5 ms·

Yes, I do copy/paste from my local password manager. A clipboard scraper is a possibility, yes. I hadn't logged into that LastPass account for years, so it's d

Yes, I do copy/paste from my local password manager. A clipboard scraper is a possibility, yes. I hadn't logged into that LastPass account for years, so it's definitely not me who attempted to login earlier. Re: LastPass, is there another cloud-based tool that's generally considered as more trustworthy? Bitwarden? Thanks

coderintherye 5y ago
Bitwarden is great, highly recommend, it's open-source which adds to its trustworthiness and has a good track record of respecting users.
- nyolfen 5y ago
  +1, you can host your own server as well https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
  - hda111 5y ago
    Unofficial server so you probably should avoid the web application (or build it yourself from official sources). In theory it could contain malicious code that leaks your password.
  - sofixa 5y ago
    There's an official self-host open source version as well ( the one you linked is unofficial), but it's rather heavy ( multiple .NET services, MS SQL) and not adapted for small scales.
    - nyolfen 5y ago
      yes, we don't talk about that one
      - syshum 5y ago
        Is the unofficial one Security Audited?
- senectus1 5y ago
  I'm in this party too. bitwarden for yourself, friends and family...
rich_sasha 5y ago
I use 1Password, seems alright security wise, won’t definitely say one way or the other, but you could DYOR on it.
mateuszf 5y ago
Bitwarden is fantastic
40four 5y ago
Personally I just stick to local Keepass database files. I’ve never ventured into the cloud based services. If you are really worried about it, do you really need to use a cloud based password service? Sure, managing the KeePass files by hand is certainly more cumbersome, but to me it’s worth it for the security/ peace of mind gains. I have never put my DB or key files in the cloud. And when I need to sync them up over all my devices, I gather all the DB files and use the handy ‘merge’ functionality to get them into the same state.
- tomsmeding 5y ago
  TIL about the merge functionality! You can also use Syncthing to synchronise the databases between your devices; if you don't have public IPs for your devices, this essentially means that you can only synchronise when two devices are on the same network -- but this might not be a problem for you.
  - newaccount74 5y ago
    Syncthing works great even behind a NAT, not sure how it works but it just works for me (might depend on your NAT though)
    - tomsmeding 5y ago
      I've had zero success with nat hole punching in the past, on multiple networks. Maybe I'm just unlucky. :)
      - newaccount74 5y ago
        Some routers have UPnP disabled by default, maybe enabling that would help?
  - tentacleuno 5y ago
    You can also use Syncthing and the merge function! It comes in very handy when two devices have made changes to the password database file and you end up with merge conflicts :D
fragmede 5y ago
1Password has a cloud-based option these days, for better or worse.
- runlevel1 5y ago
  And soon they'll _only_ have a cloud-based option with no option for local-only vaults. https://1password.community/discussion/comment/602340/#:~:text=1Password%207%20will%20be%20the%20last%20version%20of%201Password%20to%20support%20standalone%20vaults https://1password.community/discussion/comment/602340/#:~:te...
  - jacquesm 5y ago
    Gotta get those sweet SaaS dollars and never mind the original goals or the user.

coderintherye 5y ago

Bitwarden is great, highly recommend, it's open-source which adds to its trustworthiness and has a good track record of respecting users.

nyolfen 5y ago
+1, you can host your own server as well https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
- hda111 5y ago
  Unofficial server so you probably should avoid the web application (or build it yourself from official sources). In theory it could contain malicious code that leaks your password.
- sofixa 5y ago
  There's an official self-host open source version as well ( the one you linked is unofficial), but it's rather heavy ( multiple .NET services, MS SQL) and not adapted for small scales.
  - nyolfen 5y ago
    yes, we don't talk about that one
    - syshum 5y ago
      Is the unofficial one Security Audited?
senectus1 5y ago
I'm in this party too. bitwarden for yourself, friends and family...

rich_sasha 5y ago

I use 1Password, seems alright security wise, won’t definitely say one way or the other, but you could DYOR on it.

mateuszf 5y ago

Bitwarden is fantastic

40four 5y ago

Personally I just stick to local Keepass database files. I’ve never ventured into the cloud based services. If you are really worried about it, do you really need to use a cloud based password service? Sure, managing the KeePass files by hand is certainly more cumbersome, but to me it’s worth it for the security/ peace of mind gains. I have never put my DB or key files in the cloud. And when I need to sync them up over all my devices, I gather all the DB files and use the handy ‘merge’ functionality to get them into the same state.

tomsmeding 5y ago
TIL about the merge functionality! You can also use Syncthing to synchronise the databases between your devices; if you don't have public IPs for your devices, this essentially means that you can only synchronise when two devices are on the same network -- but this might not be a problem for you.
- newaccount74 5y ago
  Syncthing works great even behind a NAT, not sure how it works but it just works for me (might depend on your NAT though)
  - tomsmeding 5y ago
    I've had zero success with nat hole punching in the past, on multiple networks. Maybe I'm just unlucky. :)
    - newaccount74 5y ago
      Some routers have UPnP disabled by default, maybe enabling that would help?
- tentacleuno 5y ago
  You can also use Syncthing and the merge function! It comes in very handy when two devices have made changes to the password database file and you end up with merge conflicts :D

fragmede 5y ago

1Password has a cloud-based option these days, for better or worse.

runlevel1 5y ago
And soon they'll _only_ have a cloud-based option with no option for local-only vaults. https://1password.community/discussion/comment/602340/#:~:text=1Password%207%20will%20be%20the%20last%20version%20of%201Password%20to%20support%20standalone%20vaults https://1password.community/discussion/comment/602340/#:~:te...
- jacquesm 5y ago
  Gotta get those sweet SaaS dollars and never mind the original goals or the user.