> I disagree with the idea that the password managers built into your browser are somehow superior.
I use Password Safe. It doesn't integrate with my browser, and the database is stored locally. So I'm exposed to no threat from the subscription company; and there's no content script. It's easy to back-up the database. I can store the database and the Password Safe program on a memory stick. And I can use the password manager with any browser.
What do I lose? I lose auto-filling of login forms. That's it. Instead I have to copy-paste a password, something that happens 4-5 times a day.
I'm planning to switch to pass, for a few reasons (notably that Password Safe is Windows-only), but I'm dragging my feet.
Pass is amazing. Along with yubikeys to do the encryption and "touch to sign" to avoid agent exploitation (so you need to touch it for every use) it's pretty safe too. There's good browser plugins available.
It's a bit of a pain to set it all up on every OS. Especially on Windows it feels far from native. But it works well.
I don't like copy/pasting passwords. Many computers have a clipboard log these days and you never know what program is polling for your clipboard contents. Mobile apps used to do this all the time and I don't believe for a second that shitty trackers and other such online stalkerware doesn't try to get the contents of your clipboard.
I use an integrated browser mostly so I don't need to go through my clipboard, even though Bitwarden has a setting to auto clear the clipboard after copying a password.
A nice feature that some local password managers like KeePass have is that you can auto type them, so the actual password doesn't end up in the clipboard.
Of course, personally I'm not a fan of the idea of the command being interpreted incorrectly or messing up window switching so that my password would be sent to the wrong application.
I use Password Safe. It doesn't integrate with my browser, and the database is stored locally. So I'm exposed to no threat from the subscription company; and there's no content script. It's easy to back-up the database. I can store the database and the Password Safe program on a memory stick. And I can use the password manager with any browser.
What do I lose? I lose auto-filling of login forms. That's it. Instead I have to copy-paste a password, something that happens 4-5 times a day.
I'm planning to switch to pass, for a few reasons (notably that Password Safe is Windows-only), but I'm dragging my feet.