80
PasswordManagement: which one of these options would you choose? (lemmy.wtf)
submitted 3 years ago by to c/selfhosted@lemmy.world
107 comments fedilink hide all child comments
 

Objective: Secure & private password management, prevent anyone from stealing your passwords.

Option 1: Store Keepass PW file in personal cloud service like OneDrive/GoogleDrive/etc , download file, use KeepassXC to Open

Option 2: Use ProtonPass or similar solution like Bitwarden

Option 3: Host a solution like Vaultwarden

Which would do you choose? Are there more options ? Assume strong masterpassword and strong technical skills

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 3 years ago (2 children)

Bitwarden for me. My password manager is not just for me, it's also a crucial component of my family life so if something happened to me I want my next of kin to be able to access it

For that it needs to be an easy to access solution.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (1 child)

    Same, I'm all for complicated things that only I know how to use but the keys to the kingdom shouldn't be one of those when there are laypeople relying on me.

    I still have to figure out how to let those people in when needed, I'm thinking writing the master password and the backup code on a paper that lives in a drawer, maybe in a "break in case of emergency" box, etc.

    Curious what's the best way to mitigate the wrong person getting that, but I think if you have to worry about someone breaking in your house who is also looking for that info, then you have a different threat profile to consider, and the above calculus doesn't apply.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 years ago

    Bitwarden offer the option to set up an emergency contact.

    You choose someone to be an emergency contact, it means that if they want they can request access to view your passwords.

    When they send a request you receive several emails to warn you and after X (you can choose the amount) days if you don't do anything they get access to your account.

  • permalink
  • fedilink
  • source
  • parent