84
Password manager woes. How have you solved syncing on Android? (lemmy.world)
submitted 7 months ago by to c/selfhosted@lemmy.world
84 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 7 months ago (8 children)

On Android I use KeePassDx Syncthing-Fork. The handover was rough but the maintainer of the Play version joined researchxxl's team. Many on the Syncthing forum seem to have accepted research which is good enough for me. Also, KeePass's database in encrypted so no danger there.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 1 point 7 months ago (7 children)

    Do you store TOTP in a seperate KeePass?

    For me swappog between two Keepass DBs is annoying. I can't find anything that will sync my 2FAs.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 5 points 7 months ago (5 children)

    I don't. Kinda seems silly to me.

    To access a keepass file you already need 2 factors: the master password and access to the file.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 7 months ago (4 children)

    Its not really 2 factors if it's stored in the same DB though.

    I came from Bitwarden where the community recommendation was to not store passwords and 2FA together in the cloud. If a beach orccurs and you lose both then there wasn't a point in having the 2FA.

    Less of a risk with a local solution but still not sure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 7 months ago

    Yes, it is two factor, it's just that there is no additional factors required to get the TOTP.

    If you don't use a password manager then you just remember your passwords. In this case the second factor is having access to a device that has your TOTP generator.

    If you use keepass then you remember the password for your password db, and to access your passwords or TOTP you need access to a device with your keepass db.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 7 months ago (2 children)

    If u have 2fa in the same database u can login on devices you don't trust. E.g. a coworkers computer/public computer in library.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •