this post was submitted on 11 Jul 2023
369 points (97.9% liked)

Asklemmy

43963 readers
1220 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy πŸ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago
MODERATORS
Cloak@lemmy.ml
mekhos@lemmy.ml
tmpod@lemmy.pt
14specks@lemmy.ml
369
What password manager do you recommend? (lemmy.dbzer0.com)
submitted 1 year ago* (last edited 1 year ago) by 001100010010@lemmy.dbzer0.com to c/asklemmy@lemmy.ml
283 comments fedilink hide all child comments
 

Okay so yesterday, I changed my password as a precaution because of the hack, and just now I decided to clean my browser tabs and re login and almost forgot my password. I'm done dealing with passwords.

What password manager do you recommend?

Features I’m looking for

-Open Source

-Can be synced to cloud (I don’t want self host)

-Can be accessed via a browser

-Cross platform, the more platforms, the better

-End to End Encrypted, and Encrypted at rest on my device, also need some way to authenticate before releasing the password, like a pin or biometrics

-Autofill for browser and apps

-Free (can be a freemium model, but I need the base tier to be free, too broke to spend money on this lol)

-Can export the passwords to a file

I never used a password manager before so sorry if I seem like a noob.

I know I could google it, but I want the lastest info, not some outdated reddit post.

Edit: Woah, those replies are fast. I think I'll use Bitwarden. Thanks for recommendations! Now I don't need to worry about forgetting passwords anymore. πŸ˜„

Edit 2: It seems I've forgotten my email password as well as a few other accounts I haven't logged into for a while. Damn, should've used a password manager earlier.

you are viewing a single comment's thread
view the rest of the comments
[–] cokane_88@lemmy.fmhy.ml -2 points 1 year ago (2 children)

Online password manager GTFO never ever doing that.

I use password safe desinged by Bruce Schneier, it's legit AF, https://pwsafe.org/

[–] mojo@lemm.ee 6 points 1 year ago (1 children)

Do you not need to sign in to your accounts from different devices? Not to mention autofill support is a big deal, hence why browser addons are so important. The other password managers are plenty secure, especially with 2fa and webauth which that app certainly is not going to have.

[–] cokane_88@lemmy.fmhy.ml 0 points 1 year ago (1 children)

The convenience factor is not there but you probably sacrifice security for the conveniences. Browser add-on is something else that can get hacked.

[–] mojo@lemm.ee 1 points 1 year ago (1 children)

What do you do for a living where you somehow don't need mobile autofill? Do you not leave the house?

[–] cokane_88@lemmy.fmhy.ml 1 points 1 year ago

I used do cyber security for a fortune 500, that's where I got exposed to that password manager. Now I don't work, stay at home dad aka house manager.

[–] magicalbeast69@programming.dev 4 points 1 year ago (1 children)

Why are online password manager bad? Sure, the risk is obviously higher than the offline one, but online password manager would be sufficient for most people. Convenient outweigh for like 99.99% of people. Even if there is a data breach, passwords' hashes are not easy to crack, even if you know the salt. The only way to crack it is that you reuse password. So, as long as you use strong enough master password, it'll most likely be fine.

Also, if you care about security, you'll also probably be using TOTP 2FA anyway. So unless, TOTP secret is leaked at the same time as your password, then you are fine.

[–] cokane_88@lemmy.fmhy.ml 1 points 1 year ago

https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/?utm_source=google&utm_medium=cpc&utm_campaign=19467886458&utm_term=lastpass%20hacked&utm_content=144001089494&sfdcid=7018c000001FDby

That's a breach they told the public about. What's worse is when a company gets breached and they don't know it happened or it takes them years to find out. I'd rather step on my own ding ding than put my credentials online.