4 ms·

Makes me pleased to be a loyal Zetetic Codebook[1] (née STRIP) customer. The thought of storing my passwords on a web/cloud-based service always struck me as t

Makes me pleased to be a loyal Zetetic Codebook[1] (née STRIP) customer. The thought of storing my passwords on a web/cloud-based service always struck me as the dumbest thing anyone could do as it would be only a matter of time until such a service was hacked. I started using Zetetic after learning about them via a 2012 Black Hat conference presentation[2] where they took a bunch of password managers and STRIP came out on top. I figured if it was good enough for them, it was good enough for me. The product has only got better and better since 2012 (note that the presentation PDF is out of date in terms of security, they have of course changed hash and substantially increased rounds ! see their website for detail). Their support is first-class too. [1] https://www.zetetic.net/codebook/ https://www.zetetic.net/codebook/ [2] https://media.blackhat.com/bh-eu-12/Belenko/bh-eu-12-Belenko-Password_Encryption-Slides.pdf https://media.blackhat.com/bh-eu-12/Belenko/bh-eu-12-Belenko...

avhception 4y ago
No Linux support =/
neandrake 4y ago
+1 for Codebook. I’ve been using it for ~5 years and haven’t had an issue, I feel secure in managing where my vault is stored and haven’t had issues with syncing. It’s a one-time fee per device type - I paid for iOS, macOS, and Windows without any hesitation. Additionally their support is really good. They added a feature on iOS version (and Android I assume) which copies the TOTP when you use codebook to auto fill a login. However it cleared the clipboard when the TOTP code expired which was sometimes too soon - I suggested they add a buffer of ~15-30 sec which most TOTP validators allow, giving the user a bit more leeway in pasting it. They added it in the next version. Some cons though: They do lack Linux support. Syncing is manual (I think they mentioned the next big update will make it more automatic), and there aren’t any family/team sharing capabilities. For these reasons I would really only recommend it for tech-savvy individual use. I’ve recommended it to a few colleagues and they have had great experiences and continue to use it for several years now.
- traceroute66 4y ago
  > They do lack Linux support That is true although I understand this is simply down to lack of user demand for it[1]. There appears to be an UNOFFICIAL Linux tool called Read-Codebook[2] though... [1]https://discuss.zetetic.net/t/codebook-for-linux/1063/26 https://discuss.zetetic.net/t/codebook-for-linux/1063/26 [2]https://github.com/teracow/read-codebook https://github.com/teracow/read-codebook

avhception 4y ago

No Linux support =/

neandrake 4y ago

+1 for Codebook. I’ve been using it for ~5 years and haven’t had an issue, I feel secure in managing where my vault is stored and haven’t had issues with syncing. It’s a one-time fee per device type - I paid for iOS, macOS, and Windows without any hesitation. Additionally their support is really good. They added a feature on iOS version (and Android I assume) which copies the TOTP when you use codebook to auto fill a login. However it cleared the clipboard when the TOTP code expired which was sometimes too soon - I suggested they add a buffer of ~15-30 sec which most TOTP validators allow, giving the user a bit more leeway in pasting it. They added it in the next version. Some cons though: They do lack Linux support. Syncing is manual (I think they mentioned the next big update will make it more automatic), and there aren’t any family/team sharing capabilities. For these reasons I would really only recommend it for tech-savvy individual use. I’ve recommended it to a few colleagues and they have had great experiences and continue to use it for several years now.

traceroute66 4y ago
> They do lack Linux support That is true although I understand this is simply down to lack of user demand for it[1]. There appears to be an UNOFFICIAL Linux tool called Read-Codebook[2] though... [1]https://discuss.zetetic.net/t/codebook-for-linux/1063/26 https://discuss.zetetic.net/t/codebook-for-linux/1063/26 [2]https://github.com/teracow/read-codebook https://github.com/teracow/read-codebook