Advice Request Password Manager Poll

[Back3]

Keepass and Bitwarden. Keepass is my bank where I keep a backup of all my passwords. I use Bitwarden as an extension in Chrome to connect to many websites (desktop and Chromebook) and the desktop app as a vault for things I need on my phone and tablet. It's easier to work on a desktop app than to work from an Iphone app.
For many years I used Enpass instead of Bitwarden but found the desktop app buggy: after a Macrium restore, sometimes the app refused to go to the latest backup and restore it.

 

[VittorM]

bitwarden forever

 

[entropism]

BitWarden or 1Password, depending on how you feel about the price and using opensource software or not.

It's universal (iOS, Android, MacOS, Windows, etc), it doesn't restrict you to using a particular piece of software like an AV or Browser, and most importantly, it's not LastPass.

 

[Thales]

BitWarden or 1Password, depending on how you feel about the price and using opensource software or not.

It's universal (iOS, Android, MacOS, Windows, etc), it doesn't restrict you to using a particular piece of software like an AV or Browser, and most importantly, it's not LastPass.

One should know opensource doesn't mean secure.

 

[Abu Hussam]

One should know Opensource doesn't mean secure.

Hallo Thales, I am interested to know what do you actually mean and why

 

[entropism]

One should know opensource doesn't mean secure.

Of course. But Bitwarden has been independently audited, and some people care about using open sourced software. Which is why I mentioned it. Not sure why you stated it like THAT, but it is what it is.

 

[Nevi]

I keep Lastpass. It has served me well, and I'm satisfied with it.

 

[AG3S]

Iam personally using LastPass premium for familis. We paid 40--50 Euros and me and other 5 of my friends are using it. I am fine(ish) with Lastpass however, if I would like to choose now I will go with Bitwarden. It is open source and their pricing is better.

It is also great when you go with the free version and unlike LastPass free which IS NOT open source and also restricts the users to access on several devices such as two phones and such.

I personally would vote against using the same app from your antivirus brand. I will never put all of my eggs in the same basket.

And finally, use an UNIQUE email address for your password manager which you have not used any where else(and will not use).

 

[Thales]

Hallo Thales, I am interested to know what do you actually mean and why

Hello

Check these for example.

Open source software security vulnerabilities exist for over four years before detection

GitHub research suggests there is a need to reduce the time between bug detection and fixes.

www.zdnet.com

Nearly 1,000 Vulnerabilities Found in Popular Open Source Projects in 2019

Nearly 1,000 vulnerabilities were found in popular open source projects in 2019, more than doubled compared to the previous year, but only 15 were weaponized

www.securityweek.com

 

[Thales]

Of course. But Bitwarden has been independently audited, and some people care about using open sourced software. Which is why I mentioned it. Not sure why you stated it like THAT, but it is what it is.

Audited when? and have they changed the code since?
If yes, the previous audit means nothing anymore. Don't get me wrong I'm not against bitwarden. I paid for it for 2 years.
I would use it again anytime and also voted for Bitwarden

 

[Arequire]

Audited when?

Was last audited in July/August 2020, and previously in 2018.

 

[AYIZEB]

I use nordpass the free plan, it is for one user but I love the simplicity and how well it works.

 

[AG3S]

Hello

Check these for example.

Open source software security vulnerabilities exist for over four years before detection

GitHub research suggests there is a need to reduce the time between bug detection and fixes.

www.zdnet.com

Nearly 1,000 Vulnerabilities Found in Popular Open Source Projects in 2019

Nearly 1,000 vulnerabilities were found in popular open source projects in 2019, more than doubled compared to the previous year, but only 15 were weaponized

www.securityweek.com

I completely disagree. What you mentioned completely depends on how active the developers are.

For a peoject like Bitwarden which has a very active developement and a good amount of community contributions, open-source is definately a huge plus.

For the small projects with a very slow developement, YES! you are completely correct.

For the closed source software, look at the SolarWinds and the whole mess that companies like Microsoft are still dealing with this mess. God knows how many bugs are identified which Microsoft has not fixed yet. Windows was an open-source project, th community contributions would had helped a lot in solving the bugs.

In my opinion we should not put our trust in the name "open-source", we should look for and trust reputable and actively developed open source projects.

 

[Thales]

I completely disagree. What you mentioned completely depends on how active the developers are.

For a peoject like Bitwarden which has a very active developement and a good amount of community contributions, open-source is definately a huge plus.

For the small projects with a very slow developement, YES! you are completely correct.

For the closed source software, look at the SolarWinds and the whole mess that companies like Microsoft are still dealing with this mess. God knows how many bugs are identified which Microsoft has not fixed yet. Windows was an open-source project, th community contributions would had helped a lot in solving the bugs.

In my opinion we should not put our trust in the name "open-source", we should look for and trust reputable and actively developed open source projects.

I should have said in general opensource doesn't automatically mean secure.

 

[AG3S]

I should have said in general opensource doesn't automatically mean secure.

Then I agree with you 200%

Open-source should not be our main reason for selecting a service or a software. I agree that LastPass has been a really good service and it is not open-source. However, When I compare it with BitWarden which is a similar service and also is an actively developed open-source software, then I would prefer to go with BW.

All in all.... we shold also consider the fact that privacy is not security and vice versa. Most of the available services including F-Secure, Kaspersky, LastPass and ... are NOT open source software, but they are secure and no negative report from these services has been reported yet. However, if both privacy and security matter to you then Bitwarden would be the best option.

KeePass is also a great option but it is not as user-friendly as other options and for the browser integrations you should rely on third-party plugins which I hate. This is thge main reason which I am not using KeePass. Also the sharing is not as reliable as LastPass or BitWarden.

 

[ForgottenSeer 85179]

and for the browser integrations you should rely on third-party plugins which I hate

You don't need a browser extension.
Just press keepass keyboard buttons for auto complete and done
Of course keepass need to be opened first.

 

[Antig]

I've seen many use Keepass like I do,cannot understand why is not mentioned as it was one of the first ever programs.
During many years I've tried also Roboform Free and paid,LastPass,Kaspersky and a few others but I feel more secure with
something that resides in my disk or in a key ,other than in a cloud.
Keepass never let me down,although graphically not the best.

I use browser password managers for those not crucial sites i use everyday to save time.

 

[amirr]

The Best Password Managers to Secure Your Digital Life

Keep your logins locked down with our favorite password management apps for PC, Mac, Android, iPhone, and web browsers.

www.wired.com

The article is new and my question is Where is LastPass now?

 

[amirr]

BitWarden or 1Password, depending on how you feel about the price and using opensource software or not.

It's universal (iOS, Android, MacOS, Windows, etc), it doesn't restrict you to using a particular piece of software like an AV or Browser, and most importantly, it's not LastPass.

What's wrong with LastPass in your idea?

 

[Tutman]

Anyone tried Avira Password Manager? Password Generator - manage your passwords easily | Avira

Seems to have no limitations for free use and does multi device syncing free.