News for hackers. Stuff that matters.
Re:Changes to LastPass Free by falcolas on Tuesday February 16, 2021 @12:32PM (#26156397)
Keepass is another cross-platform option (open source), though the UI on non-windows environments is a bit... crap.

Nontheless, it works, and it works well.

Re:Changes to LastPass Free by johnchristopher on Tuesday February 16, 2021 @12:51PM (#26156647)
Keepass is not a Web first app. There are extensions and workarounds but considering the nature of its file based database it can never be as smooth as solutions like bitwarden and others.

At work we share a Keepass file on a nextcloud instance and it's a giant PITA.

Re:Changes to LastPass Free by falcolas on Tuesday February 16, 2021 @01:00PM (#26156761)
::Personal Opinion Warning::

When it comes to security, smoothness is kinda low on my priority list. I'm fine swapping windows to copy/paste values, or pressing a hotkey.

Re:Changes to LastPass Free by kstrauser on Tuesday February 16, 2021 @02:09PM (#26157544)
It's very high on my priority list. I want my employees to want to use a password manager because it's so convenient. A less perfect system that actually gets used adds more security than a more perfect system that no one likes.
Re:Changes to LastPass Free by fencepost on Tuesday February 16, 2021 @01:46PM (#26157286)
There are notable advantages to browser integration - in particular not filling on spoofed "lookalike" domains made with visually similar Unicode characters, and not putting passwords into the clipboard where they might be snagged by anything watching the clipboard.

(admittedly, if your system has something malicious monitoring clipboard use you already have big problems)

Re:Changes to LastPass Free by dkersten on Tuesday February 16, 2021 @02:43PM (#26157885)
Lack of smoothness is what causes many people to ignore these things. So, while you or I may know better, its still a very important aspect if we want more than just the few in the know people to use security tools.
Re:Changes to LastPass Free by ssully on Tuesday February 16, 2021 @05:09PM (#26159381)
I have also used multiple shared Keepass files at work and the issue isn't a lack of smoothness. There have been multiple instances of sync/dataloss issues where you have to refer to an old version or find someone who has the latest "OK" version of the file.

I love Keepass for personal use, but if you using it for sharing passwords at work then 1Password or Bitwarden are the way to go.

Re:Changes to LastPass Free by krets on Tuesday February 16, 2021 @04:57PM (#26159286)
I'm using KeePass + Syncthing to get it around all my devices. Works like a charm! Except for iOS devices...
Re:Changes to LastPass Free by spurgu on Tuesday February 16, 2021 @04:29PM (#26159028)
We used Dropbox and it was also a PITA.

Bitwarden is great, haven't used 1Password.

Re:Changes to LastPass Free by dastx on Tuesday February 16, 2021 @02:52PM (#26157994)
Keepass and all is great. But it doesn't have first class support for anything but passwords.

I'm sure many people will cringe when reading this, but I also save credit cards in my password manager and use it to auto fill when I need it. This unfortunately isn't supported by Keepass et al.

It has templates, which are supported by some implementation but not others. Which also isn't great.

Re:Changes to LastPass Free by Wowfunhappy on Tuesday February 16, 2021 @03:18PM (#26158297)
> I'm sure many people will cringe when reading this, but I also save credit cards in my password manager

Why would anyone cringe to read that? They're no more valuable than passwords. In fact, I would think they're less valuable, since really the CC company is on the hook if a number gets stolen.

Re:Changes to LastPass Free by dastx on Tuesday February 16, 2021 @06:13PM (#26160043)
I don't know. I guess I figured since Keepass and KeepassXC didn't have it, it might be because the most security and privacy conscious don't do it.
Re:Changes to LastPass Free by krrrh on Tuesday February 16, 2021 @04:27PM (#26159013)
Another reason this is helpful is if you lose your wallet and have all the phone numbers and details for your cards stored in a sun cable database. It makes it easy to cancel your cards and order new ones.
Re:Changes to LastPass Free by BenjiWiebe on Wednesday February 17, 2021 @01:58AM (#26163516)
I store my CC numbers in KeePassXC even though there's no first class support. I put my full name as the username, the number as the password, and the expiration and CVV I put in the comments.
Re:Changes to LastPass Free by dastx on Wednesday February 17, 2021 @02:17AM (#26163637)
This is what I keep reading, but when I tried that, auto fill didn't work for this.
Re:Changes to LastPass Free by dkonofalski on Tuesday February 16, 2021 @07:17PM (#26160808)
I do this too and it's another reason that I use 1Password. I use this functionality a lot too because I very rarely have my wallet on me but I always have my phone.
Re:Changes to LastPass Free by fencepost on Tuesday February 16, 2021 @02:11PM (#26157569)
My biggest problem with Keepass is that the integrations aren't part of the core project. Want browser integration? Great, pick one (or more depending on browser choices) of multiple projects from pseudonymous/anonymous people, install it and give it access to your password store. Want mobile? Do the same.

