259
Password managers are less secure than promised (ethz.ch)
submitted 6 months ago by to c/technology@lemmy.world
117 comments fedilink hide all child comments
 
  • Millions of people use password managers. They make accessing online services and bank accounts easy and simplify credit card payments.
  • Many providers promise absolute security – the data is said to be so encrypted that even the providers themselves cannot access it.
  • However, researchers from ETH Zurich have shown that it is possible for hackers to view and even change passwords.
you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 6 months ago (6 children)

I too recommend KeepassXC, works even on android with KeepassDX. I use syncthing to sync between devices (work, personal and android)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 1 point 6 months ago (3 children)

    I also use KeepassXC, and it's great. I'm interested in setting up Syncthing between my Android, Linux desktop, and NAS. Do you have any tips or articles/resources that you used to set it up?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 6 months ago (1 child)

    Hmm, I don't think I've optimized it either to be fair. I wanted to use my phone as a 'bridge in between' but that means it uses battery since it 'checks' whats online.

    In reality my phone is usually on demand and since I work from home, my work device is usually still turned on when I turn on my 'good computer' with fun projects.

    One thing that I find useful is the backup / version control settings, I've set it up that there is a version control if it overwrites things so that when conflicts happen (eg a sync didn't happen and I changed both keepass databases) I can quickly 'merge' them or sync them up manually.

    I've also heard that syncthing isn't available on android anymore but a fork (that is somewhat vetted, iirc) exist.

    If you can run applications on your NAS & connect to it from anywhere, it could be used as a type of 'master' server that keeps everything in sync that is always online.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 6 months ago

    Although syncthing is awesome, i use rclone to fetch the latest version of the password database. With syncthing, i would worry about collisions. Maybe would be better to sync it between two devices, Android and Linux.

  • permalink
  • fedilink
  • source
  • parent