111 points

I second the recommendation for Bitwarden.

I switched over from Dashlane and never looked back. They even have a browser extension for mobile Firefox (the browser you should be using anyways) so it’s easy and convenient on all my devices.

permalink
report
reply
41 points

+1 for Bitwarden. There were growing pains at the start to move off of iCloud Keychain. Once done and being more proactive with managing passwords it’s so good and trustworthy

permalink
report
parent
reply
14 points

Agreed. Bitwarden has been fantastic. I just wish it was easier to swap between accounts on the browser extension. You can do it on desktop and mobile pretty easily.

permalink
report
parent
reply
3 points

Is there another way than just going back and forth and manually putting them in?

permalink
report
parent
reply
3 points

Manually putting what in?

You can import from another service if that’s what you mean

permalink
report
parent
reply
2 points

First time using it you export your password data and move it into BW. Then browser extension can help auto fill and detect new ones. It also has a password generator built in so that’s handy

Phone app can integrate and auto fill. On iPhone I’m not sure it if can detect and save. But the few times I’ve needed to sign up on phone I manually input.

I still use Firefox password and iCloud saves when prompted. Doesn’t hurt to have a backup I suppose.

permalink
report
parent
reply
1 point

I spent some time when I migrated from just storing my passwords in Chrome. I went through and made sure all of them were strong, unique passwords. I set up categories for all of them. I set it up so I could share the right ones with the family and whatnot.

Doing the raw import is easy, but it was a good time to make sure everything was in order.

permalink
report
parent
reply
14 points

Is there a reason to use the mobile extension over the app itself? The app can input into other apps as well

permalink
report
parent
reply
1 point

I have never even got the mobile extension to work. When I set it up and enter in my email and master password, the Captcha that is supposed go show up is missing entirely. There is just a blank space under the password field where the Captcha is supposed to have appeared.

permalink
report
parent
reply
1 point

If you have a custom DNS or VPN, that might be blocking the CAPTCHA.

permalink
report
parent
reply
1 point

Don’t know honestly - I’ve never tried the app so I don’t have a comparison. Didn’t even know they had one.

permalink
report
parent
reply
3 points
*

Ah nice :)

I find it a lot better, worth a try if you can get it

https://play.google.com/store/apps/details?id=com.x8bit.bitwarden

Part of why I picked Bitwarden over keepass was that it had nice apps/extensions for all my devices, like you said. I didn’t miss any features when I switched, and instead gained a few cool ones.

permalink
report
parent
reply
2 points

The app is nice if you want to use bitwarden to login to other appa. You can allow it permission to run alongside other apps that can fill in login forms.

permalink
report
parent
reply
1 point

The desktop application runs on Chromium, so that’s something to consider.

permalink
report
parent
reply
56 points

Been using KeePassXC (and before that, KeePassX) since I abandoned LastPass about a decade ago. The apps integrate with Nextcloud perfectly and at least for me, it’s a breeze. I use it for TOTP too, and I second the recommendation of a hardware token for an additional layer of security. There are some USBc options that work on phones (I’m using a pixel 7 pro).

permalink
report
reply
16 points

yup, no need to pay for a password manager. and far more secure.

permalink
report
parent
reply
5 points

I never got YubiKey to work on desktop with it. Key files seem to work good enough and easy to manage.

permalink
report
parent
reply
6 points
*

YubiKey works for me, both on desktop with KeePassXC and on Android with KeePassDX to the same DB

permalink
report
parent
reply
3 points

I like the look of KeePassDX but I was bothered by the fact that I have to use the yubikey every single time to unlock the database, unlike keepass2android which allows me to store the yubikey credential with biometric lock until the phone restarts. Keepass2android is not as nice of an app but that feature was really required for me.

permalink
report
parent
reply
4 points

It does require some configuration within yubikey manager. I did not find it straightforward but once set up its really reliable.

permalink
report
parent
reply
3 points

While we’re on the topic of open source products, may I suggest the SoloKey:

https://solokeys.com

permalink
report
parent
reply
1 point

So it’s like a YubiKey?

permalink
report
parent
reply
2 points

I’m curious about using the same store for passwords and TOTP. Technically if someone gets screwed to your database, they have both your factors, yes? But I guess it does thwart someone trying to brute force your password.

permalink
report
parent
reply
3 points
*

Adding a hardware key, like Nitrokey, would be an additional level of safety there. I would not use the database without some kind of additional key (something you know and something you physically have).

If there’s something nefarious that has user access, you’ve already lost in that regard.

permalink
report
parent
reply
3 points

Just to add, you can also use multiple databases to help maintain separation

permalink
report
parent
reply
1 point

Technically you do lose the second factor, but nowadays 2FA is often mandatory or they force some crap like SMS/email verification onto you. If you are aware of the risk then it isn’t a huge deal.

Though you might want to consider not using it at least for the most important stuff like banking (here you don’t even have an option; banks have their own 2FA apps that you have to use) and primary/recovery email.

permalink
report
parent
reply
54 points

when lastpass screwed around with it’s free tier offering, i switched to bitwarden and haven’t felt any reason to use or even try anything else, it’s rock solid

permalink
report
reply
6 points

Same. Been very happy. Great iOS integration.

permalink
report
parent
reply
3 points

Exact same boat. It was so easy to migrate from lastpass, I didn’t even feel any friction.

permalink
report
parent
reply
2 points
Deleted by creator
permalink
report
parent
reply
45 points

+1 for BitWarden.

Plus, it’s ridiculously easy to self-host with VaultWarden.

permalink
report
reply
43 points

Bitwarden gang

permalink
report
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 4.3K

    Monthly active users

  • 2.9K

    Posts

  • 78K

    Comments