7 ms·

I've heard this one recommended over and over again. Are there any "I wish I knew this beforehand" type of tips? Also, how would people compare this to somethi

I've heard this one recommended over and over again. Are there any "I wish I knew this beforehand" type of tips? Also, how would people compare this to something such as 1Password?

mixedCase 5y ago
Multiple devices is a slight pain, you have to keep everything synchronized yourself, and conflicts mean you can lose passwords in your sync service debris (if you even have that feature). I switched to Bitwarden in order to deal with this.
- Narigo 5y ago
  Did you try diffing the conflicting databases through a tool like keepass-diff before switching? I'm the author of keepass-diff and built it for my own needs. Looking through the comments here about why people switched from Keepass to Bitwarden, it feels like the compare feature is something that should be integrated to UI clients as many people seem to face this problem. I always assumed it was more because of permissions and better ability to work with it as a team...
  - mixedCase 5y ago
    I did not, I wasn't aware of keepass-diff and certainly it would've been able to solve the problem. But to tell you the truth I don't think I would use it. This is something that I really don't want to have to worry about regardless of what device I'm using.
    - Narigo 5y ago
      Thanks for the insight! I guess it's a hard problem to solve with these conflicts. I'm wondering how it could be automatically resolved if a user has the same thing open multiple times with changes to the same password...
dano 5y ago
I used KeePassXC for many years. As the number of devices on which I need my password manager proliferated I've moved to BitWarden primarily for the built-in database replication. One can certainly replicate KeePassXC db's using any variety of methods, but it becomes a liability on my time to ensure that it is operating properly. KeePassXC is quite a fine and useful bit of software. The lack of built-in replication is considered by many (me included) as more secure as the db is only on a single system and never in the cloud or on the wire.
diego_moita 5y ago
> Are there any "I wish I knew this beforehand" type of tips? Read my comment on the top of the comments. The top features are browser integration, auto-type and integration with Touch ID/fingerprint reader. > how would people compare this to something such as 1Password? KeePassXC auto-type is a lot more powerful. It can be configured in several ways and works with a lot more windows: SSH sessions in terminals, os windows in programs, etc. OTOH, 1Password is automatically "clouded". With KeePassXC you need to place the encrypted database in a cloud (OneDrive, Google Drive, Apple Drive).
- joshuajill 5y ago
  I sync the (strongly) encrypted database throughout my devices with Syncthing and it works flawlessly. I have an old laptop with syncthing running always on to avoid sync conflicts.
  - diego_moita 5y ago
    Interesting, thank you. Syncthing looks a lot like a "make your own cloud" solution. I use OwnCloud in a RaspberryPi, instead. But as Moxie Marlinspike famously said: "People don’t want to run their own servers, and never will". (https://moxie.org/2022/01/07/web3-first-impressions.html https://moxie.org/2022/01/07/web3-first-impressions.html)
    - Majestic121 5y ago
      You don't have to "make your own cloud" to use Syncthing : you can just set your phone and your laptop as sharing, and never have to handle a server at any time. Of course it's not magical : for them to be in sync, you'll then have to have both turned on with Syncthing running at the same time. But if you have something lying around, like an old laptop, it's trivial to have it running, and maintenance is super low, just keep update it from time to time : I have Syncthing running on a low cost server for multiple years, syncing pictures + documents, and the only issue I ever had was disk space running out once.
- antiframe 5y ago

I've heard this one recommended over and over again. Are there any "I wish I knew this beforehand" type of tips? Also, how would people compare this to something such as 1Password?

mixedCase 5y ago

Multiple devices is a slight pain, you have to keep everything synchronized yourself, and conflicts mean you can lose passwords in your sync service debris (if you even have that feature). I switched to Bitwarden in order to deal with this.

Narigo 5y ago
Did you try diffing the conflicting databases through a tool like keepass-diff before switching? I'm the author of keepass-diff and built it for my own needs. Looking through the comments here about why people switched from Keepass to Bitwarden, it feels like the compare feature is something that should be integrated to UI clients as many people seem to face this problem. I always assumed it was more because of permissions and better ability to work with it as a team...
- mixedCase 5y ago
  I did not, I wasn't aware of keepass-diff and certainly it would've been able to solve the problem. But to tell you the truth I don't think I would use it. This is something that I really don't want to have to worry about regardless of what device I'm using.
  - Narigo 5y ago
    Thanks for the insight! I guess it's a hard problem to solve with these conflicts. I'm wondering how it could be automatically resolved if a user has the same thing open multiple times with changes to the same password...

dano 5y ago

I used KeePassXC for many years. As the number of devices on which I need my password manager proliferated I've moved to BitWarden primarily for the built-in database replication. One can certainly replicate KeePassXC db's using any variety of methods, but it becomes a liability on my time to ensure that it is operating properly. KeePassXC is quite a fine and useful bit of software. The lack of built-in replication is considered by many (me included) as more secure as the db is only on a single system and never in the cloud or on the wire.

diego_moita 5y ago

> Are there any "I wish I knew this beforehand" type of tips? Read my comment on the top of the comments. The top features are browser integration, auto-type and integration with Touch ID/fingerprint reader. > how would people compare this to something such as 1Password? KeePassXC auto-type is a lot more powerful. It can be configured in several ways and works with a lot more windows: SSH sessions in terminals, os windows in programs, etc. OTOH, 1Password is automatically "clouded". With KeePassXC you need to place the encrypted database in a cloud (OneDrive, Google Drive, Apple Drive).

joshuajill 5y ago
I sync the (strongly) encrypted database throughout my devices with Syncthing and it works flawlessly. I have an old laptop with syncthing running always on to avoid sync conflicts.
- diego_moita 5y ago
  Interesting, thank you. Syncthing looks a lot like a "make your own cloud" solution. I use OwnCloud in a RaspberryPi, instead. But as Moxie Marlinspike famously said: "People don’t want to run their own servers, and never will". (https://moxie.org/2022/01/07/web3-first-impressions.html https://moxie.org/2022/01/07/web3-first-impressions.html)
  - Majestic121 5y ago
    You don't have to "make your own cloud" to use Syncthing : you can just set your phone and your laptop as sharing, and never have to handle a server at any time. Of course it's not magical : for them to be in sync, you'll then have to have both turned on with Syncthing running at the same time. But if you have something lying around, like an old laptop, it's trivial to have it running, and maintenance is super low, just keep update it from time to time : I have Syncthing running on a low cost server for multiple years, syncing pictures + documents, and the only issue I ever had was disk space running out once.
antiframe 5y ago