▲ 956 ▼ Bitwarden's new CEO has a Private Equity background, removed 'Inclusion' and 'Always Free' from their website -- because of course he did (www.fastcompany.com) submitted 5 months ago by german@pawb.social to c/selfhosted@lemmy.world 213 comments fedilink hide all child comments In the latest episode of "they will always sell you out" - they sold you out! Who would've thought. Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can't exist without "leeching" off of Bitwarden.
[–] RonnyZittledong@lemmy.world 253 points 5 months ago (85 children) Jesus, I'm tired of switching password managers. permalink fedilink source hideshow 85 child comments replies: [–] MangoPenguin@lemmy.blahaj.zone 80 points 5 months ago (30 children) KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there) I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor. permalink fedilink source parent hideshow 30 child comments replies: [–] german@pawb.social [S] 16 points 5 months ago (6 children) Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups. Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW. permalink fedilink source parent hideshow 6 child comments replies: [–] eli@lemmy.world 8 points 5 months ago (2 children) I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time. Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program. I'm curious what is causing sync issues to make it "common", I use my db every day. permalink fedilink source parent hideshow 2 child comments replies: [–] german@pawb.social [S] 3 points 5 months ago* (1 child) Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever. With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer. It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] MangoPenguin@lemmy.blahaj.zone 4 points 5 months ago I switched over to keepass yesterday, and surprisingly the import from BW was perfect (as far as I can tell), even passkeys came over just fine. permalink fedilink source parent load more comments (2 replies) [–] Resonosity@lemmy.dbzer0.com 13 points 5 months ago (1 child) My first password manager was KeePassXC. Hooked it up with Syncthing, and I've never had issues aside from the occasion database duplicate. permalink fedilink source parent hideshow 1 child comment replies: [–] Flagstaff@programming.dev 4 points 5 months ago Right, and it has a neat merge-database feature anyway, so no excuses for those holding back! permalink fedilink source parent [–] electric_nan@lemmy.ml 19 points 5 months ago (8 children) Sync however you want. Syncthing, Nextcloud, Dropbox, Gdrive etc. permalink fedilink source parent hideshow 8 child comments replies: [–] Flagstaff@programming.dev 15 points 5 months ago (7 children) Syncthing is the way to leave Google Drive, etc. permalink fedilink source parent hideshow 7 child comments replies: [–] electric_nan@lemmy.ml 10 points 5 months ago (3 children) I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.). permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent load more comments (2 replies) [–] fatalicus@lemmy.world 5 points 5 months ago (2 children) Is there a proper syncthing android client now, after the official android client was discontinued? permalink fedilink source parent hideshow 2 child comments replies: [–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent [–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent [–] tremble5218@programming.dev 4 points 5 months ago Rclone with any cloud provider is another great option that's seldom mentioned. I posted my setup as a comment on another post. You may find it here - https://programming.dev/comment/23849767 permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] MangoPenguin@lemmy.blahaj.zone 2 points 5 months ago (5 children) KeeAnywhere That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list. permalink fedilink source parent hideshow 5 child comments load more comments (5 replies) [–] elaina@lemmy.zip 2 points 5 months ago Yeah the performance is what made me install the desktop app, but then it's 1gb in size permalink fedilink source parent load more comments (4 replies) [–] slate@sh.itjust.works 31 points 5 months ago (42 children) KeePass isn't going anywhere. They're also dragging their feet on passkey support, so you might go with KeepassXC. permalink fedilink source parent hideshow 42 child comments replies: [–] eightys3v3n@lemmy.ca 10 points 5 months ago (19 children) They also don't effectively allow collaboration though, which is my cheif reason for using a cloud hosted password manager. permalink fedilink source parent hideshow 19 child comments replies: [–] Flagstaff@programming.dev 5 points 5 months ago (9 children) What is "collaboration" in this context? permalink fedilink source parent hideshow 9 child comments replies: [–] Viceversa@lemmy.world 5 points 5 months ago (1 child) Parallel creating, reading, updating, deleting password entries by multiple users. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 6 points 5 months ago (6 children) Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply) load more comments (1 reply) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 4 points 5 months ago (2 children) Valid. But it's also valid that it now doesn't work for me or anyone who also helps manage other people's lives or works on a team ¯_(ツ)_/¯ permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago (3 children) And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this. permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply) load more comments (2 replies) [–] zeitverschreib@freundica.de 19 points 5 months ago (8 children) @slateWasn't there some commotion a few weeks about KeepassXC and vibe coding?