this post was submitted on 11 Jul 2023
662 points (98.5% liked)
Asklemmy
43822 readers
893 users here now
A loosely moderated place to ask open-ended questions
Search asklemmy π
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- [email protected]: a community for finding communities
~Icon~ ~by~ ~@Double_[email protected]~
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
A good alternative to Bitwarden is KeePass/KeepassXC btw
A good alternative to keepass is a self hosted vaultwarden btw. (compiled from bitwardens opensource code iirc)
Vaultwarden is not compiled from Bitwarden's code, it's a separate project and codebase but designed to be compatible with Bitwarden's API.
Bitwarden is open source and you can self-host it but IIRC it's a bit more complex and resource-hungry than Vaultwarden.
They have totally different design goals which is why Bitwarden is more resource-hungry and more complex to deploy. Bitwarden can scale up to large use cases such as companies with hundreds of thousands of employees (it's what they run on the hosted version, after all), whereas Vaultwarden is designed to be small and light for home use cases where you almost always have <10 users total.
I agree. But I think is much easier for people to use KeePass compared to self hosting Vaultwarden
I agree, I do this and it works great.
Nothing can beat passwords written on paper though
Scissors can.
So I will write them on a rock, instead.
But paper beats rock
I was talking about digital espionage, assuming one is not stupid enough to record their offline passwords digitally
Physical access can. Indentations on the below page can. Fire and moisture can. Someone looking over your shoulder can.
I found keepassium for the work phone and I was in love that I could keep a separate db with my OTPs under a password and backed up.
Then I left that job and had to split my OTPs. Vanilla keepass for droid will gives me the OTP values for gitlab etc, so it's good there, but Vanilla keepassium for Android has no camera/QR->OTP input that I have yet, one that works like keepassium does and is all compatible down the line. I'd love to keep using it to maintain the existing separate keepass OTP db I have.
Do you (or anyone) know of a good combo for droid that gets
In one final package? Does XC do it in a way we think may be compatible?
Keepass2Android does all that on android. It natively supports Dropbox, google drive, one drive, nextcloud, pcloud, and mega, plus you can use WebDAV or sftp. When editing an entry, the totp setup has the ability to scan qr codes with the camera. Plus, the whole thing is free and open source.
They even have a package on F-Droid, though that build lacks the built-in support for cloud syncing (due to F-Droid restrictions prohibiting binaries, I think).
I've used this app for years on android, paired with various cloud sync options as providers change their restrictions and capabilities. On desktop, I use keepassxc.
Hm i switched from KeePass to Bitwarden because the latter lets me use my passwords on multiple devices and as a Firefox extension that enters my credentials at a shortcut.
Can you elaborate why you think KeePass is better?
I think itβs more flexible. Also, due to the databases just being normal files you can sync them with syncthing between your devices.
In my case I run a NAS at home on which theyβre stored so I donβt need to sync them. I just open them directly from the NAS.
I do all of that with Keepass, for what it's worth.