News for hackers. Stuff that matters.
Re:LastPass bug leaks credentials from previous site by bad_user on Monday September 16, 2019 @12:44PM (#20985921)
KeePass isn't a solution in case you want to share passwords with family or team members.

KeePass is barely decent for personal use only, and only for the desktop.

The quality of the available apps differs from platform to platform. For example Bitwarden has a decent iOS app, 1Password has a superb iOS app and in contrast the available KeePass app for iOS is a piece of shit – no offense intended but it's basically unmaintained, barely usable and does no sync so you'd better watch out for conflicts.

Re:LastPass bug leaks credentials from previous site by tripzilch on Wednesday September 18, 2019 @05:55AM (#21003680)
I dunno what you're using, but KeePass' Android app and the Linux desktop app are pretty great. Sync goes via a separate sync service (Dropbox currently but it could be anything), which is the way I want it.

And just like I think a password manager shouldn't be a browser extension, I also don't think it should encourage behaviour like sharing passwords among people ... I mean, really? That's literally password reuse, don't feel good about it. Of course a password manager shouldn't encourage it.

"Our son Jim made this password using his password manager thingy so it's probably really secure and now we use it for all our banking and government stuff"

I mean it's sincerely better to keep a "family password" on a post-it, so you don't confuse it with passwords you're actually trying to keep secure.

Re:LastPass bug leaks credentials from previous site by bwblabs on Monday September 16, 2019 @01:16PM (#20986323)
I use KeePassXC in multiple groups with different synchronization software (Dropbox, self hosted client side encrypted Seafile, etc.), for each group I use a different .kdbx and .key (of course that one not synchronized).

There are multiple .kdbx apps, like MiniKeePass on iOS, which is decent, but it's lacking active development at the moment.

Re:LastPass bug leaks credentials from previous site by arunc on Monday September 16, 2019 @05:57PM (#20988973)
We use Keepass2Android[1] on Android and KeePass Touch[2] on iOS, synchronize it via Google drive and share it with family across various devices on Linux and Windows. Separate DB for family outside the country and it works beautifully.

[1] https://play.google.com/store/apps/details?id=keepass2androi...

[2] https://apps.apple.com/us/app/keepass-touch/id966759076

Re:LastPass bug leaks credentials from previous site by blahyawnblah on Monday September 16, 2019 @02:45PM (#20987253)
I've used keepass in a team before. We just kept the file in a synced shared folder. Worked fine.
Re:LastPass bug leaks credentials from previous site by limuc on Tuesday September 17, 2019 @05:14AM (#20993147)
There is no KeePass-app for iOS (in the sense of the one/official). I think you mean MiniKeePass.

There is Strongbox on iOS and it's by far the best mobile KeePass-experience i've ever had.

Re:LastPass bug leaks credentials from previous site by farisjarrah on Monday September 16, 2019 @04:35PM (#20988297)
keepassdx for android works great