@RonnyZittledong permalink fedilink source parent hideshow 8 child comments replies: [–] Dumhuvud@programming.dev 33 points 5 months ago* (last edited 5 months ago) (6 children) Yeah, there was. It was forked because of that, actually: https://codeberg.org/ChiPass permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent [–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent [–] Viceversa@lemmy.world 2 points 5 months ago (2 children) 404 permalink fedilink source parent hideshow 2 child comments replies: [–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent load more comments (1 reply) [–] blackbrook@mander.xyz 9 points 5 months ago Their AI policy looks very reasonable, and they certainly aren't vibe coding. Everything is rigorously reviewed and tested by a handful of experienced, competent humans. permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] 4am@lemmy.zip 16 points 5 months ago (11 children) Two articles behind a paywall, one that won’t load, and another article that says the big problem with passkeys is…people are unfamiliar with them. If anyone tells you that Passkeys are bad, they’re a liar. Way more safe than passwords, full stop. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. permalink fedilink source parent hideshow 11 child comments replies: [–] Flagstaff@programming.dev 6 points 5 months ago (6 children) Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. The problem is that this is where it's eventually going to lead to. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) load more comments (2 replies) [–] qqq@lemmy.world 3 points 5 months ago (3 children) There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want. Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions. Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche. permalink fedilink source parent hideshow 3 child comments replies: [–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent load more comments (2 replies) load more comments (1 reply) [–] Speculater@lemmy.world 6 points 5 months ago (6 children) I just got Bit warden this year! Gah. Where are we jumping? permalink fedilink source parent hideshow 6 child comments replies: [–] testaccount789@sh.itjust.works 17 points 5 months ago Full circle to sticky notes on monitor. permalink fedilink source parent [–] roofuskit@lemmy.world 5 points 5 months ago (3 children) Vaultwarden permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] roofuskit@lemmy.world 4 points 5 months ago (1 child) Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply) load more comments (1 reply) [–] tordenflesk@lemmy.world 6 points 5 months ago (2 children) Took me like 5 minutes to move back to KeepassXC. permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] IncogCyberSpaceUser@piefed.social 2 points 5 months ago Keepassdx supports creating aliases via addy.io I think permalink fedilink source parent load more comments (1 reply) [–] bordam@feddit.it 2 points 5 months ago Password Store is the answer, if you don’t need passkey support. You can be sure it can’t be sold. It’s the golden middle: not self hosted, but not owned by anyone. permalink fedilink source parent
[–] MangoPenguin@lemmy.blahaj.zone 80 points 5 months ago (30 children) KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there) I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor. permalink fedilink source parent hideshow 30 child comments replies: [–] german@pawb.social [S] 16 points 5 months ago (6 children) Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups. Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW. permalink fedilink source parent hideshow 6 child comments replies: [–] eli@lemmy.world 8 points 5 months ago (2 children) I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time. Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program. I'm curious what is causing sync issues to make it "common", I use my db every day. permalink fedilink source parent hideshow 2 child comments replies: [–] german@pawb.social [S] 3 points 5 months ago* (1 child) Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever. With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer. It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] MangoPenguin@lemmy.blahaj.zone 4 points 5 months ago I switched over to keepass yesterday, and surprisingly the import from BW was perfect (as far as I can tell), even passkeys came over just fine. permalink fedilink source parent load more comments (2 replies) [–] Resonosity@lemmy.dbzer0.com 13 points 5 months ago (1 child) My first password manager was KeePassXC. Hooked it up with Syncthing, and I've never had issues aside from the occasion database duplicate. permalink fedilink source parent hideshow 1 child comment replies: [–] Flagstaff@programming.dev 4 points 5 months ago Right, and it has a neat merge-database feature anyway, so no excuses for those holding back! permalink fedilink source parent [–] electric_nan@lemmy.ml 19 points 5 months ago (8 children) Sync however you want. Syncthing, Nextcloud, Dropbox, Gdrive etc. permalink fedilink source parent hideshow 8 child comments replies: [–] Flagstaff@programming.dev 15 points 5 months ago (7 children) Syncthing is the way to leave Google Drive, etc. permalink fedilink source parent hideshow 7 child comments replies: [–] electric_nan@lemmy.ml 10 points 5 months ago (3 children) I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.). permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent load more comments (2 replies) [–] fatalicus@lemmy.world 5 points 5 months ago (2 children) Is there a proper syncthing android client now, after the official android client was discontinued? permalink fedilink source parent hideshow 2 child comments replies: [–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent [–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent [–] tremble5218@programming.dev 4 points 5 months ago Rclone with any cloud provider is another great option that's seldom mentioned. I posted my setup as a comment on another post. You may find it here - https://programming.dev/comment/23849767 permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] MangoPenguin@lemmy.blahaj.zone 2 points 5 months ago (5 children) KeeAnywhere That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list. permalink fedilink source parent hideshow 5 child comments load more comments (5 replies) [–] elaina@lemmy.zip 2 points 5 months ago Yeah the performance is what made me install the desktop app, but then it's 1gb in size permalink fedilink source parent load more comments (4 replies)
