or read the share. You can't delete an entry but you can deprecate it and stop updating it (it's not actually feasible to revoke access anyways).
- scrollaway 5y agoKeeshares seem new, I hadn't heard about them. Seems… interesting. Thanks for pointing them out.