4 ms·
As far as I know, this will have to be a manual process of enumerating all your accounts, and changing the password for each one using their own reset password
by thomasdziedzic 4y ago
As far as I know, this will have to be a manual process of enumerating all your accounts, and changing the password for each one using their own reset password mechanism.
I did this when I first started using a password manager and the couple of hours that I put in years ago have paid off over and over again with peace of mind and better security practices.
- tamaharbor 4y agoDoes anyone have a recommendation for a good and secure and preferably free password manager?
- synotna 4y agobitwarden
- rapind 4y agoBitwarden
- eastbound 4y agoHow much is their bug bounty? It’s not written on this page: https://hackerone.com/bitwarden?type=team https://hackerone.com/bitwarden?type=team Besides, how much should the bug bounty of a password manager be?
- dhzhzjsbevs 4y agoI dunno, looks like they're active though unlike the competition.
- deleted 4y ago[deleted]
- mhb 4y agoKeePassXC
- mccorrinall 4y agoKeePass 2
- ______-_-______ 4y agoBitwarden if you want a cloud service KeePass or KeePassXC if you want to control your own data and use something like Syncthing to sync
- anthropodie 4y agoThere is vaultwarden which is self hosted version of bitwarden.
- precurse 4y agoYep! I run it myself and it works fantastic. And my contingency plan if I can no longer self host, is export from one of my devices and import into the cloud version of Bitwarden. I don't see myself needing to do that, but you never know.
- doubled112 4y agoI keep it simple too. Just keep the json export on an offline encrypted USB stick. If something happens I’ll use my eyeballs until I figure something else out.
- DeWilde 4y agoKeePassXC and combine it with cloud storage and you have a semi-self-hosted or host it on a storage attached to a network you can VPN in to and you have fully self-hosted password manager accessible from anywhere.
- KennyBlanken 4y agoKeepassXC + syncthing if you don't use iOS. Nextcloud works well if you do use iOS. No need for a VPN with either.
- torpid 4y agoThis - and combine it with key+paraphrase, keep the key local to your devices and your keepass file in the cloud. I've used this setup for years backed by a webdav share on multiple platforms. It's incredibly robust especially synchronizing changes
- fassssst 4y agoThe built in Mac/Safari one works great and works with Windows too via the iCloud app and browser extension.
- wonderbore 4y agoDepending on the ecosystem you live in, your browser’s or your OS’ password managers are the most straightforward to use. I switched to Safari on Mac because I was tired of subpar experience with all the password managers and now my phone is able to store and recall all of my passwords. Super simple to use.
- orangepurple 4y agoKeePassXC
- woleium 4y agofor a team who have shared password folders, I've not found a better solution than LastPass
- tfigment 4y agoPassword safe on windows and android. I like better than keepass. In theory you can transfer between them but i always lost datawhen doing that.
- rollcat 4y ago1password. Not free but absolutely worth the money.
- rglullis 4y agoYou have better alternatives: bitwarden for those looking for a cloud solution, keepassXC who prefer to keep the data under their own control. Plus, they are both free/libre.
- lnxg33k1 4y agoI always had issues with KeepassXC. mostly as a concept, I'm not sure if it made sense, but since we're talking about it, how do you cope with the concept that if you lose your phone with the database on it, an attacker can just keep a perpetual copy of your passwords free to brute force and do whatever they wanted? I can revoke access to things with cloud services or self-hosted services, but with all the database in the hand of an attacker he can try to break it indefinitely and undisturbed.. I think KeepassXC for this reason is the worst among cloud hosted and self-hosted solutions
- rglullis 4y agoAFAIK, the filesystem is encrypted on any modern device. An attacker would have to first break into the device and then break into the password database. And if they can break into the device it is game over already. Also, the attacker would have to be really motivated to brute force into it, and if it happened that my phone got stolen and I was worried about your scenario, I'd be just rotating all the high-value passwords I have, which is something that I think can be done quickly.
- rollcat 4y agoI've tried Bitwarden, pass, and KeepassXC in the past. 1password is by far the most polished. If you consider how big the problem space is (interoperating with every possible broken website out there), support for TouchID/Apple Watch unlock, etc I think I'll take it over having access to the source I will never read.
- butterlesstoast 4y ago1Pass is delightful to use. Although, a bit expensive.
- thomaszander 4y agoSurprised this one hasn't been pointed out yet; "Passman" which is part of nextcloud and has plugins for all major browsers. open source, encrypted-while-at-rest and a cloud service allowing you to use it from all your machines and even while traveling on public machines.
- anon_123g987 4y agoThe Wikipedia has this list of password managers with feature comparison: https://en.wikipedia.org/wiki/List_of_password_managers https://en.wikipedia.org/wiki/List_of_password_managers
- ohyoutravel 4y ago1pass is my choice because I pay for it. I also like KeePassXC, but the problem I have with the free things is there aren’t quite as many features and development can just stop at any time. KeePassXC for example got started because KeePass devs just abandoned the project effectively. By fewer features I mean like iOS and android apps (though I know KeePassXC has unofficial apps not managed by them). I just have used 1Pass for a while, maybe 5-6 years, it’s seamless with apps across everything and lots of support and because I pay for it I know there’s a business behind it which for me feels more stable with respect to longer term support.
- nick__m 4y agoI might be an heretic but I use the one from Microsoft! My password are available everywhere on Android via the Authenticator app and on any browser that have the Microsoft autofill extension on whatever OS I happen to be currently using. I have a 1Password account provided by my employer but I don't want to tie access to my password to my employment. Also I don't like that 1Passowrd required to enter a really long key to enroll a new device. And I figured that I might use the MS account I created for Windows 10 for something usefull. As far ass I know there are no equivalent way of using the Chrome password manager outside of Chrome and Android.
- guiambros 4y ago1Password for me. Not free, but worth every cent. Very robust, super polished interface, cloud sync, native client for all platforms (including Linux), robust for use across family members (and you can specify which vaults you want to share with whom), well integrated with iOS/Android.
- encryptluks2 4y agoPassword Store is pretty good.
- willis936 4y agoI did this last year. It wasn't so much "a couple hours" so much as it was "all free time for three months then dealing with the mental equivalent of getting off a treadmill after an hour". It's worth it, but it isn't for the faint of heart.
- deleted 4y ago[deleted]