The current state of password managers:

cadusilva@bolha.one

@tommi I think they're using Claude because there's a warning saying that "a user you’ve blocked has previously contributed to this repository".

tommi@pan.rent

@cadusilva oh no

nonnom@organica.social · keepassxc.org/blog/2025-11-09-

@cadusilva is there any other option slightly "ok"?

cadusilva@bolha.one

@nonnom something shell-based, I guess? Not very user-friendly. So I guess we'll have to deal with it. I'll keep using Vaultwarden *sigh*

ramonfincken@mastodon.social · keepassxc.org/blog/2025-11-09-

@cadusilva any reference to why?

hbispo@organica.social · keepassxc.org/blog/2025-11-09-

@cadusilva I'm keeping an eye on https://codeberg.org/ChiPass/ChiPass and might switch to it

lnsartwrk@organica.social · keepassxc.org/blog/2025-11-09-

@cadusilva vamos ter que usar só a caderneta pra administrar senhas agora

paco@infosec.exchange · keepassxc.org/blog/2025-11-09-

@cadusilva Can you maybe reply to your own message with some receipts? I want to believe you, but I don’t want to believe so badly that I’m gonna embark on 5 research trips.

cadusilva@bolha.one

@paco done, edited the post with some references.

paco@infosec.exchange

@cadusilva Super! Thank you so much!

I’m running 2 of the 5 and my mom uses another. (93 year old mom using a password wallet at all is a major victory)

alienghic@timeloop.cafe

@tommi @cadusilva

On github if you block claude you'll get that warning "A user you've blocked has contributed to this repository"

amlor@fux.am · keepassxc.org/blog/2025-11-09-

@cadusilva I discovered AliasVault today, seems good so far

cadusilva@bolha.one

@amlor there's also ChiPass, a KeePassXC fork from the pre-slop code https://codeberg.org/ChiPass/ChiPass

navi@social.vlhl.dev · keepassxc.org/blog/2025-11-09-

@cadusilva using pass[1] just because they can't take gpg and git away (or i'd have way bigger problems)

1: https://www.passwordstore.org/

amlor@fux.am

@cadusilva yeah I check it out too, but it looks pretty raw for now

brettm@swarm.coiloptic.org · keepassxc.org/blog/2025-11-09-

@cadusilva@bolha.one moral of the story is never use a password manager imo

mccovican@infosec.exchange · keepassxc.org/blog/2025-11-09-

@cadusilva Given that NordPass seem to have just deep-sixed all their public GitHub repos (aside from the autofill scripts), I'd say that's probably not a good sign for them either.

darkpixel@infosec.exchange · keepassxc.org/blog/2025-11-09-

@cadusilva Aw shit, here we go again. Time to look for vaultwarden alternative.

cadusilva@bolha.one

@darkpixel there are some alternatives somewhere in the thread like Atlas and ChiPass

jwz@mastodon.social · keepassxc.org/blog/2025-11-09-

@cadusilva Post-It Notes surging from behind.

CIRCLE WITH A DOT

The current state of password managers: