Re:Write your passwords down (2010)
by hirundo on Monday August 07, 2023 @09:48AM
(#37034427)
The Keypass unhosted ecosystem seems to fit your requirements. I recently switched to it from 1Password and am happy with it. I distribute the database to my various devices with (open source) Syncthing.
[ Parent
| on HN ]
The distributed part is crucial, especially to avoid potential hardware failure. Happened to me, older machine ram (might be misremembering, that old machine had several parts replaced) failure made keypass unable to validate, claiming a corrupt database.
A problem solved by a backup strategy, not a cloud service.
I firmly believe you can't expect cloud services to do anything but serve up exactly what you give them. If you give them a corrupt database, they will happily serve you up a corrupted database.
Technically, the problem is solved by either one. A service like 1password is in the business of not serving you up a corrupt database. A backup solution also works here if you don't want to rely on other services.
Sure, if 1Password's cloud service can inspect and validate the structure of the vault. I kind of hope they can't since the vault should be encrypted, but I'm also not quite that naive.
They don't have to validate the structure of the vault to ensure redundancy.
Re:Write your passwords down (2010)
by godshatter on Monday August 07, 2023 @12:07PM
(#37036308)
I use keepass2, and I keep a copy on a USB stick that I carry with me. Almost every device I log into regularly has a copy of the file, but I'll have to sync from the USB stick at times if the particular password I want was changed recently. I also keep a copy in the cloud, but it's usually out of date.