• Blemgo@lemmy.world
      101·
      15 days ago

      Alternatively, KeePass is a good offline solution, if you have a way to sync the password database.

      It even allows usernames and passwords as references, in case one login is required for multiple services.

      • NaibofTabr@infosec.pubEnglish
        31·
        15 days ago

        I’m not sure what good an offline password manager would be… if you just mean self-hosted, Bitwarden and Vaultwarden both support that.

        I tried KeePass and a couple variants like KeePassXC at one point and found them clunky and difficult to use effectively across multiple devices. Definitely not a good place for new users to start, and I’m not sure what problem they solve that isn’t better served by Vaultwarden (assuming the main idea is to not use a commercial product).

        • mark@social.cool110.xyz
          4·
          15 days ago

          @NaibofTabr @Blemgo KeePass solves the problem of existing long before any of the networked one. Back in 2003 most people didn’t even have multiple devices to keep in sync, or if they did they kept the database file on a floppy disk.

          • Blemgo@lemmy.world
            1·
            15 days ago

            Yeah, I sort of agree that networked password safes nowadays are objectively better than offline ones like KeePass. However, KeePass isn’t fully obsolete due to them, as it still offers an additional layer of security compared to online ones, as you effectively put their trust into these services. With an offline database however you aren’t subjected to the whims of the provider you put your trust in, but rather the software you use. And of course, your system can also be compromised, rendering this advantage null and void, but an online database wouldn’t help with that either.

            Overall, this advantage is overkill for most users, granted. Still, it’s pretty important tool for those who are under threat of surveillance, or those who don’t like to trust online systems.

  • estutweh@aussie.zone
    10·
    15 days ago

    Does anybody still use “a good/favourite password” any more? Use a password manager, create a different password or pass phrase for every site, and save your good/favourite password for your password manager. (Unless you’re a sleeper spy for the KGB, writing your password on a piece of paper is fine).

    • lemmyknow@lemmy.today
      8·
      15 days ago

      I fear relying on a password manager and getting locked out somehow. Imagine something goes wrong and I just… lose all my accounts at once. Not knowing my passwords seems kinda scary. Plus, sometimes I may need one and have no access to my password manager. Had to memorise my password last semester for uni computer tests (school’s computer, no phone). Now that I’ve had to reset it, it has grown stronger. I’ve already started working on memorising it, though. Not sure if passphrases would make that easier or more difficult

      • Jeraxus@lemmy.sdf.org
        5·
        15 days ago

        Store a backup on a USB stick you keep in your house (in another room than your computer)

        A sentence is easier to remember than random letters and it’s length and punctuation make it stronger than most pw. Use a sentence you like from a book, a video game, a show or a music. It’s easier to memorize and bring a bit joy when you type it.

        • lemmyknow@lemmy.today
          2·
          9 days ago

          Eh, I don’t trust myself with my own data. I’ve gotten locked out of a few accounts once cause I had an issue on my laptop and my phone one week apart, I didn’t set up 2fa all over again for all accounts, and prolly didn’t catch a folder with 2fa backup codes on my computer during the last minute emergency backup I did from pc to phone before reinstalling (couldn’t be assed to figure out why booting to black screen during vacations. Not an issue I recall facing since dropping Manjaro, though. Good riddance.)

          I have a password generated with a password manager. Pretty much memorised already. Though granted, for several accounts with differing passwords, that’d be difficult. This is just one of’em