Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I am using KeepassXC and keeping the encrypted password file in a Google Drive, shared across my devices. That would likely cover most of your use cases too (the file is locally cached so even if there is no network connection I am not screwed).

For cases where you really can't use an offline password manager (e.g. because you are using some sort of gadget that doesn't allow you to connect to Google Drive or whatever), sync the relevant (not all!) passwords using your browser account.

Why is the above better than your 1password, LastPass or something else? Well, I don't need to take the company at their word that they are properly encrypting the file and properly protecting it - I know it is because it has been encrypted locally by Keepass (easy to check, the source code is all available too).

Google only ever gets to see a binary encrypted blob. And if I need to move to another service (e.g. I have been using Dropbox before), I simply move the file, that's all. No mess, no fuss. My data (especially passwords!) aren't held hostage anywhere.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: