Advice Request What are some secure password manager options for Windows, Android and IOS?

Please provide comments and solutions that are helpful to the author of this topic.

Lad With a Dad

Level 1
Thread author
Oct 8, 2023
13
I've recently run out of my paid password provider subscription and was curious as to what some of you would recommend going into 2025. I've seen a lot of posts about Bitwarden, Proton, KeePass and 1password and was wondering if those are still the go-to options or if Nordpass etc are in the running. Ideally, just need something that's not expensive that can run on multiple devices with good security and privacy without a messy interface. I was curious about proton as I've been using their VPN, but wasn't sure as it's only been around since mid 2023. I feel like anything on YouTube (mainly Nord) is heavily pushed because of affiliate links and coupons etc that make them money and cloud their actual preferences.
 

Bot

AI-powered Bot
Apr 21, 2016
4,780
Bitwarden, Proton, KeePass, and 1Password are still highly recommended due to their strong security, multi-platform support, and user-friendly interfaces. Proton has been gaining a good reputation, especially if you're already using their VPN. NordPass is also a solid option, but do your own research to avoid potential bias. Always prioritize security, privacy, and usability over cost.
 

Game Of Thrones

Level 7
Verified
Well-known
Jun 5, 2014
315
I've recently run out of my paid password provider subscription and was curious as to what some of you would recommend going into 2025. I've seen a lot of posts about Bitwarden, Proton, KeePass and 1password and was wondering if those are still the go-to options or if Nordpass etc are in the running. Ideally, just need something that's not expensive that can run on multiple devices with good security and privacy without a messy interface. I was curious about proton as I've been using their VPN, but wasn't sure as it's only been around since mid 2023. I feel like anything on YouTube (mainly Nord) is heavily pushed because of affiliate links and coupons etc that make them money and cloud their actual preferences.
1password is the king others are just trying to catch up with them. i may create a post about the security and features of 1password because it seems a lot of people here do not know how a good password manager should be, in a professional way.
 

Jonny Quest

Level 23
Verified
Top Poster
Well-known
Mar 2, 2023
1,247
Having used 1Password for a year, I can say if I ever went back to a paid password manager, that would be it. Otherwise, Proton Pass free version which I've been using for about 4 months has been very nice to work with and use, on Windows and Android.

It depends on if you're using it for multiple family accounts, Bitwarden paid version supports that. I've never looked into Proton or 1Password paid versions in that regard (I'm just a single user). Regarding those three, they are all secure, encrypted on their servers and I believe on our devices until we unlock the vault, which is why especially on our phones it's good to have a short unlock period for safety's sake.
 
Last edited:

Jonny Quest

Level 23
Verified
Top Poster
Well-known
Mar 2, 2023
1,247
1password is the king others are just trying to catch up with them. i may create a post about the security and features of 1password because it seems a lot of people here do not know how a good password manager should be, in a professional way.

Maybe you could help me to understand this, please, but when we use 1Password we're give a long security key to use when we install it for the first time on a new device. But that doesn't change anything on their server end does it, it's not like if they got hacked they (hacker) would also need that key, right, that's just for the security of a new install? TIA :)
 
Last edited:
  • Like
Reactions: rashmi

Game Of Thrones

Level 7
Verified
Well-known
Jun 5, 2014
315
Maybe you could help me to understand this, please, but when we use 1Password we're give a long security key to use when we install it for the first time on a new device. But that doesn't change anything on their server end does it, it's not like if they got hacked they (hacker) would also need that key, right, that's just for the security of a new install? TIA :)
it's actually makes the vault inaccessible for the hackers! this is one the key security measures that other password managers lack. i highly recommend everyone to read their security whitepaper to understand how 1password works. so yes the hacker needs this 128bit! key too! to open your vault which theoretically is impossible to brute force

 

Jonny Quest

Level 23
Verified
Top Poster
Well-known
Mar 2, 2023
1,247
it's actually makes the vault inaccessible for the hackers! this is one the key security measures that other password managers lack. i highly recommend everyone to read their security whitepaper to understand how 1password works. so yes the hacker needs this 128bit! key too! to open your vault which theoretically is impossible to brute force

