I’ve cancelled my subscription yesterday, conveniently it was about to renew at the end of the week, so I have a few days to migrate from Proton, here’s what I’m thinking of, but I’d love to hear what other people are switching to
I’ve cancelled my subscription yesterday, conveniently it was about to renew at the end of the week, so I have a few days to migrate from Proton, here’s what I’m thinking of, but I’d love to hear what other people are switching to
I’ve been using KeePassXC with Syncthing for years and it’s been great as a password manager for myself. But I don’t need to share those credentials with anyone.
Same, plus a yubikey for 2FA
Aegis is my chosen 2FA. never have been convinced on hardware keys personally.
Fair enough. I like the ease of simply touching it. It’s less of a frustration for when my wife wants to access my password manager
I’m strongly considering getting a hardware key. Is Yubikey the best choice or are the other options also worth considering?
Solokey and Nitrokey are strong alternatives, and the two I’ve been recommended by people who would know.
Solokey is good if Fido is the only thing needed.
Nitrokey has Fido and more. I keep meaning to try the other features, but haven’t gotten around to it.
I bought my yubikey at least 7-8 years ago and then stopped keeping up on comparisons. I honestly have no idea which is the best, because there are varying use cases and standards available. Yubikey works for my use case and threat model, but I have no idea what would be best for yours. I wish I could be more specific for you but also don’t want to give you misleading info.
Yeah, I like BitWarden because it makes sharing passwords very easy. My wife and I have a few shared accounts, and have a family vault set up. So anything we want to share just gets transferred into the family vault, and we can both easily access it. And since it even supports TOTP, we can have those directly on the shared accounts without needing to bug each other with the “hey I’m trying to log into {x}, send me your Google Authenticator code” song and dance.
Does keepass have a reputable browser extension or is the application itself all that’s used? I think that’s what moved me off Keepass initially after using it for like six years and then moving to BitWarden a few years ago
I’m not sure what you mean by reputable, but I’ve been using the official KeePassXC extension.
I assume the point of the extension is to have support for autofill, if that is the case, you should be aware that it is generally a bad idea to give your browser access to that info directly since they are the definition of internet connected apps. What I do instead of autofill with keepassxc is open the vault and press the copy to clipboard buttons which works essentially the same way as autofill just with a couple more clicks.
When you use an extension for that task it also validades the URL, which helps to not type by accident your credentials in a fake website.
This actually saved me once when a Google result was literally a phishing version of GitHub.
I’ve tried that exact setup but Syncthing kept not detecting changes or creating conflicts… So I’m still stuck with Proton Pass :/ (it’s a good password manager, but Andy Yen is being too much of a loser)