this post was submitted on 27 Oct 2023
1300 points (98.0% liked)
Memes
45587 readers
2209 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If they change/rebrand the login he's screwed. Just use a password manager people.
I've been thinking of starting to use one more and more, is there any you would recommend? Are all the good ones a paid service? And my biggest concern is someone getting into the password manager itself, is that something that I should worry about?
I'll second the other comment suggesting KeePass, but the biggest issue I had with it was syncing the database across devices. Ultimately I stored it in OneDrive, but it occurred to me that at that point it wasn't much different to a cloud password manager, which I especially didn't trust.
I now self host a Vaultwarden instance from my Raspberry Pi, and that works perfectly for me, but it does require a bit of Linux experience and a spare device to run the server.
I'm using KeepassXC and sync with Syncthing (which is P2P), and I'm quite happy with it. Seems like you got your setup figured out, but this is a bit simpler for someone looking into password managers
KeepassXC also has a great browser integration c:
I don't trust a service for my passwords so I'd rather trust an open-source software.
Try KeePass, it runs both on a PC as well as a phone so just carry your encrypted passwords with you.
Edit: And passwords aren't enough, use multi-factor for services that offer it. Preferably via an app instead of SMS.
I like Bitwarden. It's open source. The Firefox plugin and Android app work great. Also free.
Bitwarden has been working well for me, and it’s open source and free to use. I started using it when it was clear that using LastPass was not a long term solution.
1Pass.
1Password is a solid service if you're OK with the proprietary aspect. I use it personally and we use it at work (I'm an infosec consultant)