this post was submitted on 18 Jul 2023
181 points (97.9% liked)

Technology

59402 readers
2669 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Just wondered what people are using for their password management.

I’m currently using 1Password on a family subscription for both password management and 2FA (and then Authy for the 1Password 2FA). But I’m seeing a lot more posters — particularly since joining Lemmy — championing BitWarden (either cloud or self hosted) and Raivo OTP as a cheaper, almost-as-functional alternative.

So is it worth the switch? Will I lose out on anything by doing so?

I’m currently running BitWarden with a free account to see if I can live with it. But I must admit, 1Password is a staple app for me and one that I would say is priceless to my workflow and setup.

Just interested in your thoughts and trying to stimulate conversation!

(page 2) 50 comments
sorted by: hot top controversial new old
[–] cypherix93@lemmy.world 4 points 1 year ago

I was a big time LastPass user. Switched to Bitwarden when LastPass was bought by LogMeIn... what was that, 6 years ago?

It's free, it gives me everything I need, and I can even self-host it, giving me ultimate peace of mind.

Bonus: Bitwarden has a LastPass migration tool (I'm sure they have it for others) - made the move a matter of minutes.

Full disclosure: I've never used 1Password so can't really comment on it compared with others, but I'm currently running a selfhosted Bitwarden re-implementation (vaultwarden) and am generally pretty happy with it. I've only ever used LastPass as a password manager before (aside from a seeding algo back in the day), and while I really don't like their business practices or security history, their extension has or at least had a bit better consistency on Firefox than Bitwarden does, at least with regards to detecting username/password fields and detecting when a new credential is being created and asking it to be saved automatically. That being said, it's something that I can live with considering it's free software. As far as I'm aware, in terms of features all the big players in that space are pretty evenly matched, though I do remember some advanced feature that 1Password offered over others; maybe related to privilege access management in enterprise.

[–] Gabadabs@kbin.social 4 points 1 year ago (1 children)

I don't know much about 1Password, but I've been using BitWarden for years.
The autofill feature is nice, but sometimes you'll have to unlock the vault for it to continue to work, which can be a pain at times. It's pretty flexible, you can save personal information and cards on top of logins, and it has a password generator built in that I pretty much always use now for making my passwords. It's not fancy, but it's really functional, and works on all my devices without issues.

[–] schmurnan@lemmy.world 3 points 1 year ago

Yeah all similar to 1Password. I think that times out after a week or so, so you have to put your master password in. I like the Apple Watch integration with my Mac so I just double click the Digital Crown most of the time rather than even using Touch ID.

Sounds like the only thing I’m losing in switching from 1Password to Bitwarden is the ever-so-slightly more polished apps. But functionality-wise… nothing.

[–] MajorHavoc@lemmy.world 4 points 1 year ago

A password journal of course.

...or maybe I just like making y'all cringe a little.

[–] davetansley@lemmy.world 3 points 1 year ago (1 children)

Haven't used Bitwarden, but I've heard good things about it.

Until recently I was using Google Password manager and a half-hearted attempt a "system" for unique passwords. Luckily, I wised up and decided to raise my game... after a bit of research, I went with 1Password, and I've been very happy with it.

The integrations are okay, though not perfect. But the thing that has been most useful for me is the Watchtower stuff that basically gamified my security and forced me to change repeated or insecure passwords. I feel in much better shape now, and feel very confident in 1Password's encryption model. So, for me at least, it has been worth the money.

[–] schmurnan@lemmy.world 3 points 1 year ago (1 children)

Boo, Google! Haha j/k, each to their own 🙂

1Password has been one of my go-to apps for years now, so I’m clearly happy to pay the $80 a year or whatever it is (I’m a Brit but I think it’s around that price). But it’s very good to know that I can get the exact same (more or less) functionality in Bitwarden for $10 a year. And I have the option to self host on my Docker stack on my NAS should the mood take me.

I absolutely wholeheartedly agree about Watchtower — that’s a nice little piece of functionality. I saw Bitwarden can check if your passwords have been involved in a data breach, but nowhere near as many little add-ins as Watchtower. It feels like a credit score for your passwords 🙂

load more comments (1 replies)
[–] Tyfud@lemmy.one 3 points 1 year ago

I'm on the 1password train. I like it, they're professional, and their extension works much better than lastpass

[–] art@lemmy.world 3 points 1 year ago (1 children)

My work uses 1 Password. It feels relatively safe. They claim that if you don't have your master key they can't restore your passwords. Can not ensure the validity of that claim.

