The Best Password Managers in 2024

https://lemmy.zip/post/10876510

The Best Password Managers in 2024 - Lemmy.zip

> 2023 was a record-breaking year for cybersecurity in a bad way. Ransomware payments hit a record high of $1.1 billion, which is likely to…

Is Keepass there? Good. Upvote.
Prefer KeepassXC but let’s be honest, the best password manager is the only you actually use and keep using.
And that doesn’t get hacked!
Everything gets hacked given enough time. Just not everyone says they were hacked or realised they were.

Prefer KeepassXC

Why? Keepass has lots of plugins and XC doesn’t, right?

KeepassXC looks better IMO. Also I like that hardware keys work without plugins. Personally I still use KeePass for one feature that XC doesn’t offer.

I like KeePassXC because it’s written in C and is thus cross platform, while KeePass is written in C# and relies on Windows UI libraries. You can run KeePass on Linux (and I did without usability issue for years) but it will look god awful.

I won’t knock plugins, everyone has weird use cases, but I don’t know what people need KeePass to do that it doesn’t already do out of the box. I’ve certainly never felt the need for any.

I would only use KeepassXC
BitWarden
and/or Vaultwarden as a selfhosted alternative.

Vaultwarden is a great piece of self hosted server software, which meshes with Bitwarden software perfectly. And for people who can’t self host, IMO Bitwarden gives you more than enough bang for your buck with their own hosting plans.

It’s one of the few examples of software being open source and ethically making money regardless. (For comparison, Standard Notes has tried pretty hard to make sure non-paying users have an inferior experience even if they self-host literally everything.)

<$1/mo for bitwarden hosted premium is a no brainer for me
I’m excited that the bitwarden phone apps are getting a brand new native version for ios and Android soon.
the current version is not native?
No, its built on a Microsoft framework, that MS has decided to change recently. That’s why its sluggish and they can’t add features like passkeys to the current client apps.
I was really disappointed about standard notes’ plans. Took me forever to get everything set up to self host, only to find I couldn’t even use markdown unless I bought a license? Silly.

Yeah, the value of buying a hosted service should be the fact you don’t have to worry about hosting it yourself. Not a tiny piece of Javascript that was grabbed from a third party developer anyway.

I can see what they’re trying to do, but the experience leaves a really bad taste in my mouth.

Standard notes is very unethical. They want you to pay for open source software even if you self host. Very scummy.
Tried, and not a fan off. The organizing features are kind of not what I expected. Sticking to KeepassXC for now.
I’m curious, what features is it lacking that you want to see?

First is the organizing feature. It doesn’t let me to have sub folders which I need to categorize items.

Second is the TAN management to store my MFA backup codes from the original Keepass which KeepassXC haven’t have either. You can use notes to mimic but it doesn’t auto expire after use, i.e. more manual work.

I actually thought the organization stuff is pretty good, coming from keepassxc myself. The way we have it set up is that each of the members of our family all have VW accounts, and we have a common organization shared among us for stuff we all use (e.g. home devices). It’s all in one installation, so it’s pretty convenient. I don’t think I can do the same as easily with keepass.

That being said, keepass is a really solid piece of software. I’d recommend it myself.

Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

Corporate Headquarters

Bitwarden, Inc. 1 North Calle Cesar Chavez Santa Barbara, CA 93103 Bitwarden, Inc. is the parent company of 8bit Solutions LLC

Something tells me they’ll enshitiffy too. It would make me uneasy storing all my passwords with a for profit corp, on their servers.

They’ve already open-sourced all the best parts, and there are independent OSS projects based on that. If BE fucks with their user base, they’d be messing with their livelihood.

Bitwarden + aegis for everything possible.

Authelia or authentik for self hosted stuff.

I like ProtonPass. It’s nice.
And they are really moving quickly with development. I feel like we’re getting new features monthly
Same. The UI is pretty good and modern, they support TOPT and cards as well and the development is being done at a good pace.
My only complaint is the lack of passkey support. I just want to store my password and passkeys in one place.
KeepassXC, Passbolt
+1 For KeepassXC, I use it in combination with syncthing to have my passwords available on all devices.
Been using that same setup and very happy with it.
Nextcloud syncs my KeepassXC safe.
Syncthing for me, but Nextcloud has its advantages too.
Any options on StrongBox? It seems like a good option but they don’t quite have the reputation that others have, despite being around since 2017.
StrongBox is just a client that uses keepass databases. I think it integrates well when using Apple devices and you can still use your databases on other platforms.
Ah thanks. Ya it’s Apple only but I like how it doesn’t sync to a central server but will still sync between your devices across your local network. Seems to minimize a lot of attack surface.
Strongbox is great, but expensive.
It’s only $20 a year or $80 for life. I feel like that’s a fair price to support the developers.

It’s not unfair, but for my use case there are cheaper or free alternatives that work really well.

And I’m Canadian so it’s a bit more than that dollar wise.

That’s a fair point.
Keepass + Syncthing is a great combination.
And with Syncthing’s Untrusted Device Encryption feature I can use my VPS as an extra node for synchronization without worrying touch if it becomes compromised without me knowing.
Untrusted Device Encryption — Syncthing documentation

the file is already encrypted so you aren’t getting much more security
I also sync other stuff, so it’s useful for other stuff too.
And it hides file names and sizes by splitting things up, which puts one extra layer of difficulty for someone trying to find my passwords file to target. I have a much stronger password on the syncthing directory than my normal type-each-time password to open keepassxc.
Indeed I have 1Password (was the best proprietary) and I’m switching to Proton Pass. This year they lacked feature but the integration with their Simple login email aliases is game changer
Microsoft Excel file
Post-it notes on the monitor.
Under the keyboard for added security.
That’s terrible practice
But during game time, best possible choice.
No, I’m pretty sure it is very much not
Yeah they should be using Office 365 or Google drive.
How about a password manager
Technically Excel and 365 and Google sheets can be a password manager.
My point is shouldn’t be used as a password manager