this post was submitted on 05 Jul 2023
1211 points (99.8% liked)

Android

27994 readers
244 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

!android@lemmy.ml


founded 1 year ago
MODERATORS
 
(page 3) 50 comments
sorted by: hot top controversial new old
[–] CaptPretentious@lemmy.world 10 points 1 year ago (1 children)

I'm going to be super original and say Bitwarden. I used LastPass many years ago, but there was a data breach or they dropped the free tier, or something and I followed everyone to Bitwarden.

Not only was it significantly better on Android than LastPass, had a free tier (but even the payed is stupid cheap), but the interface is just so much easier to use.

load more comments (1 replies)
[–] wasabi@feddit.de 10 points 1 year ago

If you are not using a password manager you are doing it wrong.

[–] Kissaki@feddit.de 10 points 1 year ago (4 children)

Using different passwords for different services protects you against data leaks opening attack vectors for all your services as well as malicious actors using your passwords like that as well as phishing impact.

A password manager is a must for reasonable security.

I use keepass. Local DB file with Master password. No hosted service or Browser extension is another layer of protection, of risk reduction. I manually copy/sync the DB file via cloud storage as a backup and for mobile use.

I use Browser password storage selectively. The most critical stuff definitely only belongs into my memory and password database.

load more comments (4 replies)
[–] decadentrebel@lemmy.world 10 points 1 year ago

Been using KeePass for years since I couldn't keep track of every single random passphrase I have. And yes, I recommend it highly.

[–] Rob@lemmy.world 10 points 1 year ago (6 children)

Lots of love for Bitwarden in this thread; I’d also like to pitch in with 1Password. It’s got a great UX and I even got my mom on board.

Used to use Lastpass since ~2013; really glad I switched last year. Lastpass has turned to absolute shit.

load more comments (6 replies)
[–] roht@lemmy.world 9 points 1 year ago

Yes, and Bitwarden. Strong master password, with 2FA, and randomly generated passwords for the rest. For deeply personal apps such as banking I do have another localized system though. I moved on from LastPass and never looked back.

[–] avail@lemmy.world 9 points 1 year ago (1 children)

1Password family account for my partner and I. Super handy to have a shared vault for household things.

load more comments (1 replies)
[–] M0oP0o@mander.xyz 9 points 1 year ago (14 children)

Does a sheet of paper count as a password manager?

load more comments (14 replies)
[–] ThaijsClan@lemmy.world 9 points 1 year ago (4 children)

My goto is KeePass. Does everything I need. I like the use of hotkeys and the ability to have complete control over how the autotype works. Plus if you have a fingerprint scanner (phone or laptop or something) you can use autotype with that too. And the program is completely free.

load more comments (4 replies)
[–] sma3in@lemmy.world 9 points 1 year ago* (last edited 1 year ago) (2 children)

switched from LastPass to Bitwarden and I couldn't look left or right

load more comments (2 replies)
[–] Temezi@sopuli.xyz 9 points 1 year ago (1 children)

Been using the keepass format with varying applications for about 14 years. I used to host it in SVN repo for that sweet sweet cloud access! Not that smart im retrospec.. I feel like you shouldnt trust your passwords to the cloud, especially if their thing is password management. Last pass for example is under constant battery from attackers.

load more comments (1 replies)
[–] bleeu@lemmy.world 9 points 1 year ago (6 children)

I've used LastPass in the past but now I use bitwarden, gets the job done

load more comments (6 replies)
[–] mayo@lemmy.world 9 points 1 year ago

Keepassxc for storage/backup and then I let the browser save the passwords I use. I like this setup.

[–] scarabic@lemmy.world 9 points 1 year ago (2 children)

So happy I got 1Password set up and it has treated me right during the years I’ve used it. I wish my parents had such a thing. They have all the passwords written on a sheet of paper that sits under the keyboard. Like the digital version of car keys up in the visor.

load more comments (2 replies)
[–] Nitsu29@lemmy.world 9 points 1 year ago

You should really use a password manager so you always have a secure and different password for each site

I recommend KeePass if you want to save your password locally

Or if you want something cloud based then I recommend Bitwarden You can even host your own instance

[–] HortiEastwood@lemmy.world 9 points 1 year ago

Bitwarden, open-source, free, and awesome!!!!!

[–] techgearwhips@lemmy.world 9 points 1 year ago

Yes. I’m in the free KeePass ecosystem. Self hosted via iCloud and backed up to Proton Drive.

KeePass2Android no net on my Android.

Keepassium on my iPhone.

And KeepassDX on my desktop.

[–] ultratiem@lemmy.world 9 points 1 year ago* (last edited 1 year ago) (1 children)

1Password since forever. Can’t imagine having to type passwords or remember them.

load more comments (1 replies)
[–] QwertySpace@lemmy.world 8 points 1 year ago (6 children)

I use KeePassXC and synchronise it with syncthing. This allows me to keep it off devices I have no control over (OneDrive servers) and also allows me to have per device version history.

load more comments (6 replies)
[–] ZC3rr0r@lemmy.ca 8 points 1 year ago* (last edited 1 year ago) (2 children)

I've been a KeePass user for over a decade and it's always been good to me, especially when using Box and OneDrive to sync it between devices. The ecosystem is great with enough plugins and support to make it fit your use case on any modern OS.

