Just wondered what people are using for their password management.
I’m currently using 1Password on a family subscription for both password management and 2FA (and then Authy for the 1Password 2FA). But I’m seeing a lot more posters — particularly since joining Lemmy — championing BitWarden (either cloud or self hosted) and Raivo OTP as a cheaper, almost-as-functional alternative.
So is it worth the switch? Will I lose out on anything by doing so?
I’m currently running BitWarden with a free account to see if I can live with it. But I must admit, 1Password is a staple app for me and one that I would say is priceless to my workflow and setup.
Just interested in your thoughts and trying to stimulate conversation!
Bitwarden is open source (https://github.com/bitwarden) and was audited by privacytools.io, so I’m in team bitwarden !
It is perfectly integrated with all my devices and browsers, and it’s free to use.
Jup bitwarden is pretty awesome! I use a self hosted vaultwarden. You can link it with the bitwarden browser extensions.
Question for you since you mentioned how it’s integrated with all your devices. I currently do not use a PW manager (I know, shame on me). Let’s say I get bitwarden, do I need to go back and change every password on every website to the bitwarden-generated password?
It just seems like I’m “In too deep” in a way where it’ll be a pain in the ass to set up.
If you have stored your credentials in your browser, you can export them to Bitwarden. It’s fairly easy and will save you a lot of time.
The point of using Bitwarden (or any password manager) is that you have no idea what your password is. From a security pov you « should » update your credentials but no need to rush, one step a time 👍🏼
I started using bitwarden half a year ago and this is what I did. But once again moved, I Figured it worth nothing if I have weak and shared passwords across apps and sites. so eagrly I changed all the password on accounts that hold my financing details (bank, google, PayPal, etc…) and then lazily, every time I had to go to a site like lemmy for instance I changed it on the way
Are you forced to? No. Should you anyway? Yes. I did what @else@lemmy.fmhy.ml said: just change them when you login. That way it doesn’t feel like a grand undertaking, and you still end up with extremely secure passwords that you don’t have to remember.
Also, i recommend generating your master password. If my senior mom staring down the barrel of alzheimers can remember a 12-digit string of random characters (after emptying out all the space wasted by a few dozen passwords), you can too
You can just add your current passwords to bitwarden, no need to change any passwords if you don’t want. It actually takes less effort than you might think. Just add your username and password each time you need to login to something and everything will be added pretty quickly.
I felt the same as you. Here’s how I managed to deal with my piles of accounts: get BitWarden set up, and pick a few main accounts to enter in and generate new passwords for. Delete your login data and cookies from your browser, then add accounts to BitWarden and generate new passwords as you come to need them. That way it’s one at a time not all at once. Made it manageable for me! (BitWarden even prompts you if you’d like to save a login if it’s never seen it before)
FYI privacytools[.]io has long been commandeered by the BDFL who apparently accepts—how do i put this impartially?—financial incentives for supporting specific software.
Privacyguides.org is the version maintained by the original privacytools team that have been doing the lion’s share of the work since 2019
There’s a huge drama between privacytools and privacyguide, I’m not sure anyone here can tell what happened internally after reading both side of the story.
Yes privacy tools accept sponsoring but it should be transparent about it ? It was the case before, I’m not using the site anymore so idk if things have changed in a bad way I’m sorry I promoted it.
Odd seeing so many people prefer Bitwarden specifically for the polish and UI. Those are the reasons I chose 1Password. Both work! Both are actually pretty good solutions. But after using Bitwarden for quite a while for work, I set up 1Pass for my personal stuff. It’s just nicer and easier to manage, imo, even as a tech savvy user.
And this is why I love places like Lemmy. Balanced, different opinions 🙂
I personally have no issues with 1Password (except that v8 is Electron), but just tempted to try the alternatives given how strong a following Bitwarden appears to have.
Either way… it’s good to have options.
For sure. I set my father up on Bitwarden because he gets a lot more out of the free tier, and it’s hard enough to convince him he needs a password manager, let alone one that costs anything, lol.
Removed by mod
Ive used both, Bitwarden feels more mature plus it’s open source. But 1Password is probably more user friendly for less tech savvy people.
Thanks. I’m tech savvy so that’s not a problem. Just always used 1Password based on recommendations. More than happy to go open source, and 1Password 8 feels like a step backwards from 1Password 7.
Just out of curiosity, why exactly is it a step back? I’ve heard this comment several times but, having only used 1Password 8 (which I quite like), I have nothing to compare it to.
Because it’s now an Electron app on macOS and — in my personal view — Electron apps suck. Much prefer native apps.
Functionality-wise it’s the same, but just doesn’t feel as nice to use, if that makes sense.
Fair enough, to each their own. I understand why electron apps might not be everyone’s cup of tea, but I think some really do work very well (VSCode is the standout).
Now you may have me there. Visual Studio Code is certainly an exception, I’d be willing to admit.
I feel the same. I therefore use Bitwarden myself(not selfhosted as I don’t trust myself to host important things quite yet), and control 1Password for the rest of the fam.
Another vote for Bitwarden
I’ve used BitWarden for a few years now and I really like it. I’ve set it up on both my PC and phone browsers, and it does its job well. Never paid anything for it, the free tier is generous enough for casual users like me.
It being open source sold it for me.
I use Bitwarden after trying out several recommended alternatives. It’s what works best for me and my workflow (individual personal and work use). The browser extension is a lifesaver.
I remember trying 1Password and deciding against it for some reason, but I don’t remember what. My overall impression now is that it was a fine product, but Bitwarden was a better fit. I’d say use whichever meets your needs.
Another vote for Bitwarden. I love it and recommend it to everyone.
Bitwarden.
KeePass for me. I manage my own database, don’t rely on clouds and etc.
Keepass, Keepass2Android and Syncthing to share between devices.
If your workflow is how you like it I would stay.
Vaultwarden might be worth looking into when you have time or want to set it up to check it out. Self-hosted Bitwarden compatible server written in Rust. Lets you store OTP for free which is a convenience I enjoy.
Will definitely look into Vaultwarden. Always looking for containers I can add to my stack!
1Password is good from what I understand, but yes it’s expensive compared to the competition. It just… is, and they don’t mind because they’re going primarily after enterprise business.
BitWarden is pretty much the leader in the field and has been for some time, not counting self-hosted only apps e.g. KeePass.
Not to mention, the Premium plan only costs $10/year or $1/month. I used the free version for sharing passwords with my SO for years until I wanted to start storing TOTP codes, which requires premium.
1Password is way better, but it’s more expensive and not open source.
Bitwarden is, like most open source apps, jankier than 1Password. Not as mature. But people that care a lot about their software being open source will use it because it’s the best open source option we have at the moment.
None of them is a bad app.
“Way better” is an exaggeration in my mind. It may have a few nicer things here and there, but name one thing 1Pass can do that Bitwarden can’t? It certainly has a different UI, but I definitely preferred this over my former LastPass account.
This “what can one do that the other can’t” is never a good argument. Specially against someone that was talking about quality.
A horse and a 2023 Lamborghini can do the same things, transport-wise. But that doesn’t mean that the quality is the same.
keepass
