Poll Password Manager Poll (2022)

[Gandalf_The_Grey]

I haven't fully settled on a specific service, yet. Looked at Bitwarden for a while, and what struck me was that I could not use the client offline on my smartphone at the time, for example. Then again... how often is it, that I am in need of a password offline.

Have not read it yet, but some info from Bitwatden:

Configuring Bitwarden Clients for Offline Access | Bitwarden Blog

Most Bitwarden applications operate offline, allowing access to your secure information while disconnected.

bitwarden.com

 

[entropism]

is Dashlane a good pw manager?

It's good, but it's no better than any of the cheaper options. There's plenty of better things to throw money at besides a mediocre password manager.

 

[ForgottenSeer 94943]

is Dashlane a good pw manager?

Yes, it is! If you like web-first experience (as they call it), which means you can only access your password manager as a web app in yoour browser and not as a desktop app, then everything else would be functioning as you'd expect. Android and iOS autofill functionality is working as intended with almost no issues.

 

[amirr]

How good is Roboform? I have seen some tech savvy users use it.

 

[amirr]

https://www.g2.com/products/roboform/reviews

 

[ForgottenSeer 94943]

Here's my take on my password managers as I literally used almost of the known ones.

First, I do not find it a great idea from a security point of view to store your passwords online especially on the company's servers. You might argue that the database is encrypted and if fell in the wrong hands it's useless. This is a risk I am not going to take. I would not even use Bitwarden even if it is open-source for the reason I've just mentioned. Bitwarden is used by millions of people for it is free and this makes it a target to hackers. It is a matter of time that it would get hacked. Thus, it is a great idea to use an offline password manager or one that allows you to sync your passwords to a cloud of your choosing (this would be more secure than the company's servers because it is less likely for an attacker to target you).

Second, many password managers have gone mad and started doing what antivirus vendors starting doing—adding useless features (bloatware). Some password managers include VPN and whatsoever. Why? I just do not get it. They ask you to pay a fortune. In my opinion, I'd stick with pure password managers that they do what they should do and nothing else.

Third, some antivirus vendors started offering their own password managers. Personally, I tend to avoid these because I change vendors every now and then.

Finally, some password managers allow you to create custom fields and allow you store 2FA codes there. While this is a very convenient and useful feature, it is a security disaster. You're literally having all your eggs in one basket. If an attacker gains access to your password manager, you're screwed. This, too, does defeat the purpose of 2FA in the first place. Moreover, if it happens and you lose access to your password manager (maybe you forgot the master password), again you're screwed.

 

[ForgottenSeer 77194]

I suggest this group about security and privacy recommendations software:

Password Managers - Privacy Guides

Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.

www.privacyguides.org

 

[plat]

Google is going to help you out with the strength of your password in Chrome.

Spoiler

But if you use a generator, this prob. would not be necessary, I bet.

 

[franz]

My password manager is my head. I have never stored important passwords anywhere but in my brain. These are not passwords that can be easily cracked. Kaspersky claims it will take thousands of years, but if that's true, I don't know

 

[Templarware]

Microsoft Authenticator. One less app.

 

[Digmor Crusher]

My password manager is my head. I have never stored important passwords anywhere but in my brain. These are not passwords that can be easily cracked. Kaspersky claims it will take thousands of years, but if that's true, I don't know

Wish I could do that but I have far too many passwords to remember all of them plus any passwords for sites such as banking are very complex.

Now, I could do something like this for passwords; Blackcat88??Wilders, Blackcat88??Amazon. Blackcat88??Paypal, easy to remember but once one gets compromised basically they are all compromised.

 

[ZeePriest]

Firefox forevaaaaa

 

[Abu Hussam]

LastPass source code breach – incident response report released

Wondering how you’d handle a data breach report if the worst happened to you? Here’s a useful example.

nakedsecurity.sophos.com

 

[Abu Hussam]

LastPass data breached for second time this year - Information Age

LastPass has been breached for the second time this year, using credentials obtained during the previous incident, said its chief executive

www.information-age.com

 

[R2D2]

I'm a recent Lastpass exit case..now BW is my main PM with 1Password as a backup.

 

[Ink]

I'm a recent Lastpass exit case..now BW is my main PM with 1Password as a backup.

Would it not make more sense to use 1Password as primary, as it's subscription-based, and keep Bitwarden secondary.

1Password is by default more secure, as you need a unique key, along with your username+password to access the vault.

 

[entropism]

1Password is a disaster right now. The latest version barely works on Android, and even iOS users are jumping ship like nuts. Add to that their ridiculously high pricing structure, and there's simply no reason to use them anymore.

 

[ng4ever]

Where is an option for Enpass ?

 

[entropism]

Where is an option for Enpass ?

Oh, you're the guy who uses Enpass?

 

[ng4ever]

Oh, you're the guy who uses Enpass?

Is that bad ? lol