Bitwarden

keepassxc

Vaultwarden - self hosted bitwarden server that any bitwarden clients can connect to.

Keepassxc/keepassdx, synced with syncthings/basicsync.

Using a headscale/tailscale setup so things stay synced even when i am not home.

Keepass2

pass: the standard unix password manager for tech-savvy people. It's dead simple: just a directory of GPG-encrypted files that you can sync across devices using git or other means. It has a CLI interface, an Android app, and a Firefox extension.

BitWarden and a self hosted VaultWarden

A few years ago I set up KeepassXC using Syncthing temporarily to sync the database across all my devices. I fully expected to have to move to Nextcloud for database file management.

The KeepassXC / Syncthing combination has worked so well that I have no reason to change it. The databases are seamlessly synced across all devices (including my phone) without requiring any attention from me. Database issues due to multiple device use are almost nonexistent.

One note: For me Syncthing works much better with multiple devices using a star topology. When I initially set up a mesh configuration I had regular file sync issues. With a star topology they are very rare.

1Password family account with spouse, kids, and my parents. Vault management, ease of sharing, and remote management for my parents is nice, along with multiplatform for everything important, and the price feels quite reasonable at $1/user/month. No major security incidents ever, and I was pleased by their core service design whitepaper that I read many years ago. But as they’ve become increasingly corporate over the past several years I’ve felt like they care less and less about individual users, and the CEO’s recent pledge to Omarchy really pissed me off. So it’s been a great service for me but I don’t recommend it for new users unless they like nazis. I pay for a year at a time so I haven’t scrambled to migrate my family to a new solution quickly, but it sounds like Vaultwarden is most likely the way to go next.

Seconding Bitwarden, have been with it since my previous one (Lastpass? I forget, it was red) moved most of the good functionality behind a paywall many years ago. 11/10 I usually pay for the subscription, I like their product and want them to have a little walkin' around money. But currently on the free tier which is perfectly fine (2 devices when I used pro for 3, but I hardly use my laptop.

Remember the password to my email. Create account on site. Log in and remain logged in. When eventually logged out click forgot password. Log into email and click reset link.

zx2c4 pass

Idk if this is the right choice but I write them down on a piece of paper and store that paper in my locked fireproof safe.

I'm an old man yelling at clouds but I don't trust any of the password storing technologies. I have a system of making/writing passwords and a save a short form of them on my pc. Without knowing a specific segment you'd never be able to guess what they were so the segment is the only thing I need to remember. Having to access accounts when not at home is a massive pain in the ass though lol

keepassxc

1Password

Firefox remembers my passwords. For other things, text documents stored in a Veracrypt container

1Password, but planning to move to VaultWarden.

Proton Pass for me since I use their VPN.

Vaultwarden for selfhosting.

Same one on every site. But don’t worry it’s 10 characters instead of 8. And I tossed a bang at the end to throw off attackers.

With gnupg, git, and a hardware security token. Also known as "pass".

Mostly i get by by not telling others how or where I keep my passwords

Self hosted vaultwarden

I moved away from Bitwarden because they removing values from their motto and some other shady stuff. I chose to go with AliasVault, it has a pretty nice alias email feature.

nice try hax0r

Piece of paper.

Nice try

Selfhosted Aliasvault

A bit of a tangent but these are the right people to ask... What do you think when a site or app says that your password is too long?

My dumbass reading through these comments: "keep ass... ehehehehe"

I have a notebook and an app called Password Generator from f-droid

I write down a password hint on a physical piece of paper.

Since the primary threat vector is remote access and not physical access, I'd argue that is fine.

Additionally the password hint has to pass through several thought chains in order to provide the actual password.

I do wish sites would up front tell you what the password requirements were when you logged in though.

KeePass database in cloud storage, synced to my phone.

I use KeePass database for all my passwords and other database for recovery passwords (like from 2FA codes etc). I have it synced in my Nextcloud and ProtonDrive (In case my Nextcloud would fuck up).