[–] german@pawb.social [S] 16 points 5 months ago (6 children) Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups. Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW. permalink fedilink source parent hideshow 6 child comments replies: [–] eli@lemmy.world 8 points 5 months ago (2 children) I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time. Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program. I'm curious what is causing sync issues to make it "common", I use my db every day. permalink fedilink source parent hideshow 2 child comments replies: [–] german@pawb.social [S] 3 points 5 months ago* (1 child) Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever. With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer. It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] MangoPenguin@lemmy.blahaj.zone 4 points 5 months ago I switched over to keepass yesterday, and surprisingly the import from BW was perfect (as far as I can tell), even passkeys came over just fine. permalink fedilink source parent load more comments (2 replies)
[–] eli@lemmy.world 8 points 5 months ago (2 children) I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time. Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program. I'm curious what is causing sync issues to make it "common", I use my db every day. permalink fedilink source parent hideshow 2 child comments replies: [–] german@pawb.social [S] 3 points 5 months ago* (1 child) Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever. With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer. It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] german@pawb.social [S] 3 points 5 months ago* (1 child) Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever. With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer. It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] MangoPenguin@lemmy.blahaj.zone 4 points 5 months ago I switched over to keepass yesterday, and surprisingly the import from BW was perfect (as far as I can tell), even passkeys came over just fine. permalink fedilink source parent
[–] Resonosity@lemmy.dbzer0.com 13 points 5 months ago (1 child) My first password manager was KeePassXC. Hooked it up with Syncthing, and I've never had issues aside from the occasion database duplicate. permalink fedilink source parent hideshow 1 child comment replies: [–] Flagstaff@programming.dev 4 points 5 months ago Right, and it has a neat merge-database feature anyway, so no excuses for those holding back! permalink fedilink source parent
[–] Flagstaff@programming.dev 4 points 5 months ago Right, and it has a neat merge-database feature anyway, so no excuses for those holding back! permalink fedilink source parent
[–] electric_nan@lemmy.ml 19 points 5 months ago (8 children) Sync however you want. Syncthing, Nextcloud, Dropbox, Gdrive etc. permalink fedilink source parent hideshow 8 child comments replies: [–] Flagstaff@programming.dev 15 points 5 months ago (7 children) Syncthing is the way to leave Google Drive, etc. permalink fedilink source parent hideshow 7 child comments replies: [–] electric_nan@lemmy.ml 10 points 5 months ago (3 children) I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.). permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent load more comments (2 replies) [–] fatalicus@lemmy.world 5 points 5 months ago (2 children) Is there a proper syncthing android client now, after the official android client was discontinued? permalink fedilink source parent hideshow 2 child comments replies: [–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent [–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent
[–] Flagstaff@programming.dev 15 points 5 months ago (7 children) Syncthing is the way to leave Google Drive, etc. permalink fedilink source parent hideshow 7 child comments replies: [–] electric_nan@lemmy.ml 10 points 5 months ago (3 children) I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.). permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent load more comments (2 replies) [–] fatalicus@lemmy.world 5 points 5 months ago (2 children) Is there a proper syncthing android client now, after the official android client was discontinued? permalink fedilink source parent hideshow 2 child comments replies: [–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent [–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent
[–] electric_nan@lemmy.ml 10 points 5 months ago (3 children) I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.). permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent load more comments (2 replies)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent
[–] Flagstaff@programming.dev 2 points 5 months ago Oops, I thought you were talking about long-term storage of files in general, like videos and docs or something, not a password database! Never mind. permalink fedilink source parent
[–] fatalicus@lemmy.world 5 points 5 months ago (2 children) Is there a proper syncthing android client now, after the official android client was discontinued? permalink fedilink source parent hideshow 2 child comments replies: [–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent [–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent
[–] Flagstaff@programming.dev 4 points 5 months ago Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it. However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well). permalink fedilink source parent
