342
My holy trinity of trust (lemmy.ml)
submitted 3 years ago by to c/memes@lemmy.ml
98 comments fedilink hide all child comments
 

The inner circle so to speak

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 3 years ago (1 child)

keepass > bitwarden

vpn providers should be reviewed regularly

email is inherintly insecure/non-private, self hosted is best

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 9 points 3 years ago (3 children)

    why do you prefer keepass to bitwarden? has it better privacy or is it just a personal preference because you like the UI more for example?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 20 points 3 years ago* (last edited 3 years ago) (4 children)

    keepass is a different paradigm. it uses a locally encrypted file. many frontends for it (use keepassxc and keepassdx). dont have to rely on some 3rd party, even if they say they have e2ee. theres no better privacy (and security) for an app than not using it with the internet. im not too concerned about ui for pw manager personally, the less time i spend w it unlocked the better. only (slight) problem for me: multi device usage (i just copy the file onto my phone occasionally). general rule of thumb: if it can be selfhosted, it is best to.

    i think bitwarden is the best one of its type, it comes down to your needs and threat model

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 5 points 3 years ago* (2 children)

    I really like the cross device sync, even tho it's a security risk of course. also, I don't know anything about self hosting (might get into it when I got the time), so bitwarden might be the best pw manager for my requirements rn.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 3 years ago (1 child)

    It's possible to sync keepass using syncthing, i use it that way.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (1 child)

    Mainly cuz it doesn't store your passwords on someone else's computer.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 3 years ago (1 child)

    You can selfhost bitwarden, there's also vaultwarden, an open bitearden api implementation. You could host this on an internal-only server. But you also can sync your single password file with a lot devices and use keepass, I just find that a bit annoying. You also cannot share some passwords with your relatives easily that way.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (1 child)

    Hey it's fine if you trust them, it's a very convenient service and from what I found it's pretty secure, since there's no way to recover logins if you forget your master pass. But i personally don't like the idea of having passwords on someone else's server and I'm too stoopid to set-up my own instance on a docker container server thingy. Syncthing just works for me, got GUI and everything.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •