Opinion - What are your thoughts on password managers? Do you use one? Would you recommend it to others?

NewYorkRush@lemmy.ca to Android@lemmy.world – 1150 points –
951

You are viewing a single comment

I have been using BitWarden, and it's pretty good, but I'm shifting over to Keepass now, syncing the database with syncthing. Means I don't have to trust they won't be breached, but it is definitely a bit more of a faff to get set up. For anyone unsure, I would definitely recommend a managed service like BitWarden though. I got my sister on it, who would probably have a single password for everything otherwise, and she got the hang of it super quick.

You can self host bitwarden using vaultwarden on docker + pi with SQLite. You just need to make sure you backup your vault to a remote service from time to time, but you can encrypt that

If I were running a business and had to share passwords and control access to things for multiple users, that's probably what I'd do, but all I need is a synced password storage. Self-hosting a server's probably overkill for that.

Also, isn't the vault itself encrypted? You shouldn't have to encrypt extra to do a backup.

I'm pretty sure it's password encrypted, so in theory yeah it should be secure if your master password is, but if someone gets access to it I think they could try to brute force your vault open.

It's not that hard to maintain tbh, it's actually simpler than a lot of other self hosted options because it just works on every device with no weird setup with syncthing. It's made my life so much simpler and I like being able to quickly share logins with my fiance.