[–] recursivethinking@lemmy.world 2 points 5 months ago Syncthing Fork works well for Android permalink fedilink source parent
[–] tremble5218@programming.dev 4 points 5 months ago Rclone with any cloud provider is another great option that's seldom mentioned. I posted my setup as a comment on another post. You may find it here - https://programming.dev/comment/23849767 permalink fedilink source parent
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] MangoPenguin@lemmy.blahaj.zone 2 points 5 months ago (5 children) KeeAnywhere That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list. permalink fedilink source parent hideshow 5 child comments load more comments (5 replies)
[–] MangoPenguin@lemmy.blahaj.zone 2 points 5 months ago (5 children) KeeAnywhere That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list. permalink fedilink source parent hideshow 5 child comments load more comments (5 replies)
[–] elaina@lemmy.zip 2 points 5 months ago Yeah the performance is what made me install the desktop app, but then it's 1gb in size permalink fedilink source parent
[–] slate@sh.itjust.works 31 points 5 months ago (42 children) KeePass isn't going anywhere. They're also dragging their feet on passkey support, so you might go with KeepassXC. permalink fedilink source parent hideshow 42 child comments replies: [–] eightys3v3n@lemmy.ca 10 points 5 months ago (19 children) They also don't effectively allow collaboration though, which is my cheif reason for using a cloud hosted password manager. permalink fedilink source parent hideshow 19 child comments replies: [–] Flagstaff@programming.dev 5 points 5 months ago (9 children) What is "collaboration" in this context? permalink fedilink source parent hideshow 9 child comments replies: [–] Viceversa@lemmy.world 5 points 5 months ago (1 child) Parallel creating, reading, updating, deleting password entries by multiple users. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 6 points 5 months ago (6 children) Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply) load more comments (1 reply) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 4 points 5 months ago (2 children) Valid. But it's also valid that it now doesn't work for me or anyone who also helps manage other people's lives or works on a team ¯_(ツ)_/¯ permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago (3 children) And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this. permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply) load more comments (2 replies) [–] zeitverschreib@freundica.de 19 points 5 months ago (8 children) @slateWasn't there some commotion a few weeks about KeepassXC and vibe coding?@RonnyZittledong permalink fedilink source parent hideshow 8 child comments replies: [–] Dumhuvud@programming.dev 33 points 5 months ago* (last edited 5 months ago) (6 children) Yeah, there was. It was forked because of that, actually: https://codeberg.org/ChiPass permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent [–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent [–] Viceversa@lemmy.world 2 points 5 months ago (2 children) 404 permalink fedilink source parent hideshow 2 child comments replies: [–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent load more comments (1 reply) [–] blackbrook@mander.xyz 9 points 5 months ago Their AI policy looks very reasonable, and they certainly aren't vibe coding. Everything is rigorously reviewed and tested by a handful of experienced, competent humans. permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] 4am@lemmy.zip 16 points 5 months ago (11 children) Two articles behind a paywall, one that won’t load, and another article that says the big problem with passkeys is…people are unfamiliar with them. If anyone tells you that Passkeys are bad, they’re a liar. Way more safe than passwords, full stop. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. permalink fedilink source parent hideshow 11 child comments replies: [–] Flagstaff@programming.dev 6 points 5 months ago (6 children) Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. The problem is that this is where it's eventually going to lead to. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) load more comments (2 replies) [–] qqq@lemmy.world 3 points 5 months ago (3 children) There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want. Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions. Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche. permalink fedilink source parent hideshow 3 child comments replies: [–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent load more comments (2 replies) load more comments (1 reply)
[–] eightys3v3n@lemmy.ca 10 points 5 months ago (19 children) They also don't effectively allow collaboration though, which is my cheif reason for using a cloud hosted password manager. permalink fedilink source parent hideshow 19 child comments replies: [–] Flagstaff@programming.dev 5 points 5 months ago (9 children) What is "collaboration" in this context? permalink fedilink source parent hideshow 9 child comments replies: [–] Viceversa@lemmy.world 5 points 5 months ago (1 child) Parallel creating, reading, updating, deleting password entries by multiple users. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 6 points 5 months ago (6 children) Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply) load more comments (1 reply) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 4 points 5 months ago (2 children) Valid. But it's also valid that it now doesn't work for me or anyone who also helps manage other people's lives or works on a team ¯_(ツ)_/¯ permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago (3 children) And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this. permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply) load more comments (2 replies)
