this post was submitted on 15 Jun 2023
58 points (100.0% liked)

Privacy Guides

17027 readers
3 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...


Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

founded 2 years ago
MODERATORS
 

I'm using KeePass currently, since I don't really want to use anything publicly hosted. But I was curious to see what other people have been using!

top 50 comments
sorted by: hot top controversial new old
[–] tmpod@lemmy.pt 25 points 2 years ago (1 children)

BitWarden has been a trusted, reliable and very useful service for me.

[–] PhatInferno@midwest.social 4 points 2 years ago (1 children)

Yes 100% worth the $ imo.... its crazy that my younger self had like 5 variations of passwords for all sites lol

[–] tmpod@lemmy.pt 3 points 2 years ago (2 children)

The free version is already really good, but I still have the $10/y premium plan because it's so cheap and they deserve it :P

load more comments (2 replies)
[–] gilbert31@lemmy.world 18 points 2 years ago

I've been using Bitwarden for a while and I have no complaints, works pretty well.

[–] Rhabuko@feddit.de 18 points 2 years ago (6 children)
[–] JurassicPork@lemmy.one 8 points 2 years ago

Bitwarden ftw!! Best $10 a year...... Looking to self host also...but would still donate the $10 a year, because its 100% worth it in my opinion

[–] followthewhiterabbit@beehaw.org 7 points 2 years ago

Another happy Bitwarden user here!

[–] Cstrrider1@beehaw.org 6 points 2 years ago

Yup bitwarden is a good option. Curious if Proton's new manager will be any good.

[–] Xander72@lemmy.one 4 points 2 years ago (1 children)

As far as I've seen, Bitwarden does exactly what I need it to and does it well

load more comments (1 replies)
[–] frozengriever@beehaw.org 3 points 2 years ago

Bitwarden for where convenience is important, which is the majority of my logins (forums, social media, memberships). In turn I also have self hosted Keepas for "key" logins (Bitwarden, online banking, Google).

[–] Jessica@lemmy.world 2 points 2 years ago (1 children)

I also pay the $10 a year or whatever to be able to store TOTP codes in Bitwarden. I love having them copied to my clipboard automatically while logging in! (Yes I know it's less secure. I don't care lol. I don't feel like getting locked out of everything because I broke my phone.)

load more comments (1 replies)
[–] teddy@lemmy.cornspace.space 14 points 2 years ago

Self hosted Vaultwarden. It's great.

[–] lemmy_lunger@lemmy.world 14 points 2 years ago

bitwarden has been great, no complaints!

[–] HybridHuman@lemmy.dbzer0.com 14 points 2 years ago (4 children)
load more comments (4 replies)
[–] Mihuy@lemmy.world 13 points 2 years ago

I've always just used Bitwarden even before I cared about privacy

[–] 03ari@lemmy.world 10 points 2 years ago

Bitwarden since its open source, easy to use and cloud sync is sooo great

[–] cloudynight88@beehaw.org 9 points 2 years ago

Firefox browser. 😬😬

[–] hemko@lemmy.world 9 points 2 years ago (1 children)

Keepassxc with databases in nextcloud for easy sync between devices

[–] hillbicks@feddit.de 4 points 2 years ago (1 children)

And keepassdx for android.

load more comments (1 replies)
[–] Vexz@feddit.de 7 points 2 years ago

I primarily use Bitwarden with a self hosted Vaultwarden server on my NAS. But since Bitwarden doesn't support an auto-type feature (not the same as auto-fill) I use KeePassXC on my desktop PC for applications too.

[–] TheButtonJustSpins@infosec.pub 7 points 2 years ago (1 children)
load more comments (1 replies)
[–] kawaii_black_mass@lemmy.one 5 points 2 years ago

Bitwarden user here. I used to use LastPass, but it's hard to beat free software that does the same thing just as well.

[–] argentcorvid@midwest.social 5 points 2 years ago

I've been using KeePass and KeePassdroid for at least 10 years now. "Sync" my dB through one drive, only because at one time we were allowed to use our personal one at work, but since they blocked personal folders in favor of corporate ones it is much less handy.

[–] LootGoblin42@lemmy.one 5 points 2 years ago

1password is the only one I trust

[–] tfkhdyt@iusearchlinux.fyi 4 points 2 years ago (2 children)
[–] Robsteranium@beehaw.org 2 points 2 years ago

Yeah pass is great. It's basically just a git repo of text files encrypted with gpg. That means if you know those other tools there's nothing extra to learn/ nothing bespoke to depend upon or maintain. I sync my secrets between laptop and phone via a Diskstation NAS without needing to install anything special.

load more comments (1 replies)
[–] pound_heap@lemm.ee 4 points 2 years ago* (last edited 2 years ago) (1 children)

My approach is a bit more complicated than of many commenters here: I use both Keepass and Bitwarden.

Bitawarden is for most of the passwords, and I use it to share some passwords with family.

Keepass is for the most sensitive stuff - online banking and emails. Also, I use it for non-web apps. Keepass DB is synced with Syncthing between desktop and mobile.

