Ask HN: What password manager do you use?
I know the benefits of using a password manager but have yet to find one that I feel comfortable with.
10 comments
I have used password managers for more than 4 years now.
Here is how I work -
1. When life used to be simple, (read without smartphone and tabs) I just used desktop based Roboform (NOT cloud based) These days most of the companies promote cloud syncing of passwords, I am completely averse to storing passwords on cloud even if it means bit of discomfort.
2. Now for iPhone and iPad, I downloaded Dashlane, activated their syncing feature for few hours and synced my passwords on both the devices.
Here is how I work -
1. When life used to be simple, (read without smartphone and tabs) I just used desktop based Roboform (NOT cloud based) These days most of the companies promote cloud syncing of passwords, I am completely averse to storing passwords on cloud even if it means bit of discomfort.
2. Now for iPhone and iPad, I downloaded Dashlane, activated their syncing feature for few hours and synced my passwords on both the devices.
F secure key works well and syncs well between all my devices and computers.
I use 1Password but it's sharing functionality is sort of a mis-feature. I frequently work with contractors, and use GPG for sharing secure information. Sometimes a GPG-encrypted text file is all that you need.
One of the nicest I have tried so far. Unobtrusive and easy to use. I have put the keystore on an encrypted USB which solves nearly all my problems.
One question, I can't find what the trial is. Is it time based?
One question, I can't find what the trial is. Is it time based?
> The application downloaded from our website will remain fully functional for the first 30 days after you install it. After this initial trial period, you will need to purchase a license to continue using without restrictions.
https://agilebits.com/home/licenses
https://agilebits.com/home/licenses
This keeps coming up in recent months. I suggest you look through what folks have been recommending.
Discussion about KeePass: https://news.ycombinator.com/item?id=7174595
Discussion about Pass: https://news.ycombinator.com/item?id=7495337
Discussion about KeePass: https://news.ycombinator.com/item?id=7174595
Discussion about Pass: https://news.ycombinator.com/item?id=7495337
I have a (homemade) thin bash-wrapper around gnupg, which stores the passwords in a folder, that is backed up by git-annex..
The main work is done by a vim-autocommand-group (augroup) which runs the file through gpg on open/save if it ends with .gpg
The main work is done by a vim-autocommand-group (augroup) which runs the file through gpg on open/save if it ends with .gpg
KeePass, stored on protected flash drives.
I carry one on my keyring and keep backups.
I have little faith in cloud-based/browser-based managers.
I carry one on my keyring and keep backups.
I have little faith in cloud-based/browser-based managers.
I was put off a bit by the requirement of Mono for Linux but I see there is a port called KeePassX. This might be a nice compromise.
You didn't say what platforms you intend to use it on. Nor what your most important attack vectors are.
I use a Yubikey. The first slot is set to a long secure password and is used to gain access to my machine. The second slot is a long secure password which is combined with other text on a per-website basis. I type the text and push the Yubikey button for the rest. This is suboptimal.
I use a Yubikey. The first slot is set to a long secure password and is used to gain access to my machine. The second slot is a long secure password which is combined with other text on a per-website basis. I type the text and push the Yubikey button for the rest. This is suboptimal.
Portability is one of my main concerns as I use a variety of platforms e.g. Linux at home, Windows at work and Android on the go. I would also be a little hesitant to trust a hosted solution. SuperGenPass (www.supergenpass.com) seemed like a nice solution but I am concerned about what happens when I need to change password.
Does Yubikey have a solution for Android? They seem right up my street.
Does Yubikey have a solution for Android? They seem right up my street.
I use a combination of a Yubikey and GnuPG. My GnuPG private key has a password which consists of two parts:
1) A long secure password stored on my Yubikey 2) A shorter password (stored mentally)
Passwords are saved into individual files and encrypted with my private key using pass[0].
[0] pass: http://www.passwordstore.org/
1) A long secure password stored on my Yubikey 2) A shorter password (stored mentally)
Passwords are saved into individual files and encrypted with my private key using pass[0].
[0] pass: http://www.passwordstore.org/
Datavault. Syncs nice with Mac/iOS.
I use lastpass. It is probably safer to use something like KeePass, but it is just so much easier to use lastpass.
Auto fills logins if you want, instantly generate/save passwords in the browser, mobile app that will fill in logins on my phone, etc
Auto fills logins if you want, instantly generate/save passwords in the browser, mobile app that will fill in logins on my phone, etc