• oatmilkmaid@possumpat.io
    link
    fedilink
    English
    arrow-up
    305
    ·
    1 year ago

    Bitwarden all day every day. I don’t even know any of my passwords because they’re all randomly generated. Try to guess my password now hacker man

  • BrikoX@vlemmy.net
    link
    fedilink
    English
    arrow-up
    106
    arrow-down
    2
    ·
    edit-2
    1 year ago

    What are your thoughts on password managers?

    They are mandatory in current digital age.

    Do you use one?

    Yes. Bitwarden.

    Would you recommend it to others?

    Already do and most are receptive to it once you show them that every single one of them were caught up in a breach at some point.

  • kalipike@lemmy.one
    link
    fedilink
    English
    arrow-up
    87
    ·
    edit-2
    1 year ago

    A password manager is an absolute must, in my opinion! I use Bitwarden and love it.

    • cold@lemm.ee
      link
      fedilink
      English
      arrow-up
      13
      ·
      1 year ago

      bitwarden is the first thing i install on any device and every fresh install

    • Slynk@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      Bitwarden is the best! I actually started with one of the more popular ones, Dashlane, and the thing I found most annoying about it was the boxes and stuff that would always pop up anytime I clicked on a text field. Bitwarden never puts a box on the middle of the screen.

      It’s free, open source, use it on your phone, mac, PC, browser extension for Firefox. It’s the best.

    • easterner@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I just started using it and am loving it. Although I dont know how well it will integrate with my phone yet. A bit worried about some native apps.

  • DogMom@lemmy.world
    link
    fedilink
    English
    arrow-up
    71
    ·
    1 year ago

    I’m in the Bitwarden camp. There is no other way for me to have complex/secure passwords and remember them for my gazillion accounts.

  • bunkbed@feddit.uk
    link
    fedilink
    English
    arrow-up
    70
    arrow-down
    1
    ·
    1 year ago

    Password manager-less life with notebooks and reused passwords is life in the stone age. If you or anyone you know isn’t using one, get on bitwarden.

    Everyone knows why password manageras are absolutely essential, but here’s an often neglected perk: I can list every site I ever signed up to. Wanna delete some old accounts? “Did you sign up to X yet?” Simples.

  • arthurpizza@lemmy.world
    link
    fedilink
    English
    arrow-up
    65
    arrow-down
    1
    ·
    1 year ago

    Everyone should be using a password manager. Every service should have a different password (and some service should have several passwords) and it’s impossible for the average person to keep track of all of those. Every time I hear about someone losing control of an account it’s because they were using the same password as another service.

    I recommend:

    • KeePassDX: Can be completely offline. Probably the most secure but can be a little awkward to use sometimes.
    • Bitwarden: Cloud based but open source. You could run a server but the main service offers MOST of the features for free.

    Your mileage may very with some of the proprietary platforms. However my job uses 1 Password and it seems to be fairly safe.

    • foxfell@lemmy.ml
      link
      fedilink
      English
      arrow-up
      11
      ·
      1 year ago

      Totally agree, bitwarden is the best, can be selfhosted, free, their approach to community needs makes it worth donating.

      • mrmanager@lemmy.today
        link
        fedilink
        English
        arrow-up
        10
        ·
        edit-2
        1 year ago

        I like to support devs who makes great products, excellent ones like bitwarden. Otherwise they will go away and we will be left with big tech products only. Because I don’t think people like to make excellent products and still don’t see a dime in their pocket.

        • Hexarei@programming.dev
          link
          fedilink
          English
          arrow-up
          6
          ·
          1 year ago

          I like to support devs, too - But I don’t like being forced into paying for access to features already present in software that is running on my own hardware. The code is already on my machine, I should be able to run it.

          That’s my biggest complaint about Bitwarden - I want to share passwords with my wife, and they want to charge me money for that even when I host it myself.

          • gloriousspearfish@feddit.dk
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            1 year ago

            Is that really how it works? I thought it was all open source software? If it is I don’t see how you can be required to pay if you host it yourself?

            • Hexarei@programming.dev
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              1 year ago

              It is open source - but the server essentially locks you out of various functionality unless you create an account with Bitwarden and provide a valid subscription token.

              Sure, you can fork it and excise that code from it… but that’s too laborious and potentially error-prone, imho.

              If I were to selfhost bitwarden again, I’d go with Vaultwarden, which claims to be fully compatible and has no such requirements.

  • Cryptic Fawn@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    51
    ·
    edit-2
    1 year ago

    Bitwarden fan over here. Been using it for a month and I have just 1 complaint; can’t sign into the Android app. Signing in with my mobile browser works though. No idea why the app is being fussy. I’ll contact them about it when I stop being lazy.

  • Alperto@lemmy.ml
    link
    fedilink
    English
    arrow-up
    54
    arrow-down
    3
    ·
    1 year ago

    Yes, do it! Now! It’s the safest way, but only by choosing the right and trusted ones. Examples:

    • The expensive but good one: 1Password
    • The free, geeky and difficult one for normal users: Keepass.
    • The simple and free and beloved one: Bitwarden
    • The don’t try it ever because they will leak your data: Lastpass.
    • amanwithausername@vlemmy.net
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 year ago

      Any reason to use the original Keepass over KeepassXC? Also, tip for anyone using Keepass or KeepassXC: there’s an Android app called KeepassDX that supports the keepass database format, so you can keep your passwords synchronized between your computer and phone by simply syncing the database file with Syncthing. No third-party server required!

      • Tanoh@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        The whole database is encrypted. Just put it on Google Drive or similar and it will be synced automatically.

        Also I don’t see Keepass(XC) as difficult or geeky.

        • ejsexton82@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          I love Keepass(XC). I’ve used it for years.

          You do have to host the files yourself, which requires an extra step beyond just handing your password over to Lastpass for future leaking, but I consider that a good thing.

          • Hexarei@programming.dev
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            I also consider the selfhosting of the files as a good thing - I run my own Nextcloud server, which means my password database is 100% private to me alone, only present on my hardware and I don’t have to trust a third-party to store it. Sure, it’s encrypted. but … an encrypted file on someone else’s servers is still an attack surface that I don’t have to deal with when I host it myself.

  • RealFknNito@lemmy.world
    link
    fedilink
    English
    arrow-up
    51
    ·
    1 year ago

    KeePassXC here. Locally encrypted, Locally stored, cloud backup of an encrypted file, synced with SyncThing to mobile devices. I will never trust nor recommend a cloud based manager with all the breaches.

  • Cralex@lemmy.one
    link
    fedilink
    English
    arrow-up
    39
    ·
    edit-2
    1 year ago

    I can’t imagine life without one. So many bad password habits can be eliminated by using a password manager to generate a strong, unique password for every site you use, and devoting your limited password-remembering powers to one decent master password. (Or better yet, secure your password manager further using other forms of authentication.)

    It’s not just for helping you (and your less technically inclined friends and family) remember and use strong, unique passwords, though. Since a password manager only recognizes the real web address that any given password was designated to, it won’t be fooled by a scam website using a similar-looking name to a legitimate one. While this doesn’t eliminate the risk of falling for a scam, every little bit helps, no matter how skilled you are at cybersecurity.

    I use Bitwarden, which I’ve been using ever since Lastpass started limiting you to using a single device class (mobile or desktop) for free accounts. It integrates with both Firefox and Chromium-based browsers and with the password manager features in smartphones. Their free account is nice, but I went with the paid option so that I could keep and use 2FA passcodes within Bitwarden itself. There have been several debates between doing it like this versus using a separate authenticator app, but I feel like it’s both very secure and really, really convenient. It encourages me to use increased security on every website that supports it.