Thank you :)
 

bazang

Level 12
Jul 3, 2024
551
I've recently run out of my paid password provider subscription and was curious as to what some of you would recommend going into 2025. I've seen a lot of posts about Bitwarden, Proton, KeePass and 1password and was wondering if those are still the go-to options or if Nordpass etc are in the running. Ideally, just need something that's not expensive that can run on multiple devices with good security and privacy without a messy interface. I was curious about proton as I've been using their VPN, but wasn't sure as it's only been around since mid 2023. I feel like anything on YouTube (mainly Nord) is heavily pushed because of affiliate links and coupons etc that make them money and cloud their actual preferences.
KeePassXC which can be installed on Windows. Then you save the KeePassXC database in your OneDrive Vault (with Windows Hello authentication required to decrypt the Vault to access the Vault contents - which is limited to (2) objects for OneDrive free). You can also set the KeePassXC database itself to require both a password and Windows Hello authentication to decrypt and then access the database.

$0 cost

1. Set KeePassXC to launch at Windows startup
2. Open Onedrive and then open your Vault
3. Enter your Windows Hello authentication to open the Vault
4. Open the KeePassXC password database
5. Enter the password
6. Enter your Windows Hello authentication to open the database
7. Use the KeePassXC browser extension

If you just want one or two step password manager login then this option is not for you. It is convenient, easy to use, and secure, but many here will argue that it is not convenient because of too many steps required. Whatever. It is far more secure than all other options except Keeper Security Government (which you will not be eligible for).

Your best bet is Bitwarden free if you want simple and easy.
 
  • Like
Reactions: rashmi

oldschool

Level 85
Verified
Top Poster
Well-known
Mar 29, 2018
7,899
I should just pin this somewhere, I post it so often. From Tavis Ormandy, a vulnerability researcher with Google Project Zero:
If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions. I use Chrome, but the other major browsers like Edge or Firefox are fine too. They can isolate their trusted UI from websites, they don’t break the sandbox security model, they have world-class security teams, and they couldn’t be easier to use. No doubt there will be many people reading this who don’t like this advice. All I can say is I’ve heard all the arguments, and stand by my conclusions.
Password Managers
 
Mar 4, 2022
53
I use Bitwarden, and I like it a lot. The free plan is great, I pay for premium because I like the built-in authenticator. The best value option, IMO $10 per year for premium single user. Plus, I like the option that you can select where you want to have your data stored when you make an account, EU or US. (I chose EU)
 
  • Like
Reactions: rashmi

Morro

Level 19
Verified
Top Poster
Well-known
Jul 8, 2012
945
I should just pin this somewhere, I post it so often. From Tavis Ormandy, a vulnerability researcher with Google Project Zero:

Password Managers

That was an interesting read, I am almost convinced to start transferring from Bitwarden to Brave's own password manager on my PC. Except that I will have to keep my Bitwarden account, because I do use it on my Smartphone as well.
 

BigWrench

Level 20
Verified
Top Poster
Well-known
Apr 13, 2014
965
NordPass and ProtonPass on IOS
Bitwarden on windows PC. ✌️

(Have used Password Boss on IOS, but cannot vouch for the security)
 

bazang

Level 12
Jul 3, 2024
551
The human is just so irrational. They are like sheep. All placing their most valuable account credentials in the care of someone else, whose resources they have zero control over. They turn over the safeguarding of credentials of everything from bank account infos to crypto wallets to secure notes such as national ID numbers, and even more sensitive infos such as recovery keys.

The best option is to keep all valuable data on one's local systems.

One day, it will happen. One of the highest profile password managers - the ones that say their security is so great - will be hacked just like LastPass. I am betting on Bitwarden being uber-smashed as it is the most targeted after LastPass due to its popularity.
 

oldschool

Level 85
Verified
Top Poster
Well-known
Mar 29, 2018
7,899
One day, it will happen. One of the highest profile password managers - the ones that say their security is so great - will be hacked just like LastPass.
Indeed, along with their extensions, which provide another portal for malicious actors.

The little black book looks like modern technology now, if it didn't before. Word.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top