[–] Flagstaff@programming.dev 5 points 5 months ago (9 children) What is "collaboration" in this context? permalink fedilink source parent hideshow 9 child comments replies: [–] Viceversa@lemmy.world 5 points 5 months ago (1 child) Parallel creating, reading, updating, deleting password entries by multiple users. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 6 points 5 months ago (6 children) Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply) load more comments (1 reply)
[–] Viceversa@lemmy.world 5 points 5 months ago (1 child) Parallel creating, reading, updating, deleting password entries by multiple users. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] eightys3v3n@lemmy.ca 6 points 5 months ago (6 children) Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply) load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) [–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply)
[–] Appoxo@lemmy.dbzer0.com 3 points 5 months ago (1 child) Sometimes it just makes sense to have a single team login. Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] eightys3v3n@lemmy.ca 3 points 5 months ago (2 children) It's the fault of my family organization or every company we use that my parent's bank, Google, phone, laptop, etc don't allow more than one set of credentials to access the same thing? It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account? permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent
[–] eightys3v3n@lemmy.ca 2 points 5 months ago I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager. I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login). I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does. permalink fedilink source parent
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 4 points 5 months ago (2 children) Valid. But it's also valid that it now doesn't work for me or anyone who also helps manage other people's lives or works on a team ¯_(ツ)_/¯ permalink fedilink source parent hideshow 2 child comments load more comments (2 replies)
[–] eightys3v3n@lemmy.ca 4 points 5 months ago (2 children) Valid. But it's also valid that it now doesn't work for me or anyone who also helps manage other people's lives or works on a team ¯_(ツ)_/¯ permalink fedilink source parent hideshow 2 child comments load more comments (2 replies)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago (3 children) And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this. permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply)
[–] eightys3v3n@lemmy.ca 3 points 5 months ago (3 children) And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this. permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] eightys3v3n@lemmy.ca 3 points 5 months ago* (1 child) I guess a laptop, server, IoT device, or WiFi connection when your main device doesn't have internet is out of scope for you? Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online? And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic? permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] zeitverschreib@freundica.de 19 points 5 months ago (8 children) @slateWasn't there some commotion a few weeks about KeepassXC and vibe coding?@RonnyZittledong permalink fedilink source parent hideshow 8 child comments replies: [–] Dumhuvud@programming.dev 33 points 5 months ago* (last edited 5 months ago) (6 children) Yeah, there was. It was forked because of that, actually: https://codeberg.org/ChiPass permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent [–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent [–] Viceversa@lemmy.world 2 points 5 months ago (2 children) 404 permalink fedilink source parent hideshow 2 child comments replies: [–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent load more comments (1 reply) [–] blackbrook@mander.xyz 9 points 5 months ago Their AI policy looks very reasonable, and they certainly aren't vibe coding. Everything is rigorously reviewed and tested by a handful of experienced, competent humans. permalink fedilink source parent
[–] Dumhuvud@programming.dev 33 points 5 months ago* (last edited 5 months ago) (6 children) Yeah, there was. It was forked because of that, actually: https://codeberg.org/ChiPass permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent [–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent [–] Viceversa@lemmy.world 2 points 5 months ago (2 children) 404 permalink fedilink source parent hideshow 2 child comments replies: [–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent [–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent
[–] Dumhuvud@programming.dev 3 points 5 months ago I edited the comment. It ended with a period before, I assume your client thought it was a part of the link. Does it work now? permalink fedilink source parent
[–] HappyFrog@lemmy.blahaj.zone 3 points 5 months ago https://chipass.org/ permalink fedilink source parent
[–] Viceversa@lemmy.world 2 points 5 months ago (2 children) 404 permalink fedilink source parent hideshow 2 child comments replies: [–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent
[–] Dumhuvud@programming.dev 3 points 5 months ago (1 child) I edited the comment, see my reply to @wiccan2@thelemmy.club. permalink fedilink source parent hideshow 1 child comment replies: [–] wiccan2@thelemmy.club 2 points 5 months ago Yep works now. permalink fedilink source parent
[–] blackbrook@mander.xyz 9 points 5 months ago Their AI policy looks very reasonable, and they certainly aren't vibe coding. Everything is rigorously reviewed and tested by a handful of experienced, competent humans. permalink fedilink source parent
