this post was submitted on 05 Jul 2023
1482 points (98.4% liked)

Android

28035 readers
127 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

[email protected]


founded 1 year ago
MODERATORS
 
(page 9) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 1 year ago

Currently a Bitwarden user at both home & at work. Picked up some Teams licenses for my department earlier this year - Password Managers are absolute essentials for next of kin & for successors at work.

[–] [email protected] 3 points 1 year ago

I think it's almost necessary. I only have to remember one password now. Bitwarden has apps/extensions on basically any device/browser I've used that integrate well with auto-fill. It was weird not being able to "know" my passwords originally, but it's great not ever having to remember which variant of a password I might have used. Plus, you can easily share some accounts with people easily and it's just seamless (a lot of IoT devices only work with a single account for example).

[–] [email protected] 3 points 1 year ago

Keypass is my ninja. I'm never not using a password manager.

[–] [email protected] 3 points 1 year ago

I’ve been using Bitwarden for years and also use the Apple password manager on my phone and iPad so I have a copy in case something happens.

I also keep some less sensitive work passwords on chrome because I don’t want to open Bitwarden at work.

[–] [email protected] 3 points 1 year ago (2 children)

I've used Keepass or Keepass XC for years. They are great!

[–] [email protected] 3 points 1 year ago

And, since KP is offline, you don't have the same security risks as the cloud hosted password managers. If you were really paranoid, you could put your KP database file on a USB so it's never online.

Plus, even if someone were to somehow acquire a current version of your database file, it's heavily encrypted. By the time they crack it you should've changed your passwords anyway.

load more comments (1 replies)
[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

KeePassDX with Synching to locally synchronize databases across devices.

[–] [email protected] 3 points 1 year ago

Yes, it saves on the odd site I use once a year and trying to have to remember that.

[–] [email protected] 3 points 1 year ago (2 children)

I would recommend one but I have always been wery about sending password data through the internet to be stored on some companies server. So I put in the effort to host my own Vaultwarden docker instance through TrueNas scale (True charts) on my home server and access it via a VPN tunnel (Wireguard). It's very complicated to setup compared to a web service but this way I own all of my password data locally. The android app (Bitwarden) works alright but sometimes it has trouble understanding what is a login screen and you have to force fill things. Vaultwarden as a docker instance works great. The only time this setup needs to be on VPN is to save a new password. Using existing passwords seem to be cached on my device.

load more comments (2 replies)
[–] [email protected] 3 points 1 year ago

Keeper is a fantastic zero knowledge password manager. Once I started using keeper, I never looked back.

[–] [email protected] 3 points 1 year ago

Self custody is something you need to keep in practice. I use keepassXC everywhere.

[–] [email protected] 3 points 1 year ago (1 children)

KeePassX(C?) both on Windows and Linux. I used the windows version KeePass2 but there was a recent security vulnerability in it so I switched to KeePassX. Maybe it's already patched... auto-type doesn't seem to work in KeePassX on Windows so I might switch back but it's not that critical.

load more comments (1 replies)
[–] [email protected] 3 points 1 year ago

Password Store + OpenKeychain with syncing using git (forgejo) works very well for me

[–] [email protected] 3 points 1 year ago

Since i started using KeypassX, My memory just got worse

[–] [email protected] 3 points 1 year ago

1Password all the way. Holds my passwords and all of my 2FA codes. I understand it’s a single point of failure but I’m comfortable with their architecture and I don’t feel like self hosting stuff.

[–] [email protected] 3 points 1 year ago

I've been using Safe In Cloud since 2012. I like it a lot.

[–] [email protected] 3 points 1 year ago

Absolutely worth it. It's the only way to actually adhere to password best practices.

[–] [email protected] 3 points 1 year ago

As the rest of this thread seems to be saying, yeah Bitwarden seems to be the way to go. I've been using it for years and it's way too convenient not to have (not to mention the security benefits).

[–] [email protected] 3 points 1 year ago (1 children)

Started with Bitwarden years ago, then I used 1password for a few months and now I'm using Keepassxc (Keepass2Android on my phone).

And I recommend everyone to use one. Not necessarily Keepass if they are not very tech savy (database synchronization can be a little bit tricky but not hard). Bitwarden was good too but Keepassxc supports adding ssh keys which is a big plus for me.

[–] [email protected] 3 points 1 year ago

Adding generic attachments to a KeePass vault has come in handy.

[–] [email protected] 3 points 1 year ago

I've had enough friends and family members lose access to critical accounts due to things like changing phone numbers, and relying on auto-signin until their cookies get cleared, that I've begun just recommending password managers to everyone.

But alas, most don't listen.

[–] [email protected] 3 points 1 year ago (1 children)

Got a lifetime key for Enpass something like a decade ago and it's been as good as I could ever need. I still rely heavily on autofill via Android & Firefox, but I treat Enpass as the backup to the backup, the one with every last password. I'm meticulous about updating it with every account, every updated password, etc. I also manage all of my wife's passwords as a separate vault.

load more comments (1 replies)
[–] [email protected] 3 points 1 year ago (1 children)

I've been using Microsoft authenticator for work, and since it was there I also started using it for my personal accounts and passwords as well. It works well enough, never had any issues.

load more comments (1 replies)
[–] [email protected] 3 points 1 year ago

They should be a hard requirement to anyone that wants to access the internet by now. Although the ones built-in to the operating system such as Gnome keyring, Kwallet, Windows Credential Manager and Apple Keychain are OK, the third party ones are 100% better.

Personally I use KeepassXC and just have it synced across different devices via Syncthing. While I also keep weekly backup copies (without the Key file) on Mega with it zipped and password protected.

[–] [email protected] 3 points 1 year ago

Bitwarden all day

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (9 children)

Went LastPass (avoid) -> 1Password -> Bitwarden. Pretty happy with BW, as it has reasonable integrations on Android. Prior to that, i was using a UNIX tool called "pass", which used GPG and allow some degree of organization. I still use it for some stuff.

load more comments (9 replies)
load more comments
view more: ‹ prev next ›