Last time I looked at it the very nature of the Keepass ecosystem basically meant that you had a ton of different people with commit privileges to different areas, and no real reason to trust any of them.

Re:Changes to LastPass Free by radus on Tuesday February 16, 2021 @03:04PM (#26158136)
This is a valid criticism for sure. I suppose the only truly cross platform options is KeeWeb but you give up some features, mostly on mobile, eg. fingerprint unlock: https://github.com/keeweb/keeweb/issues/1132.
Re:Changes to LastPass Free by Kwpolska on Tuesday February 16, 2021 @02:08PM (#26157522)
KeePassXC is a modern fork that uses Qt for its UI, and it looks great on all platforms.
Re:Changes to LastPass Free by andy-x on Tuesday February 16, 2021 @06:05PM (#26159968)
"All platforms" does not include Android?
Re:Changes to LastPass Free by galaxy2prime on Tuesday February 16, 2021 @11:36PM (#26162745)
It's there on android too with keepass2android.
Re:Changes to LastPass Free by C19is20 on Tuesday February 16, 2021 @12:57PM (#26156724)
Please don't anyone take this as a plea to 'improve' the UI of keepass :-) Sometimes "... crap", just works.

Been using kp for years, also the android version. I manually sync my .kdbx files, and all is good.

Re:Changes to LastPass Free by falcolas on Tuesday February 16, 2021 @01:02PM (#26156779)
I won't disagree with you on this. It does work, and WRT security, fewer integrations is sometimes better.
Re:Changes to LastPass Free by budafish on Tuesday February 16, 2021 @02:05PM (#26157500)
Keeweb is what I use on all platforms. Yeah it's an electron app but it supports natively storing the keepass file in the cloud. Works online or offline and has global autotype.

Works great for me!

https://keeweb.info/

Re:Changes to LastPass Free by Macha on Tuesday February 16, 2021 @01:44PM (#26157258)
Use KeePassXC rather than the official client. Even on Windows, I found it preferable.
Re:Changes to LastPass Free by Wowfunhappy on Tuesday February 16, 2021 @12:34PM (#26156423)
Yeah, the lack of a good Mac client made Keepass untenable for me. I tried several and they all sucked.

A password manager is the one thing which I really need to work well everywhere, because I need access to my passwords everywhere.

Re:Changes to LastPass Free by ergl on Tuesday February 16, 2021 @12:37PM (#26156466)
I've been using macpass for a while on osx, and it works pretty well (and looks better than keepassxc): https://macpassapp.org/
Re:Changes to LastPass Free by secfirstmd on Tuesday February 16, 2021 @12:37PM (#26156459)
For what it's worth KeePassXC these days is very good useability wise and has some awesome features in it
Re:Changes to LastPass Free by radus on Tuesday February 16, 2021 @01:25PM (#26157037)
I'm evaluating StrongBox right now. https://strongboxsafe.com/

Features for MacOS are being actively developed to bring it up to parity with the iOS apps.

Re:Changes to LastPass Free by m-p-3 on Tuesday February 16, 2021 @12:57PM (#26156718)
Have you tried KeeWeb and AuthPass?

https://keeweb.info/

https://authpass.app/

Re:Changes to LastPass Free by cmroanirgo on Tuesday February 16, 2021 @04:43PM (#26159166)
KeepassXC is another option for multi platform. I use it on mac

KeepassDX for Android (or Keepass2Android)

I was a happy 1Password user, but prefer to use my own hosting for the files & the subscription model makes using your own files very hard (but it's still possible)

I tried BitWarden but the lack of a proper desktop app (where the browser plug-in connects to) is a deal breaker. I don't want to type my master password into my browser.