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] 4am@lemmy.zip 16 points 5 months ago (11 children) Two articles behind a paywall, one that won’t load, and another article that says the big problem with passkeys is…people are unfamiliar with them. If anyone tells you that Passkeys are bad, they’re a liar. Way more safe than passwords, full stop. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. permalink fedilink source parent hideshow 11 child comments replies: [–] Flagstaff@programming.dev 6 points 5 months ago (6 children) Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. The problem is that this is where it's eventually going to lead to. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) load more comments (2 replies) [–] qqq@lemmy.world 3 points 5 months ago (3 children) There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want. Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions. Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche. permalink fedilink source parent hideshow 3 child comments replies: [–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent load more comments (2 replies)
[–] 4am@lemmy.zip 16 points 5 months ago (11 children) Two articles behind a paywall, one that won’t load, and another article that says the big problem with passkeys is…people are unfamiliar with them. If anyone tells you that Passkeys are bad, they’re a liar. Way more safe than passwords, full stop. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. permalink fedilink source parent hideshow 11 child comments replies: [–] Flagstaff@programming.dev 6 points 5 months ago (6 children) Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. The problem is that this is where it's eventually going to lead to. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) load more comments (2 replies) [–] qqq@lemmy.world 3 points 5 months ago (3 children) There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want. Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions. Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche. permalink fedilink source parent hideshow 3 child comments replies: [–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent load more comments (2 replies)
[–] Flagstaff@programming.dev 6 points 5 months ago (6 children) Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that. Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that. The problem is that this is where it's eventually going to lead to. permalink fedilink source parent hideshow 6 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies) load more comments (2 replies)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent
[–] qqq@lemmy.world 6 points 5 months ago* (last edited 5 months ago) They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE). permalink fedilink source parent
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies)
[–] WhyJiffie@sh.itjust.works 2 points 5 months ago (2 children) except when the wide populace starts accepting it being device locked, and your opinion does not matter anymore to those making the decisions permalink fedilink source parent hideshow 2 child comments load more comments (2 replies)
[–] qqq@lemmy.world 3 points 5 months ago (3 children) There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want. Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions. Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche. permalink fedilink source parent hideshow 3 child comments replies: [–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent load more comments (2 replies)
[–] captcha_incorrect@lemmy.world 4 points 5 months ago Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned. I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option. permalink fedilink source parent
[–] Speculater@lemmy.world 6 points 5 months ago (6 children) I just got Bit warden this year! Gah. Where are we jumping? permalink fedilink source parent hideshow 6 child comments replies: [–] testaccount789@sh.itjust.works 17 points 5 months ago Full circle to sticky notes on monitor. permalink fedilink source parent [–] roofuskit@lemmy.world 5 points 5 months ago (3 children) Vaultwarden permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] roofuskit@lemmy.world 4 points 5 months ago (1 child) Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply) load more comments (1 reply)
[–] testaccount789@sh.itjust.works 17 points 5 months ago Full circle to sticky notes on monitor. permalink fedilink source parent
[–] roofuskit@lemmy.world 5 points 5 months ago (3 children) Vaultwarden permalink fedilink source parent hideshow 3 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] roofuskit@lemmy.world 4 points 5 months ago (1 child) Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply) load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] roofuskit@lemmy.world 4 points 5 months ago (1 child) Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] roofuskit@lemmy.world 4 points 5 months ago (1 child) Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was. permalink fedilink source parent hideshow 1 child comment load more comments (1 reply)
[–] tordenflesk@lemmy.world 6 points 5 months ago (2 children) Took me like 5 minutes to move back to KeepassXC. permalink fedilink source parent hideshow 2 child comments replies: [–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] IncogCyberSpaceUser@piefed.social 2 points 5 months ago Keepassdx supports creating aliases via addy.io I think permalink fedilink source parent load more comments (1 reply)
[–] a comment that isn't shown here: deleted, from someone you've blocked, or on another page. view the thread from it replies: [–] IncogCyberSpaceUser@piefed.social 2 points 5 months ago Keepassdx supports creating aliases via addy.io I think permalink fedilink source parent
[–] IncogCyberSpaceUser@piefed.social 2 points 5 months ago Keepassdx supports creating aliases via addy.io I think permalink fedilink source parent
[–] bordam@feddit.it 2 points 5 months ago Password Store is the answer, if you don’t need passkey support. You can be sure it can’t be sold. It’s the golden middle: not self hosted, but not owned by anyone. permalink fedilink source parent