Poll Password Manager Poll (2022)

[HarborFront]

JFI

I have checked for trackers on some PM’s android app

Having Zero (0) trackers goes to Sticky Password, Keeper and BW (F-Droid version)

NordPass, 1Password, Liso and Enpass etc do have some trackers

Checked using ClassyShark3xodus

ClassyShark3xodus - Scan apps for warnings | F-Droid - Free and Open Source Android App Repository

Checks apk(s) for known trackers (provided by Exodus) +other warnings and specs.

f-droid.org

 

[mkoundo]

Q: What third-party services, libraries or identifiers are used in my Bitwarden account?​

A: In the mobile apps, Firebase Cloud Messaging (often mistaken for a tracker) is used only for push notifications related to sync and performs absolutely no tracking functions. Microsoft Visual Studio App Center is used for crash reporting on a range of mobile devices. In the web vault, Stripe and PayPal scripts are used for payment processing only on payment pages.

For those who prefer to exclude all 3rd party communication, Firebase and Microsoft Visual Studio App Center are removed completely from the F-Droid build. Additionally, turning off push notifications on a self-hosted Bitwarden server will disable using the push relay server.

Security FAQs | Bitwarden Help Center

This article contains FAQs regarding Bitwarden security practices. Learn about zero knowledge encryption, Bitwarden processes, and more.

bitwarden.com

 

[HarborFront]

Security FAQs | Bitwarden Help Center

This article contains FAQs regarding Bitwarden security practices. Learn about zero knowledge encryption, Bitwarden processes, and more.

bitwarden.com

No trackers if installed from f-droid. Edited my list. Thanks

 

[Divine_Barakah]

JFI

I have checked for trackers on some PM’s android app

Having Zero (0) trackers goes to Sticky Password, BW (F-Droid version) and Keeper

NordPass and Enpass etc do have some trackers

Checked using ClassyShark3xodus

ClassyShark3xodus - Scan apps for warnings | F-Droid - Free and Open Source Android App Repository

Checks apk(s) for known trackers (provided by Exodus) +other warnings and specs.

f-droid.org

1Password and Remembear (discontinued) have no trackers. Enpass previously had no trackers, but recently they incorporated 2.

 

[HarborFront]

1Password and Remembear (discontinued) have no trackers. Enpass previously had no trackers, but recently they incorporated 2.

1Password android app has trackers

 

[Divine_Barakah]

1Password android app has trackers

Im %100 sure that their Android app had no trackers according to Exodus Privacy. It seems that they included one in their new version?

 

[HarborFront]

Im %100 sure that their Android app had no trackers according to Exodus Privacy. It seems that they included one in their new version?

Last version 7.9.4 has no trackers as tested by Exodus Privacy website
Latest version 8.9.10 has trackers as tested by ClassyShark3xodus. See above post #154

Spoiler

 

[Divine_Barakah]

Last version 7.9x has no trackers
Latezt verion 8.x has trackers

Screenshot-20230101-213351-org-ungoogled-chromium-extensions-stable hosted at ImgBB

Image Screenshot-20230101-213351-org-ungoogled-chromium-extensions-stable hosted in ImgBB

ibb.co

Screenshot-20230101-213552-com-vsrevogroup-revouninstallermobile hosted at ImgBB

Image Screenshot-20230101-213552-com-vsrevogroup-revouninstallermobile hosted in ImgBB

ibb.co

1Password is dead to me. They ruined the product.

 

[HarborFront]

For Keeper's android app

Testing latest version of Keeper v16.6.20.1077 with Exodus Privacy

Spoiler

Testing latest version of Keeper v16.6.20.1077 with ClassyShark3xodus. I supposed that Google Play Install Referrer' is not a tracker, right?

Keeper's statement on App Trackers

Keeper's Statement on App Trackers

Keeper publishes a statement on app trackers. Learn more about Keeper's security architecture and visit our security disclosure.

www.keepersecurity.com

 

[piquiteco]

The master password of @show-Zi's password manager is super strong unbreakable, see

Spoiler

マルウェアのヒント

no hacker will be able to access it even if it leaks.

 

[R2D2]

no hacker will be able to access it even if it leaks.

Actually jokes aside it's true. Because there are characters in some European, E Asian (Chinese Japanese Korean), Indian and Arabic languages that will nearly never be used by hackers. Hackers normally default to English either US or UK.

 

[piquiteco]

Actually jokes aside it's true. Because there are characters in some European, E Asian (Chinese Japanese Korean), Indian and Arabic languages that will nearly never be used by hackers. Hackers normally default to English either US or UK.

I think that the database of a PM doesn't even accept these types of characters? well I think, I never tried to use it, to know if a PM accepts with a master password. I had a friend who wrote the Windows keys in Japanese, the most ironic thing is that he was not Japanese, nor a descendant, but later I learned that he did an internship in Japan for about 3 years.

2- As for security audits, they cost considerable amounts of money, so not all products can afford doing them. And as I said before, one should not blindly trust audits. Regarding SP security, Kaspersky and Eset have incorporated SP as their password manager before

Yes, that's right, they incorporated SP into Eset Smart Security Premium in 2017 in the SP Blog they talk about it. -> ESET Password Manager.

