A entry-based password manager?

3 years ago by Pantherina to c/privacy

I dont agree with many things apple does at all, and I also think their password manager has flaws like revealing usernames without authentification.

It is pretty handy though, to have a file where the entries are stored unencrypted, and if the password manager detects an entry it prompts to decrypt exactly that field, maybe with a fingerprint.

KeepassDX needs to run in the background and be completely unlocked to even detect apps or password fields.

Do you know any existing app that can do this?

Devjavu 25 points 3 years ago

Bitwarden if you want it in the cloud, Keepass if you want it on the device. I'd recommend PrivacyGuides.org's recommendations this time. They are rather careful as to what they recommend, still doesn't mean they always get it right.

path: 0 2445250, hotness: undefined, score: 25, children: 29

qaz 10 points 3 years ago

You can also self-host Bitwarden using Vaultwarden.

path: 0 2445250 2445577, hotness: undefined, score: 10, children: 22

FoxBJK 6 points 3 years ago

You can also run Bitwarden proper locally but unless you really know how to run and maintain a web server I wouldn’t recommend this.

path: 0 2445250 2445577 2447596, hotness: undefined, score: 6, children: 3

qaz 3 points 3 years ago

The official docker image uses a lot more resources than the vaultwarden container, but it allows significantly more than 100 users. If it’s just for yourself and your family I suggest just going with Vaultwarden.

path: 0 2445250 2445577 2447596 2455655, hotness: undefined, score: 3, children: 2

Pantherina 1 point 3 years ago

Why would any private person need this?

path: 0 2445250 2445577 2447596 2455655 2489692, hotness: undefined, score: 1, children: 1

Devjavu 3 points 3 years ago

Yes, but that is still cloud based. Keepass is local

path: 0 2445250 2445577 2445666, hotness: undefined, score: 3, children: 17

thatcasualgamingguy 3 points 3 years ago

Well, only if you host it in the cloud. Not if you host it at home, for example.

path: 0 2445250 2445577 2445666 2446150, hotness: undefined, score: 3, children: 16

Rootiest 4 points 3 years ago

I think what they meant is that one option uses network connectivity while the other functions entirely offline

path: 0 2445250 2445577 2445666 2446150 2446942, hotness: undefined, score: 4, children: 1

Devjavu 2 points 3 years ago

Which would make it hardly accessible outside of your home. Still not locally saved as well. And imho if he is not sure which password manager he should choose, he should maybe not self host just yet.

path: 0 2445250 2445577 2445666 2446150 2446916, hotness: undefined, score: 2, children: 13

danileonis 7 points 3 years ago

KeePassDX + Syncthing is the best solution.

path: 0 2445250 2445985, hotness: undefined, score: 7, children: 3

Pantherina 1 point 3 years ago

Use that but its not about that topic. Its about storing unencrypted metadata (or usinh android Keystore for example) and having autofill work always even if the database is locked, and its quickly unlocked just for that entry

path: 0 2445250 2445985 2489685, hotness: undefined, score: 1, children: 1

Spotlight7573 2 points 3 years ago

I don't think any password managers that don't have that feature currently are likely to implement this feature after the beating that LastPass took in the press about it:

LastPass breach is worse than you think because URLs were unencrypted

Maybe an app might be able to cache the metadata locally but I don't think it would be something people expect to be unprotected at this point.

path: 0 2445250 2445985 2489685 2491756, hotness: undefined, score: 2, children: 0

Devjavu 1 point 3 years ago

I like this solution but it's not really entry level

path: 0 2445250 2445985 2446933, hotness: undefined, score: 1, children: 0

Mkengine 1 point 3 years ago

What do you think about PrivacyTools.io? Are they on the same level as PrivacyGuides.org?

path: 0 2445250 2504680, hotness: undefined, score: 1, children: 1

Devjavu 2 points 3 years ago

As announced on July 27th, and on Sept 14th, 2021, The Team Formerly Known As PrivacyTools.io – the entirety of the team providing privacy-related advice & services to you for the past couple years – has transitioned to PrivacyGuides.org and r/PrivacyGuides. Please join us there. :) For more recent news regarding The Reddit Blackout, see: https://lemmy.one/post/74432.

Taken straight from the privacytools.io subreddit description. This will tell you more.

Privacytools.io does seem to be quite outdated currently. There are other good sources out there however.

path: 0 2445250 2504680 2506690, hotness: undefined, score: 2, children: 0

Supercharger 14 points 3 years ago

The recently released Proton Pass is also open-source and audited, keeps all the entries (including metadata) encrypted, and has a nice UI on mobile.

path: 0 2446223, hotness: undefined, score: 14, children: 3

UnfortunateShort 2 points 3 years ago

Also, for little money gain unlimited mail aliases (and the desktop UI is also nice :) )

path: 0 2446223 2452498, hotness: undefined, score: 2, children: 0

mishimaenjoyer 2 points 3 years ago

it's worth mentioning that protonpass unlocks biometrical on mobile devices and the browser-plugins support 6-digit pin codes.

path: 0 2446223 2450818, hotness: undefined, score: 2, children: 0

Devjavu 1 point 3 years ago

path: 0 2446223 2448076, hotness: undefined, score: 1, children: 0

Extrasvhx9he 4 points 3 years ago

Kinda confused, you want a password manager that stores entries unencrypted but when you need them, the manager encrypts the entry and then prompts you for authetication to autofill the entry? That seems kinda dumb but if its just for convenience to not input your masterpassword everytime, keepassdx allows biometric unlocking. Think it'll take as much time as what you described without potentially exposing any unencrypted entry info

Edit: Before someone jumps at my throat, security wise using biometrics is also kinda a no no but I understand not everyone has the same threat model so go for it if you want

path: 0 2445493, hotness: undefined, score: 4, children: 3

thatcasualgamingguy 6 points 3 years ago

If I understand it correctly, the passwords are stored encrypted, but not the additional data, like website-URLs and app-names. This way the password manager only needs to temporarily decrypt a specific password when it's needed for auto-fill. In regards to the passwords that's probably a bit safer than keeping all the data and the passwords unencrypted in memory. But the cost is that all the other data is stored unencrypted.

path: 0 2445493 2446117, hotness: undefined, score: 6, children: 2

Extrasvhx9he 3 points 3 years ago

Ohh thats kinda interesting I didnt know this. I appreciate the info

path: 0 2445493 2446117 2447420, hotness: undefined, score: 3, children: 0

Pantherina 1 point 3 years ago

100%

path: 0 2445493 2446117 2489657, hotness: undefined, score: 1, children: 0

TCB13 3 points 3 years ago

Use KeePassXC. Audited, code, open-source, highly customizable, zero cloud stuff.

path: 0 2445928, hotness: undefined, score: 3, children: 2

Extrasvhx9he 2 points 3 years ago

Think its for mobile since they mentioned keepassdx

path: 0 2445928 2446080, hotness: undefined, score: 2, children: 1

Pantherina 1 point 3 years ago

Yes I already use these. On Linux I use Kwallet, store my huge random Keepass password in there and unlock the Keepass database by fetching that password using a shortcut.

But still, then the password storage is open. Not as elegant as an on-demand password requester, especially on Android

path: 0 2445928 2446080 2489645, hotness: undefined, score: 1, children: 0

privacy

@lemmy.ml

login for more options

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...

privacy

@lemmy.ml

login for more options

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...