Hacker News new | past | comments | ask | show | jobs | submit login

I use cloud storage to save my .kdbx file(s).

On Linux and Windows, KeepassXC is my software of choice. On Android, I like (and have donated multiple times to) https://play.google.com/store/apps/details?id=keepass2androi...

With the cloud storage setup (which, in my case, happens to be Google Drive), I always have the most recent version of my password safe(s) where I need them to be.

With this, my major threat exposure comprises of * the cloud provider losing my data, letting an aggressor get hold of my (encrypted) password store(s) - and then the aggressor brute-forcing * I myself losing my password store data to an aggressor * I myself losing my password store credentials to an aggressor

I am explicitly not using any of the online password providers simply because they are by themselves a much too valuable target. I myself, hopefully, am not valuable (or visible) enough, and therefore am not subject to "at-scale" attack patterns.




Keepass2Android also has an offline version: https://play.google.com/store/apps/details?id=keepass2androi...

I find this one nice, there's no need for a password manager to have Internet access when the database is synced with a separate client (in my case Nextcloud).


Same but I use Syncthing to sync the files between my laptop and phone. The database also gets backed to local backup + Backblaze B2.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: