3 ms·

I use my own domain and give each website their own e-mail address too, so I know who is breached/selling my information. For password management I use BitWarde

I use my own domain and give each website their own e-mail address too, so I know who is breached/selling my information. For password management I use BitWarden, to which I am a paying customer of 15$ a year for their premium features (Premium features being TOTP integrated into the password manager, probably something else too that I don't use). BitWarden is open source, both server and clients. There's even a third party implementation of the server in rust that seems to be mostly compatible. Both the official and the third party server are self-hostable. BitWarden runs their infrastructure on Azure, uses Azure managed databases and Azure managed backups. So I'm quite comfortable having my passwords there. The only feature I miss is that I'd like BitWarden to send me an email with all my passwords, encrypted so that I own a backup of my data too in case the worst happens.

toyg 5y ago
> TOTP integrated into the password manager Is this portable, like Authy does it? Last time I moved phone it was a real pain to move authenticators...
- lillecarl 5y ago
  Yes, you have the same TOTP keys in both your phone and browser ext
diarrhea 5y ago
> There's even a third party implementation of the server in rust that seems to be mostly compatible. Not just mostly. Vaultwarden also offers server-side features usually only found in paid Bitwarden plans.
gck1 5y ago
> I use my own domain and give each website their own e-mail address too I wish this was a supported feature on @gmail.com domain (not the +{string} thing). I like the idea, but keep thinking that I'll be uniquely identifiable on every database, since it's almost always going to be just 1 entry for the domain I own.
- npteljes 5y ago
  You could use your own domain, and Google's business offering maybe? I'm not sure if you could register a catch-all email then, but it would enable you to use custom domain, and Gmail's infrastructure and interface.
- lillecarl 5y ago
  A proprietary Fastmail feature generates anonymous @fastmail.com addresses for you, but I mostly use my own domain since I don't want to be locked in to one provider.
- dzmien 5y ago
  Gmail [0] ignores dots in your email handle and so you could use a different pattern of dots for each website you register at and record it in a spreadsheet or something. The first and last characters cannot be dots, and I do not think you can have two or more dots in a row, but there is no limit to how many "legal" dots you can use. Not as elegant, but definitely doable. [0] https://support.google.com/mail/answer/7436150?hl=en https://support.google.com/mail/answer/7436150?hl=en
COGlory 5y ago
Is exporting your passwords and encrypting the file not an option for you?
- lillecarl 5y ago
  Well yes and no, I'd like it to be automatic but I have an old archive around somewhere.
g19fanatic 5y ago
I use keepass with the app.keeweb.info frontend and a gdrive backend. keeweb.info has totp as well. Seems pretty straight forward and its free. Make the backend file accessible by link and forward a bit.ly to it and you can pull it down anywhere you have internet. Phone app works great too. Everything works offline too if gdrive isn't your thing Every computer I normally use will have a copy of the file in the case that I can't access my gdrive (which I don't see happening really).

toyg 5y ago

> TOTP integrated into the password manager Is this portable, like Authy does it? Last time I moved phone it was a real pain to move authenticators...

lillecarl 5y ago
Yes, you have the same TOTP keys in both your phone and browser ext

diarrhea 5y ago

> There's even a third party implementation of the server in rust that seems to be mostly compatible. Not just mostly. Vaultwarden also offers server-side features usually only found in paid Bitwarden plans.

gck1 5y ago

> I use my own domain and give each website their own e-mail address too I wish this was a supported feature on @gmail.com domain (not the +{string} thing). I like the idea, but keep thinking that I'll be uniquely identifiable on every database, since it's almost always going to be just 1 entry for the domain I own.

npteljes 5y ago
You could use your own domain, and Google's business offering maybe? I'm not sure if you could register a catch-all email then, but it would enable you to use custom domain, and Gmail's infrastructure and interface.
lillecarl 5y ago
A proprietary Fastmail feature generates anonymous @fastmail.com addresses for you, but I mostly use my own domain since I don't want to be locked in to one provider.
dzmien 5y ago
Gmail [0] ignores dots in your email handle and so you could use a different pattern of dots for each website you register at and record it in a spreadsheet or something. The first and last characters cannot be dots, and I do not think you can have two or more dots in a row, but there is no limit to how many "legal" dots you can use. Not as elegant, but definitely doable. [0] https://support.google.com/mail/answer/7436150?hl=en https://support.google.com/mail/answer/7436150?hl=en

COGlory 5y ago

Is exporting your passwords and encrypting the file not an option for you?

lillecarl 5y ago
Well yes and no, I'd like it to be automatic but I have an old archive around somewhere.

g19fanatic 5y ago

I use keepass with the app.keeweb.info frontend and a gdrive backend. keeweb.info has totp as well. Seems pretty straight forward and its free. Make the backend file accessible by link and forward a bit.ly to it and you can pull it down anywhere you have internet. Phone app works great too. Everything works offline too if gdrive isn't your thing Every computer I normally use will have a copy of the file in the case that I can't access my gdrive (which I don't see happening really).