• Blemgo@lemmy.world
      link
      fedilink
      arrow-up
      7
      arrow-down
      1
      ·
      15 hours ago

      Alternatively, KeePass is a good offline solution, if you have a way to sync the password database.

      It even allows usernames and passwords as references, in case one login is required for multiple services.

      • NaibofTabr@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        ·
        7 hours ago

        I’m not sure what good an offline password manager would be… if you just mean self-hosted, Bitwarden and Vaultwarden both support that.

        I tried KeePass and a couple variants like KeePassXC at one point and found them clunky and difficult to use effectively across multiple devices. Definitely not a good place for new users to start, and I’m not sure what problem they solve that isn’t better served by Vaultwarden (assuming the main idea is to not use a commercial product).

        • mark@social.cool110.xyz
          link
          fedilink
          arrow-up
          4
          ·
          7 hours ago

          @NaibofTabr @Blemgo KeePass solves the problem of existing long before any of the networked one. Back in 2003 most people didn’t even have multiple devices to keep in sync, or if they did they kept the database file on a floppy disk.

          • Blemgo@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            5 hours ago

            Yeah, I sort of agree that networked password safes nowadays are objectively better than offline ones like KeePass. However, KeePass isn’t fully obsolete due to them, as it still offers an additional layer of security compared to online ones, as you effectively put their trust into these services. With an offline database however you aren’t subjected to the whims of the provider you put your trust in, but rather the software you use. And of course, your system can also be compromised, rendering this advantage null and void, but an online database wouldn’t help with that either.

            Overall, this advantage is overkill for most users, granted. Still, it’s pretty important tool for those who are under threat of surveillance, or those who don’t like to trust online systems.

  • estutweh@aussie.zone
    link
    fedilink
    arrow-up
    9
    ·
    18 hours ago

    Does anybody still use “a good/favourite password” any more? Use a password manager, create a different password or pass phrase for every site, and save your good/favourite password for your password manager. (Unless you’re a sleeper spy for the KGB, writing your password on a piece of paper is fine).

    • lemmyknow@lemmy.today
      link
      fedilink
      arrow-up
      7
      ·
      16 hours ago

      I fear relying on a password manager and getting locked out somehow. Imagine something goes wrong and I just… lose all my accounts at once. Not knowing my passwords seems kinda scary. Plus, sometimes I may need one and have no access to my password manager. Had to memorise my password last semester for uni computer tests (school’s computer, no phone). Now that I’ve had to reset it, it has grown stronger. I’ve already started working on memorising it, though. Not sure if passphrases would make that easier or more difficult

      • Jeraxus@lemmy.sdf.org
        link
        fedilink
        arrow-up
        4
        ·
        edit-2
        15 hours ago

        Store a backup on a USB stick you keep in your house (in another room than your computer)

        A sentence is easier to remember than random letters and it’s length and punctuation make it stronger than most pw. Use a sentence you like from a book, a video game, a show or a music. It’s easier to memorize and bring a bit joy when you type it.