Personally I use Bitwarden and KeePass for my passwords. They are both open source and audited by 3rd parties. I trust them.

load more comments (1 replies)
[–] UnknownQuantity@lemmy.world 3 points 1 year ago

I'm using bitwarden. The free version has everything I need, but I pay for the premium because I want them to continue.

[–] Squirrel@thelemmy.club 3 points 1 year ago* (last edited 1 year ago)

I have no experience with BitWarden, but I do like 1Password. I previously used LastPass, and 1Password has much better browser/device integration, in my experience. I've been happy with it and intend to keep my family subscription.

[–] yA3xAKQMbq@lemm.ee 3 points 1 year ago* (last edited 1 year ago) (2 children)

Edit: apparently that’s no longer true and I just didn’t notice: https://support.1password.com/autofill-behavior/

~I use 1Password, and I’m generally satisfied, but what really really sucks is that it only works with domains, but neither subdomains nor ports.~

~So if you’re running your own server that gets annoying extremely fast, because you will have a very long list of suggestions to wade through.~

With Bitwarden (IIRC) one issue is that you cannot save a password when you’re offline, and – again IIRC – it doesn’t even drop a warning about that.

[–] schmurnan@lemmy.world 2 points 1 year ago (2 children)

Also good to know, thanks.

I feel your pain with the subdomains - I have a load of Docker containers that I access via reverse proxy and I get a list of every container’s credentials and have to scroll through and select them. Not the end of the world, but annoying for sure.

[–] yA3xAKQMbq@lemm.ee 2 points 1 year ago* (last edited 1 year ago)

Yeah, I have a vaultwarden docker just to store the PW for all the other services there… 😂

load more comments (1 replies)
[–] hedders@fedia.io 3 points 1 year ago

I've been using (and paying for) Bitwarden for a few years now. There are slicker solutions but it does the job for me and I don't really see any need to change.

[–] electric_nan@lemmy.ml 2 points 1 year ago* (last edited 1 year ago)

KeepassXC, synced with Nextcloud to all my devices. Browser plugins and android app. Diceware master pass phrase.

[–] diamonddozen@kbin.social 2 points 1 year ago (1 children)

Are you only interested in hosted applications? I've been using Keepass for years without any complaints. Though now that I'm seeing this thread filled with selfhosted vaultwarden comments, I might look into that though.

[–] schmurnan@lemmy.world 2 points 1 year ago

No I’m pretty open to either hosted or self hosted. I use KeePass in work (because it’s mandated) and I’d probably describe it as “OK”. The plug-ins are a little fiddly to get working, and my work actually block most of them which drastically reduces the functionality. I have zero browser integration, for example, so I have to copy/paste passwords in each time. Which isn’t the end of the world, but annoying.

Also not sure if there’s a macOS version of KeePass or something I could also use across iOS, watchOS and iPadOS as well.

[–] verysoft@kbin.social 2 points 1 year ago (1 children)

There's no point switching if you are using either of these two, so I'd just keep 1Password.

[–] schmurnan@lemmy.world 2 points 1 year ago (1 children)

I guess one is considerably cheaper than the other, so there’s that.

But yeah, other than that, no real reason to switch if there is parity on the functionality.

[–] verysoft@kbin.social 3 points 1 year ago

Barely for a family subscription that they are using, I think 1Password is worth the extra for the polish it has and their support. I suppose if you had a family of 6 then Bitwarden gets a lot more value back as I believe 1Password's is only 5 members included and $1 for extra beyond that.

[–] lackthought@lemmy.sdf.org 2 points 1 year ago (2 children)

I just use firefox to remember my passwords

is there an advantage to switching to some third party app like bitwarden?

I feel like firefox is good enough and very easy to view/manage my passwords, but open to arguments why others are worth switching to

[–] JustEnoughDucks@feddit.nl 2 points 1 year ago (1 children)

How does it store them though? I thought (this was maybe long ago) they they were stored plaintext on your machine instead of in an encrypted vault like password managers.

load more comments (1 replies)
load more comments (1 replies)
[–] kratoz29@lemmy.world 2 points 1 year ago

I moved from 1Password to Bitwarden because I was struggling to pirate the former.

NGL, I think it is kinda stupid to use a hacked software as important as a password manager, same as with an antivirus, so for me the way to go has been to selfhost Bitwarden, haven't looked back since that.

load more comments
view more: ‹ prev next ›