Brain-based management is getting too exhausting, and isn’t even fully possible with a larger quantity of online accounts.
You must log in or register to comment.
Bitwarden
To further this, if you actually move over to any password manager please regenerate all of your duplicate passwords with something 20+ characters. It’s almost pointless to have a PW Manager if you’re using the same weak password everywhere.
Make a new strong password for your master password too; I’d recommend a phrase of four moderately long words like “BattleshipMonitorPaintingPrinter” and perhaps a little postit note doodle drawing to remember it until it’s hammered home.
Alternatively, writing down the master password somewhere secure, like in a safe, would also be good if you have to pass on important accounts to descendants.
That’s my reason for wanting to switch to a password manager. Everything gets some long random string that would be insane to type anyway. Or using passkeys, if supported, though I’ll have to research how that works.
My biggest problem is backups. I like the method of Aegis authenticator. It just stores some number of past (encrypted) databases. Each change is a new file. This way rsync takes care of both backups and version control. If I accidentally rsync a corrupted file, it doesn’t matter much. And I can verify them with Rhash, just like all files that don’t change (like photos).
I’m fairly sure you can self host Bitwarden, so it might be possible to have backups in a similar way
I think Vaultwarden is the self-hosted version
Or a USB with a Gpg encrypted text file locked with a slightly easier password.
keepassxc
Keepassxc/keepassdx, synced with syncthings/basicsync.
Using a headscale/tailscale setup so things stay synced even when i am not home.
Vaultwarden - self hosted bitwarden server that any bitwarden clients can connect to.
Bitwarden
pass: the standard unix password manager for tech-savvy people. It’s dead simple: just a directory of GPG-encrypted files that you can sync across devices using git or other means. It has a CLI interface, an Android app, and a Firefox extension.
BitWarden and a self hosted VaultWarden
Fun part of that sollution is that you only need one app.
You also need a secondary service on your server if you want to keep them in sync.
Not really. Bitwarden is hosted by Bitwarden, why would you want to run the sync yourself? Vaultwarden is self hosted anyway.
I assumed that’s what you meant by saying bitwarden and Vaultwarden.
Remember the password to my email. Create account on site. Log in and remain logged in. When eventually logged out click forgot password. Log into email and click reset link.
That was what I did 20 years ago
Idk if this is the right choice but I write them down on a piece of paper and store that paper in my locked fireproof safe.
Not very user friendly, but not wrong either
Definitely the most secure!
Bruteforcing a safe might be easier than a password manager.
Once physical access is achieved you have already lost. They can just brute force your brain. A safe is perfectly fine for the usual remote attacker.
It really does depend on your threat model, yeah?
1Password
I’m an old man yelling at clouds but I don’t trust any of the password storing technologies. I have a system of making/writing passwords and a save a short form of them on my pc. Without knowing a specific segment you’d never be able to guess what they were so the segment is the only thing I need to remember. Having to access accounts when not at home is a massive pain in the ass though lol
Basically the same. But not stored in a computer
Seconding Bitwarden, have been with it since my previous one (Lastpass? I forget, it was red) moved most of the good functionality behind a paywall many years ago. 11/10 I usually pay for the subscription, I like their product and want them to have a little walkin’ around money. But currently on the free tier which is perfectly fine (2 devices when I used pro for 3, but I hardly use my laptop.
My journey as well. Paid for LastPass (bought 10 years for $20) and changed when they went too much shit.
keepassxc
With gnupg, git, and a hardware security token. Also known as “pass”.