TOTP is handled by Aegis android app. I was thinking to move it to Keepass, but I really like interface of a dedicated app. And it's data automatically backed up to Nextcloud

[–] lemon@sowhois.gay 2 points 2 years ago

I also use KeePass and Aegis, and I love them both. I also considered using KeePass for TOTP but I think it makes more sense security-wise to use a separate app.

[–] glish@localghost.org 4 points 2 years ago

KeePassXC and Keepass2Android auto-synced with my Nextcloud instance. Works great cross-platform for Linux/Windows/Android.

I know what you mean, trusting a SaaS provider with my master password list always felt like a bad plan.

[–] ClumsyTomato@lemmy.sdf.org 4 points 2 years ago (1 children)

Kepass (and Keepass2Android) + Nextcloud instances to keep sync and backups

[–] ChillPill@lemmy.world 9 points 2 years ago (2 children)

KeepassXC on desktop and KeepassDX on android. Sync with Nextcloud. Its great. Smooth as silk since I stopped messing with Nextcloud.

load more comments (2 replies)
[–] JCreazy@midwest.social 3 points 2 years ago

I started using Bitwarden a few years ago and it's been excellent.

[–] RemeJuan@readit.buzz 3 points 2 years ago

Been with 1Password for a few years now, coming from LostPassword. I feel it strikes a balance with the whole being secure and being convenient.

[–] thatonedude1210@beehaw.org 3 points 2 years ago

Big fan of Bitwarden here.

[–] rikudou@lemmings.world 3 points 2 years ago (1 children)

Bitwarden, I use it everywhere. I even wrote a Bitwarden app for my Linux phone.

load more comments (1 replies)
[–] dillydogg@lemmy.one 3 points 2 years ago

KeePassXC with the db synced by syncthing

[–] sunaurus@lemm.ee 3 points 2 years ago

I'm a huge fan of 1Password. Previously used pass for years, but there are many ways in which 1Password is more convenient, especially when it comes to sharing secrets with friends/family/colleagues.

[–] Skooshjones@vlemmy.net 3 points 2 years ago* (last edited 2 years ago) (2 children)

Bitwarden. I've used a bunch of password managers, Bitwarden has been by far the best for me.

The mobile, desktop, and web app are all awesome and work great.

Self-hostable, open source, great feature set. Pricing is super reasonable for their cloud hosted features. Ui is simple, clean, makes sense, and so far I've had zero issues with syncing, saving, etc.

IMO, it's a great example of a FOSS application that looks and functions as good or better than the nicest closed source proprietary software.

load more comments (2 replies)
[–] darkfoe@lemmy.serverfail.party 3 points 2 years ago

I've been happy with Bitwarden thus far. Used Lastpass back in the day, but migrated over when the renewal prices started creeping up.

[–] thomas@lemmy.zell-mbc.com 3 points 2 years ago

KeePassXC and Nextloud to sync things between devices…

[–] whzfux@discuss.tchncs.de 2 points 2 years ago

Using bitwarden for company and private purpose in Smartphone and laptop with Browser integration since two years ans beeing really happy

[–] wasabi@feddit.de 2 points 2 years ago

Switches from KeePassXC to Nextcloud Passwords recently and I absolutely love it. Sync and Browser Plugin are much more reliable.

[–] JoeKrogan@lemmy.world 2 points 2 years ago (5 children)
load more comments (5 replies)
[–] Whooping_Seal@sh.itjust.works 2 points 2 years ago

I know a bunch of people here have mentioned Bitwarden, but I would like to mention one feature that makes it superior to all others. You can integrate it to services like SimpleLogin, AnonAddy, Firefox Relay, DDG etc. and auto-generate email aliases within the Bitwarden extension. In theory it is more secure to not do this but it is such a huge QoL feature to just hit the randomize button in the extension to create an alias for a new login. It also populates the info field on simplelogin with something along the lines of "Auto-Generated by Bitwarden for: [website]"

[–] radiumz@lemmy.one 2 points 2 years ago

Selfhosted vaultwarden instance

[–] waspentalive@lemmy.one 2 points 2 years ago* (last edited 2 years ago)

Bitwarden here. Was also a LastPass user. Switched when I retired so I did not have to worry about still keeping any old accounts from work. P.s. Also I like that I can have Bitwarden sync on my phone and my laptop.

[–] moonlit_properly@lemmy.one 2 points 2 years ago (1 children)

pass
I like the fact that it is a minimal and simple program that does one thing, and does it well. If you already use GnuPG for encryption, you will get used to it quickly.
The only downside for me is that it doesn't encrypt password names, only the content.
It also has many plugins and android/ios apps.

load more comments (1 replies)
[–] Quexotic@beehaw.org 2 points 2 years ago

Keepass2 and keepass2android combined with input stick to type my passwords wherever I need them. It's a wonderful combination. I host my password file on Google drive and other places but I keep a key file on the local device. It's not perfect and wouldn't never stop a threat from a state actor but I don't think I've got time for that kind of security anyway.

http://inputstick.com/buy/

Incidentally the input stick can function as an on the fly rubber ducky if you really want it to. It does some really really cool stuff.

load more comments
view more: next ›