Hello!
Could you please recommend a password manager? I want to find a reliable application to store all my passwords. If it is possible to access it from a smartphone, that would be great.
Which one do you use?
1 Like
6 Likes
I’m a big fan of Bitwarden/Vaultwarden. It runs on anything, can be swlfhosted on a pi zero and has a very broad featureset. They even do regular audits so it’s pretty safe to use. Their free tier is also pretty good and premium membership is cheap.
15 Likes
Both the above recommendation is good. I would prioritize KeePassXC especially if you have a way to back up the password database file sync yourself.
For convenience and cloud availability, the free tier of Bitwarden should be more than enough.
1 Like
For ease of use, Bitwarden - and $10 per year is a steal with 2FA and some storage/share options. I find it works well across all my devices. You can self host later as well if you want.
KeePassXC is well regarded - I believe KeePass is no longer maintained, so just check you get the right one!
3 Likes
KeePass 2.53.1 released 2023-01-09 14:29.
KeePass 1.41 released 2023-01-02 14:47.
2 Likes
@TimHolus - I stand corrected. And apologies, I got confused with keepassX. But that does mean it is still important to check it is the right one given such similar names to avoid confusion like mine…
3 Likes
It’s always worth double-checking and thinking twice. 
2 Likes
Thank you very much for your help!
Been using passbolt recently. It´s ment more for teams, but it´s simple enough that that isn´t really an issue. I´m currently using the cloud version (it´s $9 a month). Bit expensive maybe as far as password managers go. Even though I prefer not to self host it currently the ability to do so is one of the reasons I´m not that opposed to paying that price for it. If you self host it it´s completely free. You do get 3 users for those $9 and additional users would cost $3 per user.
It has browser extensions for all noteable browsers (except safari), mobile apps for android/ios and a cli client (if you need credentials in scripts). You can also directly use the go module the cli client is based on for more complex stuff. No native desktop apps currently. By default nothing is shared, but you can choose to share passwords with other users in the same “org”.
Bitwarden.
2 Likes
i switched to bitwarden a long time ago… its not perfect but close…
what i love about the company is that they are testing their security every year at least.
so i feel more confident that we will not get a surprise leak/hack like other password manager did in the past.
just my 10cents opinion.
thank you
3 Likes
I’ve been using 1Password for a long time and have been very happy with it. They have apps for everything, so you can access it from Linux, Windows, iOS, Android, etc.
2 Likes
Been paying for Bitwarden for the last year and have been very happy. Semi-open source and like @sy5tem said they undergo regular security audits.
1 Like
Pen and paper, and I am being serious
Someone did this for their Department of Homeland Security account. Literally a letterpad with pages and pages each page had a password and they’d cross off the password when it expired and add a new line on the same page.
Never understood the rationale behind requiring users to change their passwords frequently.
1 Like
It was because the NSA advised it up until about 3-5 years ago when they did a study that found it made no appreciable difference in security while reducing usability and also creating more attack vectors because people would write their passwords on a sticky note and put it on their monitor because they couldn’t remember it since it had to be rotated every 90 days or whatever.
6 Likes
I like bitwarden, especially the fingerprint security on a phone. I didn’t need the paid for version, but paid anyway as the service is worth supporting.
1 Like
I use the ability to upload files and pictures as a backup for important data that doesn’t change. I have my Birth certificate, pictures of my ID’s and Passports, etc backed up there. I encrypt them using my yubikeys and gpg --encrypt so that even though they are out of my control it would take the NSA and a quantum computer to get into them.
hehe its quite inexpensive right 
i think they only locked 2FA ability is under paid license, which is neet to have
10$ per year is nothing… and when a company makes money they can pay staff and take care of their software.
and today free software is riddled with “lets snif user and sell his data”