It never made sense to me to put password managers in the cloud. Regards to what you intend it to do, you’re making it accessible to a wider audience than necessary. And yet, I’m using iCloud. It’s time for a change.

I’m thinking of just running a locally hosted password manager on my home server and letting my devices sync with it somehow when I’m at home. I have a VPN into my home network when I’m away that automatically triggers when I leave the house, so even that’s not that big an issue, but I’m really not familiar with what’s gonna cleanly integrate with all my stuff and be easy to use. All I know is I wanna kill the cloud functionality of my setup.

I already have a jellyfish server so I figured I would just throw this onto that. Any suggestions?

  • WQMann@lemmy.mlEnglish
    4·
    17 hours ago

    Well, not wrong that it solves the problem, but with data breaches happening frequently, I wouldn’t want to repeat 1 single password for all services lol.

    Even if companies hash passwords, it’s still a gamble whether they are using an up-to-date hash algorithm (or if they do even hash it, lol). Plus, generally best to avoid exposing passwords, hashed or not, in the first place.

    • metaStatic@kbin.earth
      6·
      15 hours ago

      I was being facetious. Every site has multiple special requirements to make your password stronger weaker, the odds of being able to use a single one are slim even if you where dumb enough to try.

    • alienscience@programming.devEnglish
      2·
      16 hours ago

      I do this for sites where I don’t care at all about security. One minor tip, that will protect against automated attacks if the password is cracked, is to add part of the website name into the password (e.g “mystrongp4ss!lemworld”) .

      A human could easily crack it, but automated systems that replay the password on different sites would probably not bother to calculate the pattern.

      • nelson@lemmy.worldEnglish
        2·
        14 hours ago

        If just one or those passwords gets leaked you might find a lot of other ones get cracked as well.

        It may not be sites that you care about. But using a password manager is a lot less effort and a lot safer than whatever technique the average Joe will come up with.

        Any password that leaks which could indicate a potential system ( e.g.: sitename in lower/upper/leetspeak) makes the whole thing even more vulnerable.

        Just use something. Bitwarden, vault warden, keepassxc, …

        Knowing my social circle I’d recommend bitwarden. Even paying for it costs a measly 10$/year, while the free version is very usable in itself. And generating passphrases or 32char passwords will be a lot safer than whatever the hell they can come up with.

        Just avoid the default browser ones, big tech and LastPass.