I rely on Bitwarden (slooowly migrating from... a spreadsheet...) and am thinking of keeping a master backup to be SyncThing-synchronized across all my devices, but I'm not sure of how to secure the SyncThing-synchronized files' local access if any one of my Windows or Android units got stolen and somehow cracked into or something. I'm curious about how others handle theirs. Thanks in advance for sharing!

(page 2) 15 comments

sorted by: hot top controversial new old

[–] Frederic@beehaw.org 1 points 8 months ago

I'm using https://pwsafe.org/ in Linux, then https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe in android and this app to sync with google drive https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe.sync&hl=en_US

[–] ChallengeApathy@infosec.pub 1 points 8 months ago (1 children)

Proton Pass. If you're comfortable with cloud E2EE managers, it's far more worth it than Bitwarden, since you get unlimited email aliases. Better for privacy and even security. Plus, I trust Proton, they have a phenomenal track record in terms of security and encryption.

[–] Dymonika@beehaw.org 1 points 8 months ago (1 children)

they have a phenomenal track record in terms of security

I read that they have bowed to email subpoenas in the past.

[–] ChallengeApathy@infosec.pub 1 points 8 months ago

Every company would. They're not going to go out of business over one customer. What's important is that they weren't able to give any important information.

[–] CCRhode@lemmy.ml 0 points 8 months ago

I'm agnostic about password managers, and I'm agnostic about sync'ing password repositories between devices. I believe there would be grave risks of losing access to my own repositories by misplacing their pass-phrases or bungling other kinds of authentication. I try not to put anything on portable devices that is super confidential. On the other hand, I restrict physical access to my desktop computer. I back it up continually, power it from an uninterruptible power supply, and run only a handful of server-side processes there. ... so I feel safe ... sort of.

I suppose it may seem heretical to members of this community, but I put all my passwords in a plain-text *.csv file on my desktop machine that I maintain with my own python script.

[–] fafff@lemmy.ml -1 points 8 months ago (5 children)

passwords.txt on a full-disk encryption HDD.

load more comments (5 replies)

load more comments