I realize those of us working in tech have our own tastes or specialized tools for password managers. But what do you recommend for friends and family to use?
For most users in the Apple ecosystem, iCloud keychain is an excellent, extremely well-integrated solution. I recommend it to all of my friends and family.
Personally, I use KeePass with Syncthing but pay for a Bitwarden Family account for my spouse and family members.
I migrated from LastPass, to Enpass, and finally to KeePass. Bitwarden basically checks all the boxes for me, but I prefer to control my own data without having to run and maintain the Bitwarden server for the rest.
Chromes builtin password manager. I trust that google has smart people who will do a good job of securing my passwords and my families. It has its problems but with its auto generated passwords and almost all services I use having two factor , I feel it’s a good choice
Using this you can encrypt your files. I store my gpg files in on a git forge. This way, I load my gpg key, clone the repo into ~/.password-store and voila! I can use my asswords/secrets across devices. It even has a utility for Android.
Besides that, I use Emacs a lot so I use helm-pass package to streamline my password discovery and copy-to-clipboard actions without exposing the password in plain view.
I really love KeePass. I don't feel comfortable with 3rd party cloud services.
There are also apps for Android and iOS to work with KeePass databases. It's everything easy.
I love the keepass ecosystem, but would never recommend it to family who isn't very computer literate, and the iOS offerings are poor, with kypass being the only full functioning one, and it's closed source and a little buggy. I worry a little bit about using it to manage my passwords.
36 comments
[ 2.9 ms ] story [ 82.4 ms ] threadAlthough, they weren't completely hacked it seems. They were fixing a major vulnerability.
Been a user for 3-4 years now, and would definitely recommend it.
Personally, I use KeePass with Syncthing but pay for a Bitwarden Family account for my spouse and family members.
I migrated from LastPass, to Enpass, and finally to KeePass. Bitwarden basically checks all the boxes for me, but I prefer to control my own data without having to run and maintain the Bitwarden server for the rest.
https://www.passwordstore.org
GitHub has a good tutorial on generating your own gpg key: https://help.github.com/en/articles/generating-a-new-gpg-key
Using this you can encrypt your files. I store my gpg files in on a git forge. This way, I load my gpg key, clone the repo into ~/.password-store and voila! I can use my asswords/secrets across devices. It even has a utility for Android.
Besides that, I use Emacs a lot so I use helm-pass package to streamline my password discovery and copy-to-clipboard actions without exposing the password in plain view.
It's cross-platform/FOSS and does not relay on cloud.
It is easy enough for my extremely non-technical wife to use on both her laptop and phone.
I typically say:
1. Anything is better than nothing.
2. 1Password is pretty good.
3. Keepass is the best if you are ultra paranoid.