80
PasswordManagement: which one of these options would you choose? (lemmy.wtf)
submitted 3 years ago by to c/selfhosted@lemmy.world
107 comments fedilink hide all child comments
 

Objective: Secure & private password management, prevent anyone from stealing your passwords.

Option 1: Store Keepass PW file in personal cloud service like OneDrive/GoogleDrive/etc , download file, use KeepassXC to Open

Option 2: Use ProtonPass or similar solution like Bitwarden

Option 3: Host a solution like Vaultwarden

Which would do you choose? Are there more options ? Assume strong masterpassword and strong technical skills

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 3 years ago (5 children)

Option 4: levy existing tools such as gpg and git using something like pass. That way, you are keeping things simple but it requires more technical knowledge. Depending on your threat model, you may want to invest in a hardware security key such as a yubikey which works well with both gpg and ssh.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 4 points 3 years ago (4 children)

    Why use tools not meant for password management, when alternative tools explicitly meant for password management, which have similar levels of security, work just fine?

    You’re essentially saying “instead of driving down the road, I like to ride my bike with rollerblades.”

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 3 years ago (2 children)

    I have a set up like this (age, passage, & git). Bitwarden's browser integration works just fine, for the most part. The thing is, some of my passwords are not browser-based, and I spend large amounts of time in the terminal. Using a CLI-tool in this case lets me save a bit of time

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago

    It is just how I prefer to do my computing. I tend to live on the command line and pipe programs together to get complex behavior. If you don't like that, then my approach is not for you and that's fine. As for your analogy, I see it more as "instead of driving down the road in a car, I like to put my own car together using prefabs".

  • permalink
  • fedilink
  • source
  • parent