Mastodawn

Did some reading about #WebAuthn / #Passkey.

The specs and promotional materials make much ado of hardware tokens, TPMs, and smartphones, but completely fail to mention how this might be used with software password managers like #KeePass / #KeePassXC.

Hardware tokens are great in corporate environments but horrible otherwise because you can't back them up.

TPMs and smartphones are notoriously insecure. Storing secrets on them is laughable.

#security #cybersecurity #infosec

Show thread

Jeff 7h ago

@Theeo123

Glad I've started familiarizing myself and getting comfortable with #KeePass.

Tien 1d ago

Doch die richtige Entscheidung gewesen, zu #keepass zu wechseln.

"Kurz nach der Preisänderung wurden auch die Unternehmenswerte Inklusion und Transparenz von der Seite gestrichen."

#bitwarden #password #passwordmanager

https://www.golem.de/news/passwortmanager-bitwarden-wechselt-fuehrungskraefte-und-passt-preise-an-2605-208780.html

Passwortmanager: Bitwarden wechselt Führungskräfte und passt Preise an - Golem.de

Neben unangekündigten Personalwechseln und Preiserhöhungen streicht Bitwarden die Unternehmenswerte Transparenz und Inklusion.

Golem.de

Show thread

Zevsu 3d ago

@john
You're correct, a password manager that's fully local and managed by you is the best option (if we're talking about KeePassXC/DX).

I recommended #ProtonPass because it's the other most trusted and competitive "cloud/online password manager" option for the average user (afaik), and I'd hesitate to recommend any other potentially "less-established" companies for holding your passwords (but #KeePass does remain the supreme option imo if you can manage it).

https://essentials.techlore.tech/#password-managers

SPA Essentials

Your non-negotiable toolkit for security, privacy, and anonymity — every recommendation vetted and trusted by Techlore.

Techlore

Thor A. Hopland 3d ago

Omfg, if I have to change my #PasswordManager again - like with #LastPass - then I'm going straight back to #KeePass.

I know there are open source servers for the BitWarden client, but that's just another goalpost to move.

Bitwarden scrubs 'Always free' and 'Inclusion' values from its website as longtime execs step down - Fast Company
https://www.fastcompany.com/91542655/bitwarden-scrubs-always-free-and-inclusion-values-from-its-website-as-longtime-execs-step-down

Bitwarden scrubs 'Always free' and 'Inclusion' values from its website as longtime execs step down

What is going on with the beloved open-source password manager?

Fast Company

Show thread

LumiWorx - Just Vote Dammit!4d ago

@masek

It seems the SQLlite version I found available is being deprecated, so that leaves 2 of the 3.

And, @AHollowedHunter - if you already have a NAS box, it might be worth checking if it has an existing app for vaultwarden or maybe even #keePass or something similar.

Karl Ostendorf 5d ago

My biggest issue with 1password is that all of my passwords were cloud-based. Network failures, identity problems, or executive directives were all factors that could lock me out of all my accounts. Switched to one of the many #keepass-compatible solutions a few months ago and never looked back. #sovereignty

pikzim May 12

Anyone got a working solution for passkeys? I have my keepass db on nextcloud and sync to desktop and phone (grapheneOs). It's very per-device.

#passkey #keepass #NextCloud #grapheneos

Seymour May 10

Was genau ist ein Passkey?

Ein Passkey ist eine moderne und deutlich sicherere Alternative zum klassischen Passwort.

Anstatt sich komplizierte Passwörter merken zu müssen, meldet man sich einfach mit dem eigenen Gerät an – zum Beispiel per Fingerabdruck, Gesichtserkennung oder Geräte-PIN.

Der Passkey wird dabei sicher auf Ihrem Smartphone, Passwort-Manager oder Computer gespeichert.

Wie funktioniert das?

Vereinfacht gesagt bekommt jede Website zwei digitale Schlüssel:

Einen öffentlichen Schlüssel, den die Website speichert

Einen privaten Schlüssel, der nur auf Ihrem Gerät bleibt

Der private Schlüssel verlässt Ihr Gerät niemals.

[…]

#1password #ActivityPubPlugin #authentifizierung #bitwarden #blog #datenschutz #FediBlog #keepass #keepassdx #keepassxc #login #passkey #passkeys #passwort #passwörter #phishingschutz #sicherheit #wordpressBlog #WordPressFederation