Why would i abbandon KeepassDX?

6 months ago by trilobite to c/selfhosted

I use KeepassDX on family mobiles with Syncthing for copies between laptop and phones. What would i gain moving to Vaultwarden, knowing that i would never open my network to the outside world? It would be easier to manage for sure, as im having to setup phones and laotops myself in the family and worry that they do silly things like turn off syncthing. But what about offline access to passwords? Does Bitwarden mobile client keep a local copy of database until it can sync?

load all comments

rtxn 38 points 6 months ago

tl;dr: yes, credentials are cached locally. https://github.com/...

The major downside to the single file storage used by Keepass is that it's easy to accidentally create a conflict between files on different devices if they're not synced immediately. Conflicting files have to be merged manually or data might be lost. I've run into this several times with Keepass + Nextcloud. In comparison, a central master database with local cache can resolve conflicts between individual records.

save

path: 0 20992089, hotness: undefined, score: 38, children: 10

trilobite 10 points 6 months ago

That is another problem i face when i have the app open on desktop and phone at the same time. Its a nightmare.

save

path: 0 20992089 20992563, hotness: undefined, score: 10, children: 7

fizzle 16 points 6 months ago

I use keepassxc and syncthing and have never had this problem.

I think there's something in the settings to save after each change and reparse if there's a remote change.

save

path: 0 20992089 20992563 20993378, hotness: undefined, score: 16, children: 0

Azzu 4 points 6 months ago

Doesn't it only lead to problems if you change the same exact data on both copies to different values? It literally never happened to me, I never had a merge problem. It always just asks me to merge, I say yes, and that's it.

Oh wait I use KeepassXC not DX, dunno what the difference is

save

path: 0 20992089 20992563 20993501, hotness: undefined, score: 4, children: 4

Centaur 4 points 6 months ago

KeepassXC is password manager for desktop computers and KeepassDX is application for Android phones.

save

path: 0 20992089 20992563 20993501 20994249, hotness: undefined, score: 4, children: 1

rtxn 3 points 6 months ago

The problem is that syncing between devices is not implemented in KeePass itself but through an external tool (Nextcloud, Syncthing, or whatever else). The sync client will only see the ciphertext and won't be able to tell which records have been changed, only that two different binary files have a common ancestor and are in conflict.

The most obvious solution is to lock and close the database when it's not in use (which is a good practice from a security perspective too), and to sync immediately when it is changed.

save

path: 0 20992089 20992563 20993501 20996269, hotness: undefined, score: 3, children: 1

elmicha 3 points 6 months ago

Keepass2Android can use an sftp server. If something was changed on the desktop, Keepass2Android will ask if it should merge the changes.

save

path: 0 20992089 20992563 20993420, hotness: undefined, score: 3, children: 0