Can't recommend it enough. Especially over other options that are offered by a commercial company (LastPass for example). Not only because you're intently placing your trust in them to not expose your data and keep it secure, but also because you're giving them a lot of leverage to turn around and hold your passwords for ransom at some point in the future (when they IPO for instance, as a popular example) or lock you out after they fold for whatever reason.

load more comments (2 replies)
[–] rivingtondown@lemmy.world 8 points 1 year ago* (last edited 1 year ago) (1 children)

I used to use BitWarden but switched to 1Password about a year ago once I decided to buy a business account for my department at work (which gives every user a free family account)

1Password is fantastic. It stores more than passwords, it's fine tuned to do that, but really can be used to store anything securely. The dev team uses it to share secure .env variables and API keys for example.

One of the best features though is the ability to share secured links to VIEW passwords outside of your network. When a coworker asks me to share an account password I don't just copy and paste the username and password over email. I click share in 1Password and shoot them a link that only they can view (using email 2fa). I can also make more open links to shared credentials that expire (or until I expire those links myself).

The phone app works great and once you get it set up on one device it's easy to configure it on others.

load more comments (1 replies)
[–] Blinems@lemm.ee 8 points 1 year ago

I love using 1Password!

[–] WeRememberTheFreeman@lemmy.world 8 points 1 year ago (2 children)

I use KeePass (more specifically KeePassXC). I manually copy my password files around like a caveman but I don't mind. At least my kdbx files are not accessible easily.

load more comments (2 replies)
[–] overfox@feddit.de 8 points 1 year ago

Started with LastPass, used it for 10 years. Switched to Bitwarden a while ago, would never go back.

[–] fne8w2ah@lemmy.world 8 points 1 year ago (1 children)

Started off with Lastpass free tier, then after they limited the free tier to only one device, switched to Bitwarden.

load more comments (1 replies)
[–] rbar@lemmy.world 8 points 1 year ago (1 children)

I couldn't live without one these days. I personally use Bitwarden. I have tried most of the other manager suggested in this thread. They each their own benefits. I would recommend one of the hosted services for most people (1password, Bitwarden, not LastPass). I came to prefer Bitwarden for their combination of features and openness. I have self hosted it in the past, but these days just use their hosted service.

There are a lot of side benefits to using one besides just remembering your usernames and passwords for you too.

  • It lets you use catch-all emails if you have your own email domain
    • allows you to give services their own address to track abuse
    • makes you more resistant to someone taking your leaked credentials from one site and using it for another
    • easier spam filtering
  • Most password managers support random password generation
  • Saving things that aren't logins
    • Family member's SSNs and DL numbers
    • Credit cards
    • Wifi passwords
    • Gate codes
  • Sharing always up to date passwords and other secrets with people (for hosted options)
  • 2FA is easier
load more comments (1 replies)
[–] Gerula@lemmy.world 8 points 1 year ago (4 children)

I use Firefox's built in password manager because its crossplatform and I can use it on all my devices.

load more comments (4 replies)
[–] xaxl@lemmy.world 8 points 1 year ago

Use whatever but also use 2fa as well for every important account that you have.

[–] richdotward@lemmy.ca 8 points 1 year ago (1 children)

https://play.google.com/store/apps/details?id=keepass2android.keepass2android

Been using this for years. Hosted via ssh on my server in a ovh data center. Fingerprint access and every single account with a random password.

load more comments (1 replies)
[–] ScaNtuRd@lemmy.world 8 points 1 year ago (4 children)

KeePass. Hands down the most secure one if you set it up right

load more comments (4 replies)
[–] flynnguy@lemmy.world 8 points 1 year ago (1 children)

Yes, 100%... In fact, I often do recommend it to others. Personally I use Bitwarden (paid account even) but I've also recommended 1pass to apple only users because it fits well in that ecosystem.

You can use them to generate a different password for each and every login. And it's really just random letters, number and special characters. That one site gets compromised? They can't then use those credentials to login anywhere else.

You don't have to remember those passwords. Passwords that are easy to remember are probably found in dictionary attacks. You know what's not? Wt2Pwi#$a@Nzeq7*8UwSJ7sTsMKdC!HSGZZ7JnzCtxhfCfFCiXP&FD!yM!c^$DisSR@2 (which I just generated with bitwarden)

2-factor auth is also really easy with most password managers and makes logging in with 2-factor auth easy. I hit one hotkey to fill in the web form with my username/password, hit enter to login and then it auto-copies my TOTP code so I can just paste it and go. Super secure but super easy.

You go to a phishing site? Guess what, a good password manager will store the url and if it doesn't match, that should be your first red flag. If I end up at g00gle.com instead of google.com, it won't show as having a login available.

load more comments (1 replies)
[–] Tywele@lemmy.dbzer0.com 7 points 1 year ago

Bitwarden is great and I don't know how I could live without it anymore.

load more comments
view more: ‹ prev next ›