what is the password manager of choice nowadays?

[dee@social.treehouse.systems]

what is the password manager of choice nowadays?

used to use LastPass, now on Bitwarden (who look like they're about to go full monetization), Dashlane are investigating something or other...

is 1 Password the only one left standing?

I'm on Android (GrapheneOS), Linux and Windows... so nothing super Apple specific please... but otherwise do recommend things.

[martenson@mastodon.world]

@dee for similar level of service it is just 1password left I am aware of

[olivvybee@beehive.city]

@dee time to self host vaultwarden

(only half joking)

[dee@social.treehouse.systems]

@olivvybee would love to, but the bitwarden pivot on pricing could easily extend to "clients only compatible with official server for security reasons", I am wary

[olivvybee@beehive.city]

@dee if they do, I'm sure someone would step in with a fork of the clients as well

[ainmosni@social.ainmosni.eu]

@dee @olivvybee I'm going to evaluate pass soon. Not sure if I can trust 1Password as they have similar risks as Bitwarden, and I'm sick of playing enshittification hot potato.

[xgebi@hachyderm.io]

@martenson @dee 1password does some icky sponsorships.

Technically I have access to proton's password manager but I don't want to keep all things centralised.

So it feels more like choose your poison situation

[kitten@social.elizabeth.cat]

@dee I self-host a "bitwarden-compatible" server with Vaultwarden for myself and my gfs. so, the only thing from them is the apps AFAIK

[dee@social.treehouse.systems]

@ainmosni @olivvybee yeah, I am starting to wonder when a group of queer folk are going to create an OSS thing and just kill this particular enshittification loop

[doppelgrau@anarres.family]

@dee I'm not unhappy with KeePassXC (https://keepassxc.org/) and Keepass2Android (https://f-droid.org/packages/com.android.keepass/) and the database synced with my nextcloud (but nearly any file sync tool will do).
Browser Plugins are available, even passkeys - not sure about the android clients since I have so far avoided using passkeys.

Not sure if the best, but so far works without noticing any real problems.

[ainmosni@social.ainmosni.eu]

@dee @olivvybee Hell, I'd be fine with it if some straight people were involved as well.

[pileczka_gaia@chaos.social]

@dee I'm very happy with KeePassXC (called KeePassDX on Android) https://keepassxc.org
It's foss, audited and if you want to completely offline

[dee@social.treehouse.systems]

@pileczka_gaia I have a strong feeling I'll be going this way.

I already have syncthing on everything handling the sharing of the file... so really it's just about trying out the apps and then migrating

[joknopp@chaos.social]

@doppelgrau @dee I can confirm this, works stable for years. I never really tried alternatives since then.

[paul@notnull.space]

@olivvybee @dee same here.

Hoping at some point somebody can develop a standalone client app/add on so we aren't at the mercy of bitwarden

[faith@chaosfem.tw]

@dee
Have used KeePass for years

[arcbac@mastodon.social]

@dee Keepass works on Linux, Windows and Android. It can even autofill in the browser

[ahhhhhhhhhhh@mastodon.social]

@doppelgrau @dee keepass with webdav for sync and you dont need any other password manager. I think it even does 2fa management but i feel keeping your TOTP on the same db defeats the purpose.

[serriadh@social.treehouse.systems]

@dee i use keepassxc on windows, linux and ios, and have done for about 15 years now with various file syncing services to share the database between devices.

The only thing it didn’t do is provide an easy way to manage shared access by multiple users, so we use bitwarden at work, but I think the keepassxc app is noticeably better than the bitwarden one, I feel.

[serriadh@social.treehouse.systems]

@dee i haven’t been able to get it to do fancy integrations like doing secret-service password database stuff under kde, but i do use it to hold some ssh keys and do ssh agent stuff which seems like a neat feature. The firefox plugin works fine, and annoys me less than the bitwarden one (probably because it is a bridge to the desktop app, rather than a standalone client).