I dont agree with many things apple does at all, and I also think their password manager has flaws like revealing usernames without authentification.

It is pretty handy though, to have a file where the entries are stored unencrypted, and if the password manager detects an entry it prompts to decrypt exactly that field, maybe with a fingerprint.

KeepassDX needs to run in the background and be completely unlocked to even detect apps or password fields.

Do you know any existing app that can do this?

  • Devjavu@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    28
    arrow-down
    2
    ·
    1 year ago

    Bitwarden if you want it in the cloud, Keepass if you want it on the device. I’d recommend PrivacyGuides.org’s recommendations this time. They are rather careful as to what they recommend, still doesn’t mean they always get it right.

      • FoxBJK@midwest.social
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        You can also run Bitwarden proper locally but unless you really know how to run and maintain a web server I wouldn’t recommend this.

        • qaz@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          edit-2
          1 year ago

          The official docker image uses a lot more resources than the vaultwarden container, but it allows significantly more than 100 users. If it’s just for yourself and your family I suggest just going with Vaultwarden.

            • qaz@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              1 year ago

              You don’t. I meant to say that only large organizations need the official Bitwarden docker setup, but I did not communicate that clearly enough.

          • Rootiest@lemm.ee
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            1 year ago

            I think what they meant is that one option uses network connectivity while the other functions entirely offline

          • Devjavu@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            2
            ·
            1 year ago

            Which would make it hardly accessible outside of your home. Still not locally saved as well. And imho if he is not sure which password manager he should choose, he should maybe not self host just yet.

            • Ekpu@lemmy.world
              link
              fedilink
              arrow-up
              4
              arrow-down
              1
              ·
              1 year ago

              Bitwarden keeps a local encrypted copy of the database and only connects to the server for synchronisation.

                • Oisteink@feddit.nl
                  link
                  fedilink
                  arrow-up
                  2
                  arrow-down
                  1
                  ·
                  1 year ago

                  Maybe because it seems you claim self-hosting bit warden is cloud only and that self-hosted is not accessible outside the house?
                  Note: I do not recommending self-hosting bitwarden

      • Pantherina@feddit.deOP
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Use that but its not about that topic. Its about storing unencrypted metadata (or usinh android Keystore for example) and having autofill work always even if the database is locked, and its quickly unlocked just for that entry

  • I need NOS@lemm.ee
    link
    fedilink
    arrow-up
    12
    ·
    1 year ago

    The recently released Proton Pass is also open-source and audited, keeps all the entries (including metadata) encrypted, and has a nice UI on mobile.

  • Extras@lemmy.today
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    edit-2
    1 year ago

    Kinda confused, you want a password manager that stores entries unencrypted but when you need them, the manager encrypts the entry and then prompts you for authetication to autofill the entry? That seems kinda dumb but if its just for convenience to not input your masterpassword everytime, keepassdx allows biometric unlocking. Think it’ll take as much time as what you described without potentially exposing any unencrypted entry info

    Edit: Before someone jumps at my throat, security wise using biometrics is also kinda a no no but I understand not everyone has the same threat model so go for it if you want

    • If I understand it correctly, the passwords are stored encrypted, but not the additional data, like website-URLs and app-names. This way the password manager only needs to temporarily decrypt a specific password when it’s needed for auto-fill. In regards to the passwords that’s probably a bit safer than keeping all the data and the passwords unencrypted in memory. But the cost is that all the other data is stored unencrypted.

  • TCB13@lemmy.world
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    1 year ago

    Use KeePassXC. Audited, code, open-source, highly customizable, zero cloud stuff.

      • Pantherina@feddit.deOP
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Yes I already use these. On Linux I use Kwallet, store my huge random Keepass password in there and unlock the Keepass database by fetching that password using a shortcut.

        But still, then the password storage is open. Not as elegant as an on-demand password requester, especially on Android