Re:On Password Managers
by pixelmonkey on Thursday July 20, 2017 @01:19PM
(#14814452)
I use Enpass on Linux, Windows, OS X, Android, and iOS. I also use the Chrome extension. It has a similar user experience to 1Password, but is actually serverless (you sync your encrypted blob to a cloud service of your choice, or not at all). I wish Enpass were open source, but I can understand their decision not to make it so -- its desktop application is free and its mobile apps include a small perpetual license fee ($10 per user, one-time). The format of the encrypted blob is a simple SQLCipher database that uses your (memorized) master password as the secret key, so even though the application is closed source, the data seems to be stored in an open format. Overall, it's probably the best option on the market in a very bad category of software. After evaluating them all, IMO, you should run away from 1Password, Dashlane, Lastpass, etc and use Enpass instead. Even better if the place you sync your encrypted blob is protected by strict 2FA and has good (enforceable) privacy policies.
[ Parent
| on HN ]
I'm using Enpass, too. Your sentiments mirror mine exactly. In general I'm surprised they are not getting more press. Perhaps if they were more explicit and open about their underlying data format (the SQLite+SQLCipher database)?
Re:On Password Managers
by conorcleary on Friday July 21, 2017 @12:05AM
(#14817986)
I hope it stays reliable and low key.
I've recently installed Enpass and I'm currently in the process of evaluating it. I really like the idea so far. My main concern is that they're not charging enough and wonder if the business model is sustainable.
Re:On Password Managers
by richardpetersen on Friday July 21, 2017 @03:47AM
(#14818781)
I was thinking exactly the same. However it can't take that much effort to keep it maintained.
I've used it but there are two major issues they still haven't fixed.
On windows there's some bug with a qt library they're using that, of all things, messes up network connectivity. It does polling of the network interfaces every 30 seconds (I believe) which causes traffic to completely stop for a couple of seconds.
On Android at least, it is EXTREMELY slow. Search works about 10% of the time, and the other 90% of the time you have to kill the app and relaunch it.
Set the QT_BEARER_POLL_TIMEOUT environment variable to -1
I work on a Qt powered project and we had the same bug
Tried that, it did nothing. The only thing that worked for me was to delete the library entirely. At which point I'd ask why they bother including it in the first place if it's unnecessary and causes issues.
Re:On Password Managers
by fuzzygroup on Thursday July 20, 2017 @06:02PM
(#14816665)
I can definitely endorse Enpass as a great product. I never used to believe in password managers but the past year has made a believer of me. I had the passcode to our garage door stored as an encrypted note and ended up getting home for ElixirCon via a late night Uber and rather than wake up the family, I looked it up in Enpass, keyed it and and it was perfect.
I have it on all my Macs, my iPad and iPhone and sync via Dropbox has been flawless so far.
Agree. I switched over from 1Password when it became evident they would never have a Linux client. Been using Enpass and it works a dream syncing between various OS with a very nice UI quite similar to 1P.
Yes, me too. It took some missteps with shitty Lastpass before I finally found it. I sync directly from my computer to my phone and from my computer to my NAS. I've thought about syncing to Google Drive or some other service like that and it is an option, but so far hasn't been necessary. I don't see why my password data should ever have to leave my machines if I don't want it to. And it doesn't.
Re:On Password Managers
by conorcleary on Friday July 21, 2017 @12:06AM
(#14817989)
Your phone... I'm sure your data is hopping over many machines.
Can you explain? I use my home wifi to sync to my phone. I'm sure my data is not hopping over many machines, or any machines I do not control.
Re:On Password Managers
by conorcleary on Sunday July 23, 2017 @12:44PM
(#14833123)
Fair enough, as long as you're sure that the app is not active when not on your specific wifi network.
I found Enpass rather unfeatureful. It doesn't even have an option to use multiple vaults.
Only downside is importing and exporting. I've been on Enpass since I got an android license through myappfree for some reason but exporting to KeePass was a bloody pain...
Hadn't figured out the format of their blob, that could have helped. Might want to get back to it right now....