While this is true, and I did this for the better part of 2010s, it was pretty clunky. Especially if one needs a platform for their wife or children to also use.
I'm gonna ride out LastPass until webauthn really takes off. Which could be soon based on what we're hearing from the mobile vendors.
> Which could be soon based on what we're hearing from the mobile vendors.
I'd really like to see wider webauthn support, so I'm curious to know what you mean by what you're hearing from the mobile vendors please?
Re:LastPass: Notice of Security Incident
by armada651 on Friday August 26, 2022 @01:08AM
(#32603567)
Yeah I'm definitely not saying this is the right solution for everyone, but for my personal password database I'm willing to sacrifice a bit of polish to make sure the zero-knowledge claim is iron clad.
Re:LastPass: Notice of Security Incident
by collegeburner on Friday August 26, 2022 @01:29AM
(#32603676)
You don't even need Dropbox, for a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
Re:LastPass: Notice of Security Incident
by andreareina on Friday August 26, 2022 @01:58AM
(#32603813)
I've had multiple failures to merge (including corrupted databases) with keepass. I'm still using it but I'm considering moving to {bit,vault}warden
Re:LastPass: Notice of Security Incident
by Timothycquinn on Friday August 26, 2022 @01:24AM
(#32603647)
I sync my keepass using signal's 'note to self' feature.
Simply secure the database with a password and keyfile then copy the key file manually to your mobile devices and workstation.
That way you can be certain that your cloud provider has zero knowledge of your key file and also doesn't control the application in which you enter the master password.