In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
Additional Resources:
I used KeepassXC and Keepass2Android but the implementation seems a bit janky at times and the need to sync it manually or let it sync via a cloud is not all that comfortable.
I switched to Bitwarden about a month ago and consider it still as a test phase for now. I'm not that happy with just having my passwords lying around on a random cloud server.
You can always self host your bitwarden instance if you want.
For me, bitwarden is a good middle ground, it's super easy to setup, works super well on desktop and android, and it's still way better than using the same 8 character password everywhere. I think it's easier to recommend as a starter to anyone that's not using a password manager.
I've been using KeePass and KeePassdroid for at least 10 years now. "Sync" my dB through one drive, only because at one time we were allowed to use our personal one at work, but since they blocked personal folders in favor of corporate ones it is much less handy.
Self hosted vaultwarden for personal use and pass at work.
Selfhosting Vaultwarden (Bitwarden)
I used to use Dashlane but when I found out bitwarden was free I just started using that
Keepass and Strongbox.
I don’t like the honeypot that is anything too centralized, even if it is e2e encrypted. I’d be worried about exploits or compromised client payloads.
KeepassXC with syncthing
KeepassXC on desktop and Strongbox on mobile. Syncing works through any cloud provider of choice
Password managers are for suckas, I just use password123 for everything.
I just use hunter2 as my password literally everywhere. Otherwise it's easy to forget if you use more than one. I also use Bitwarden to manage all those passwords. It's really easy cuz you only need to type "hunter2" only once when you log in. After that you can just click it.
Dashlane here. I self host a lot and could definitely use Keypass or something locally, but the risk of losing all your passwords if I fuck something up was too great. I'll pay professionals.
I use 1password, I used KeePass for years but it didn't work will on Android so I moved on.
Also using 1Password, works great for what my family needs.
KeepassXC and Keepass2Android
Bitwarden all the way
1Password is a genuine life saver.
I used to use KeePass, but switched to https://www.passwordstore.org with a YubiKey after discovering how janky the KeePass 2FA system is designed a while back.
I rolled my own, actually. I don't store any passwords (even encrypted). Instead, I just append the site name to my base password (which is in my head), hash it, and base-52 it. (I also start each password with the same uppercase letter, lowercase letter, punctuation mark, just to ensure it gets past any bullshit filters)
I like that there's nothing that can be leaked (except what's in my head) and nothing to be lost and nothing to back up.
Can you please elaborate on each step. I'm not sure on the hash and base52 - do you use a program you're written to do that for you? A simple example would be fantastic.
That's ingenious.
Can you elaborate on a detail for me?
I understood everything up to "base-52 it."
I understand how converting base-10 to base-52 works, but that doesn't include alphabetical characters. What are you converting from? Are you numbering A=1, B=2, C=3...?
1Password. Wasn't thrilled with their move to electron, but it hasn't been as bad as I feared, and they've earned my trust at this point
Doesn't hurt that my work now uses it, so I get the family plan for free either
I’m entirely in the Apple ecosystem, so I use the built in Keychain, synced across devices through iCloud.
It would be Bitwarden otherwise.
Enpass, no puplic hosting. Clients in phone and PC. You can use your own services if you want to upload or keep it in a folder on the phone.
+1 1Password (coming from LastPass) this manager is really great. Good mobile, desktop and browser support.
My approach is a bit more complicated than of many commenters here: I use both Keepass and Bitwarden.
Bitawarden is for most of the passwords, and I use it to share some passwords with family.
Keepass is for the most sensitive stuff - online banking and emails. Also, I use it for non-web apps. Keepass DB is synced with Syncthing between desktop and mobile.
TOTP is handled by Aegis android app. I was thinking to move it to Keepass, but I really like interface of a dedicated app. And it's data automatically backed up to Nextcloud
For work I use 1Password, for at home I use Bitwarden.
Another vote for Bitwarden. Works on everything I use!
Another happy KeepassXC user here! Keepass2android on Android. I keep the passwords synced with nextcloud
KeePassXC and Keepass2Android auto-synced with my Nextcloud instance. Works great cross-platform for Linux/Windows/Android.
I know what you mean, trusting a SaaS provider with my master password list always felt like a bad plan.
I use OneNote, with a bunch of coded words that mean other things and mix and match those to make longer passwords that are all different. Because I'm too lazy for a real app, and this is secure enough and useful enough.
Bitwarden enjoyer here
Bitwarden here too
Bitwarden, easily. You can self host if you want to for added privacy. I don't, but the option is there.