Regarding Wifi/local sync in SP, good luck if you are using more than two devices. SP struggles in syncing data offline for more than 2 devices.

Yes, what you are saying is true, yesterday on New Year's Eve I went to sync my Laptop's SP with my phone and it failed miserably and I couldn't sync via Wifi/local sync, after several attempts, I gave up, and was disappointed.

The new version of SP now features Dark Web Monitoring. Interesting, look at the capture of it attached in Spoiler.

Spoiler: Sticky Password Dark Web Monitoring

 

[Divine_Barakah]

The new version of SP now features Dark Web Monitoring. Interesting, look at the capture of it attached in Spoiler.

Spoiler: Sticky Password Dark Web Monitoring

View attachment 271722

For those who have a lifetime licesne, the initial year of this service is going to be free. After that lifetime users will have to pay to use the service (dark web monitoring).

 

[CyberTech]

The LastPass security breach controversy continues. After an independent security analyst described statements made by LastPass as “half-truths and outright lies,” rival password management company 1Password has also weighed in …

LastPass claimed that cracking users’ master passwords would take millions of years, but 1Password says that this isn’t true for most users. Indeed, it says, it would cost just $100 to crack the master password of a typical LastPass user.

Background:​

LastPass security fail: 'Passwords could be cracked for $100'

The LastPass security breach controversy continues. After an independent security analyst described statements made by LastPass as “half-truths and outright...

9to5mac.com

 

[HarborFront]

LastPass security fail: 'Passwords could be cracked for $100'

The LastPass security breach controversy continues. After an independent security analyst described statements made by LastPass as “half-truths and outright...

9to5mac.com

After reading the article, it seems to say that master passwords are useless and can be cracked for a mere $100, right?

 

[Divine_Barakah]

LastPass security fail: 'Passwords could be cracked for $100'

The LastPass security breach controversy continues. After an independent security analyst described statements made by LastPass as “half-truths and outright...

9to5mac.com

I personally hate Lastpass, but I do also hate when rivals take advantage of the downfalls of competitors.

While 1Password seems to be more secure on paper, they store the data on cloud which makes it as vulnerable as any other cloud-based password manager.

 

[HarborFront]

For those who have a lifetime licesne, the initial year of this service is going to be free. After that lifetime users will have to pay to use the service (dark web monitoring).

Where do you get the info on their website? Thanks

I personally hate Lastpass, but I do also hate when rivals take advantage of the downfalls of competitors.

While 1Password seems to be more secure on paper, they store the data on cloud which makes it as vulnerable as any other cloud-based password manager.

Is BW local storage of any use if you are not self-hosting a server...............which requires extra knowledge to do the self-hosting?

Quote

Most functions of Bitwarden are accessible in offline mode, however you won't be able to make edits to or add vault items, attachments, or sends or import new vault items.

Unquote

Using Bitwarden Offline | Bitwarden Help Center

This article explains what it's like to use Bitwarden offline and how you can install desktop apps in offline environments.

bitwarden.com

Local vault only without cloud access?

I could not find an answer to my question, hence I’m posting here: is it possible to run bitwarden in a local-only installation with no cloud involved? Also without any internet involvement? Seems like most password managers nowadays use cloud-based storage.

community.bitwarden.com

So, can I say PMs like SP and Enpass which uses WiFi sync will have local storage............the exception being BW which do not support WiFi sync but has local storage?

 

[Divine_Barakah]

Is BW local storage of any use if you are not self-hosting a server...............which requires extra knowledge to do the self-hosting?

Quote

Most functions of Bitwarden are accessible in offline mode, however you won't be able to make edits to or add vault items, attachments, or sends or import new vault items.

Unquote

Using Bitwarden Offline | Bitwarden Help Center

This article explains what it's like to use Bitwarden offline and how you can install desktop apps in offline environments.

bitwarden.com

Local vault only without cloud access?

I could not find an answer to my question, hence I’m posting here: is it possible to run bitwarden in a local-only installation with no cloud involved? Also without any internet involvement? Seems like most password managers nowadays use cloud-based storage.

community.bitwarden.com

So, can I say PMs like SP, Enpass, 1Password which uses WiFi sync will have local storage............the exception being BW which do not support WiFi sync but has local storage?

To my knowledge, the local storage of BW is to provide offline access to your vault, but in a read-only mode.

1Password offers offline access with the ability to make changes to your vault, but unfortunately there is no way to sync your data via wifi only via their servers.

 

[HarborFront]

To my knowledge, the local storage of BW is to provide offline access to your vault, but in a read-only mode.

1Password offers offline access with the ability to make changes to your vault, but unfortunately there is no way to sync your data via wifi only via their servers.

Sorry, I deleted 1Password because it no longer offers local storage, only cloud storage

1Password has confused everyone with shift to cloud-based subscriptions

1Password is under fire from security experts as the app is moving toward subscription-based cloud storage and away from the local machine storage

www.cyberscoop.com

 

[show-Zi]

The master password of @show-Zi's password manager is super strong unbreakable, see

Spoiler

マルウェアのヒント

no hacker will be able to access it even if it leaks.

It took me a while to understand the content of the post because I was watching it in a translated state