So here is the thing. Everyone says use a password manager, like 1Password. But how can you trust the password manager company?
Seems everytime you turn around some trusted software vendor either has some data breach or goes over to the dark side.
8
Replies
0
Boosts
When you use KeePass your passworts are in an encrypted file.
It is open source and local on your computer/device.
With a strong masterpassword you can manage lots of accounts with its passworts.
@mastodonmigration This is why I use a product that at a minimum lets me keep my password vault local or in my local network.
I left 1Password when they insisted that I upload my vault to their server (and then decoding it using JS in my browser), something that is the exactly the opposite of what I want.
@mastodonmigration
I use keepassxc which is open source software so can be audited by security people and soforth. unfortunately it started allowing AI/LLM based development, but https://codeberg.org/ChiPass/ChiPass is a no AI fork I haven't looked into much yet.
@mastodonmigration Its not exactly a password manager but this is what I use:
https://github.com/KRcpl88/CryptoPad/releases/tag/v3.026.0427.0
1. its open source
2. Stores passwords in local encrypted file offline
3. No corporate funny business, just file encryption
You have to store your passwords in an encrypted file and there is no cloud storage so you have to find some way to share the file. I just email it to myself and download it from email on all my devices.
it’s simple. it works
@mastodonmigration Never used password managers just for the reason you say. I write them down in a notebook that I keep in my safe.
@lawyersgunsnmoney
I helped a woman after the altadena fire who did the same. Her password book was in a fireproof safe, and the safe even survived!!! Which meant some scavenger people came along and forced it open and started emptying her bank accounts.
Same. It is a bit more work, but never need to worry about someone else getting access to all the passwords.
