• RayOfSunlight@lemmy.world
      link
      fedilink
      arrow-up
      27
      arrow-down
      7
      ·
      6 months ago

      I would personally recommend KeepassXC foe PC and KeepassDX for Android phones, just having your Vault available locally is a lot better than relying on a server that can get a security breach in any moment, not to mention the Keepass’s Vaults are encrypted and no one can access them without the , key or physical key, with KeepassXC and KeepassDX, you only will need ONE password 😁

      • Serinus@lemmy.world
        link
        fedilink
        arrow-up
        3
        ·
        6 months ago

        I have a lot of experience with both. As a tech savvy user, I slightly prefer KeePass. Syncing between devices is slightly more painful, but I find it to be more reliable, and it doesn’t have the attack surface that Bitwarden does. (While encrypted, Bitwarden still really wants a web server and a local database connection.)

        VaultWarden is probably better for those who can’t be bothered to move a file around and want direct browser integration. With KeePass when you need a password, you’ll make sure the username has focus and then alt+tab to KeePass and hit “autofill”. Some sites won’t take “username{tab}password{enter}” and you’ll have to customize the configuration.

        VaultWarden is better at prompting you to add new passwords. I prefer the workflow that’s encouraged by KeePass, where you open the app first and use the app to open the URL. (You can do this in VaultWarden too, but it’s less obvious.)

        • RayOfSunlight@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          6 months ago

          On my case i use Syncthing-fork to have my database synchronized on my tablet and phone, you’ll be surprised how easy to use is, and doesn’t require a server 😄

      • uzay@infosec.pub
        link
        fedilink
        arrow-up
        2
        ·
        6 months ago

        While I personally use KeepassXC and Keepass2Android on mobile devices (as with KeepassDX there is no reliable way of syncing the database that I know of) to other less tech-inclined people I’d always recommend Bitwarden as it is much more suitable to most people’s usecases.

        • RayOfSunlight@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          6 months ago

          I sync my database using syncthing, specifically syncthing-fork for android as i don’t currently have a PC 😄

          • uzay@infosec.pub
            link
            fedilink
            arrow-up
            1
            ·
            6 months ago

            I would prefer being able to use KeepassDX on my mobile (I assume you meant that), but I got burnt trying to use that while syncing my database through my Nextcloud. KDX does not check for external changes before overwriting the database, and with background-sync being as unreliable as it is on android, I have lost a few passwords that way without noticing it.

            • RayOfSunlight@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              6 months ago

              I don’t even have a nextcloud, i just keep my database on a single folder sync across my tablet and phone, if you could set up the nextcloud to sync in rhat same folder you (theorically) would have no problems 🤔

              • uzay@infosec.pub
                link
                fedilink
                arrow-up
                1
                ·
                6 months ago

                I mean that’s what I had been doing. The issue was just that the background sync of the nextcloud app on android wasn’t reliable enough and KeepassDX had no mechanisms to check for external changes before overwriting

                • RayOfSunlight@lemmy.world
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  6 months ago

                  Then i can’t help you, Use whatever works and it’s trustworthy enough for you, just don’t be surprised and come crying if Bitwarden SOMEHOW gets a security breach.

                  • uzay@infosec.pub
                    link
                    fedilink
                    arrow-up
                    1
                    ·
                    6 months ago

                    I’m not using Bitwarden though. I have a Vaultwarden instance I was using for a while, but I was talking about KeepassDX vs Keepass2Android.

            • chebra@mstdn.io
              link
              fedilink
              arrow-up
              0
              ·
              6 months ago

              @uzay Try Syncthing. If there is any conflict, syncthing keeps the conflicted file, and then keepass is able to merge them, so in the worst case some of your deleted passwords will come back, but you’ll never lose any.

              • uzay@infosec.pub
                link
                fedilink
                arrow-up
                1
                ·
                6 months ago

                Yeah, there are ways of fixing it after the fact, but that is too inconvenient and error-prone for me. I prefer if my Keepass app just makes sure my database is up to date before making any changes

    • kosmoz@lemm.ee
      link
      fedilink
      arrow-up
      2
      ·
      6 months ago

      I don’t know about “simple”, but it’s very good. Been a happy user for many years

      • apotheotic (she/her)@beehaw.org
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        6 months ago

        What’s not simple about it, as a password manager? Pop in the name/uri, pop in a username, pop in/generate a password Bingo bango Is there a level of complexity I’m missing, or alternatively is there a simpler approach?

    • Serinus@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      6 months ago

      VaultWarden if you want all the features without paying $40/year.

      Otherwise Bitwarden will either allow you to self-host OR allow you to share passwords with one other person (using their server), but not both.

      VaultWarden just unlocks all the features.