3 ms·

I’ve strongly considered to migrate from Keepassxc to Bitwarden for making things simpler. At the moment, the way I use Keepass is: password + only storing the

I’ve strongly considered to migrate from Keepassxc to Bitwarden for making things simpler. At the moment, the way I use Keepass is: password + only storing the db on Google Drive + adding the key file to any device I want to access from (smartphone and laptop) via usb cable. This way I can keep the db up to date across devices while keeping it “safe” as the key file is not being shared across the network. So, as I said, I’ve considered Bitwarden for being open source and cheap and for simplicity but despite reading the implementation they do and knowing they have had successful audits the paranoid in my cannot stop thinking on the “what ifs”. I have all my life on Keepass: from access to the bank, to government taxes stuff, to the pi-hole web ui etc etc. I feel I have more control now with my clunky approach. If I migrate to a managed solution and for any reason my data gets compromised on their side I would be utterly fucked. Probably it’s just me being irrational.

walton_simons 5y ago
For what little it's worth from a random internet person, I agree with you 100%. I do it the same way as you, with the database stored on Dropbox, and an offline key file. I just can't make myself trust an online service for this stuff, as irrational as that may be. Even if KeePass turned out to have some expoloitable vulnerabilities, it's still running solely on my machine, and I don't allow it to connect to the internet at all. I suppose yes, if someone breaks into my computer I could be in trouble, but if they can do that, they can just steal my session cookies anyway, password manager or not.
fitblipper 5y ago
I use keepass. I've solved the cross device problem by using syncthing. It is amazingly convenient and hasn't given me any problems across 3 computers and 3 phones. The only thing is, if you sit with your pw db open for extended period of time, you may need to sync it from storage in order to pick up changes that a different device has made recently.

walton_simons 5y ago

For what little it's worth from a random internet person, I agree with you 100%. I do it the same way as you, with the database stored on Dropbox, and an offline key file. I just can't make myself trust an online service for this stuff, as irrational as that may be. Even if KeePass turned out to have some expoloitable vulnerabilities, it's still running solely on my machine, and I don't allow it to connect to the internet at all. I suppose yes, if someone breaks into my computer I could be in trouble, but if they can do that, they can just steal my session cookies anyway, password manager or not.

fitblipper 5y ago

I use keepass. I've solved the cross device problem by using syncthing. It is amazingly convenient and hasn't given me any problems across 3 computers and 3 phones. The only thing is, if you sit with your pw db open for extended period of time, you may need to sync it from storage in order to pick up changes that a different device has made recently.