It never made sense to me to put password managers in the cloud. Regards to what you intend it to do, you’re making it accessible to a wider audience than necessary. And yet, I’m using iCloud. It’s time for a change.

I’m thinking of just running a locally hosted password manager on my home server and letting my devices sync with it somehow when I’m at home. I have a VPN into my home network when I’m away that automatically triggers when I leave the house, so even that’s not that big an issue, but I’m really not familiar with what’s gonna cleanly integrate with all my stuff and be easy to use. All I know is I wanna kill the cloud functionality of my setup.

I already have a jellyfish server so I figured I would just throw this onto that. Any suggestions?

  • Takahe@lemmy.nz
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    8 days ago

    I use keepass (KeepassXC on desktop, KeepassDX on Android but I’m sure there is an IOS client too) I sync the database between all my devices and my server (hub and spoke) with Syncthing

    • GreatBlueHeron@piefed.ca
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      8 days ago

      I’ve been using various versions of keepass for ever. Until recently I had the database on Google drive. It’s now local and sync’d with syncthing. It’s a bit “different”, but once you get used to it, it works very well.

  • ohwhatfollyisman@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 days ago

    i have keepass on only one device. i don’t mind looking up individual passwords and typing them in manually when on other devices.

    on the device which hosts keepass, the app is hidden and hoops must be jumped to reach it.

    i back up the encrypted password database once a month to a cloud service as insurance against me losing that one device.

    it’s not the most convenient setup but i sleep so much easier for it.

  • 4k93n2@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 days ago

    if you need to share passwords with other people and do that often then that would be the only reason i would recommend a server-client based password manager. otherwise theres too many points of failure for my liking, especially for something that i use on a daily basis.

    KeePass on the other hand is just a single file thats stored locally and all you need is an app to read it. you dont need an internet connection or a VPN to access it remotely. your wifi could be down, even your power could be out and you would still have access to your database

    being able autofill desktop program logins was the main reason i switched away from bitwarden years ago

    KeepassXC on desktop has a feature called “Autotype” which basically simulates keystrokes to fill in your passwords. theres also an option to integrate with the KeepassXC browser extension, but with Autotype your browser has no connection to your database at all. i kind of feel this is a huge elephant in the room that most other password managers just gloss over. sure, you are getting a lot more convenience by having your browser autofill your passwords but its also adding a huge attack surface just for the sake of a few seconds or a few clicks.

    that said, Autotype isnt great at guessing all sites you might be trying to log into but there is this browser extension that will change your browsers window title to show the full site url which KeepassXC can then read

    one really underrated feature that i dont see any of the others doing is giving you the ability to use multiple vaults at once. you can have one vault for things that are really important, then everything else in another vault and have different strength passwords/passphrases for each one. i have maybe 300 logins but only around 10% of them are important. its kind of a pain if all you want to do is just log into some random forum but you have to type a long secure master password just to open your vault

  • mbirth@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    8 days ago

    If you’re happy with how Apple Password works for you, I can recommend StrongBox. It keeps all data in a KeePass2 database and integrates into Apple’s AutoFill API. That means it feels almost native when using it. No browser plugin needed. (At least not for Safari.) And you can decide how you sync the database file.

  • SanndyTheManndy@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 days ago

    KeepassXC + Syncthing. Using for 2+ years no issues. Have separate database files for each device and merge them as needed.

  • Lka1988@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 days ago

    I use KeePass (Keepass2Android, KeePassXC, OG KeePass, and KeePassium) for everything. Been using KeePass in general for 20-ish years.

    Recently, I decided to export all of my passwords from Firefox, Chrome, and Edge, import the data into my KeePass database under their own folders, then delete everything from the browsers. That way I can move entries that weren’t already in the database to their respective locations in the database hierarchy, delete duplicates, and change insecure passwords.

    The database is hosted on my phones (work and personal), laptop, gaming PC, and a server at home, all synced with Syncthing. My work laptop also has Portable KeePass that accesses the database via WebDAV to my server.

    • ClydapusGotwald@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 days ago

      This is what I did. Once Firefox did something and wiped my passwords from sync only way I got them back was I had an old laptop I didn’t use often that was synced to my account. Now I use keepass that’s saved locally and a backup on my nas & flashdrive.