this post was submitted on 05 Jul 2023
1211 points (99.8% liked)

Android

28002 readers
236 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

!android@lemmy.ml


founded 1 year ago
MODERATORS
 
(page 8) 50 comments
sorted by: hot top controversial new old
[–] LucidLethargy@lemmy.world 3 points 1 year ago

There are a lot of people recommending a very specific program in this thread. Be skeptical, everyone. Do your research on the strengths and weaknesses of these types of tools, and the specific offerings of all current leading services.

[–] Sanjuaro@lemmy.world 3 points 1 year ago

This is a hard one. So the first hurdle that I came across is with the font used for the padlock's brand. My best guesses so far have been "Elsses", "Elzzes", or "Elcces", but that doesn't really turn up anything useful. This doesn't surprise me much, though, because looking at the font of "Top Security" tells me that this is probably a pretty simple lock from a Chinese manufacturer. Given that it's probably a basic 5-pin pin-tumbler lock loaded up with standard pins, which as you can probably imagine conflicts a bit with the "Top security" statement on the face of the lock, but that's a typical thing these manufacturers do.

I also wouldn't be surprised if the shackle was made from regular non-hardened stainless steel. It's also likely that it used a regular latch on the inside instead of a ball-bearing, thus making it vulnerable to shim attacks. These two points being the most important since thieves will typically gravitate towards the quickest and easiest ways to get past security instead of taking the time to learn how to pick.

In the end, it's an image that I see has been used for a number of posts and articles relating to security online. I wouldn't be surprised if the manufacturer didn't even exist anymore today.

Oh. Sorry, you were asking about password managers. I guess I got a little distracted. I use BitWarden. It's pretty good.

[–] RobinFood@lemmy.world 3 points 1 year ago

I’ve been using Bitwarden for years and also use the Apple password manager on my phone and iPad so I have a copy in case something happens.

I also keep some less sensitive work passwords on chrome because I don’t want to open Bitwarden at work.

[–] floppingfish@lemmy.world 3 points 1 year ago (2 children)

I've used Keepass or Keepass XC for years. They are great!

[–] IAmBread@lemmynsfw.com 3 points 1 year ago

And, since KP is offline, you don't have the same security risks as the cloud hosted password managers. If you were really paranoid, you could put your KP database file on a USB so it's never online.

Plus, even if someone were to somehow acquire a current version of your database file, it's heavily encrypted. By the time they crack it you should've changed your passwords anyway.

load more comments (1 replies)
[–] Stagirite@lemmy.world 3 points 1 year ago

Keypass is my ninja. I'm never not using a password manager.

[–] guybrush@lemm.ee 3 points 1 year ago (1 children)

KeePassX(C?) both on Windows and Linux. I used the windows version KeePass2 but there was a recent security vulnerability in it so I switched to KeePassX. Maybe it's already patched... auto-type doesn't seem to work in KeePassX on Windows so I might switch back but it's not that critical.

load more comments (1 replies)
[–] tudisco@lemmy.world 3 points 1 year ago

I appreciate Enpass because it allows me to decide where my data is stored while simultaneously synchronizing across all my devices. It's quite impressive. Now, they have incorporated Wi-Fi sync, which eliminates the need for cloud-based synchronization.

[–] SharkyPants@lemmy.world 3 points 1 year ago (2 children)

I would recommend one but I have always been wery about sending password data through the internet to be stored on some companies server. So I put in the effort to host my own Vaultwarden docker instance through TrueNas scale (True charts) on my home server and access it via a VPN tunnel (Wireguard). It's very complicated to setup compared to a web service but this way I own all of my password data locally. The android app (Bitwarden) works alright but sometimes it has trouble understanding what is a login screen and you have to force fill things. Vaultwarden as a docker instance works great. The only time this setup needs to be on VPN is to save a new password. Using existing passwords seem to be cached on my device.

load more comments (2 replies)
[–] ThatBaldFella@lemmy.world 3 points 1 year ago

I couldn't imagine not using a password manager anymore, so I'd certainly recommend it. At work we use 1Password, and I use NordPass privately. Both are great IMO.

[–] xb4r7x@lemmy.world 3 points 1 year ago

Absolutely worth it. It's the only way to actually adhere to password best practices.

[–] lemminer@lemmy.world 3 points 1 year ago

Self custody is something you need to keep in practice. I use keepassXC everywhere.

[–] renaldo@lemmy.world 3 points 1 year ago

Password Store + OpenKeychain with syncing using git (forgejo) works very well for me

[–] BattleGrown@lemmy.world 3 points 1 year ago (1 children)

I've been using Microsoft authenticator for work, and since it was there I also started using it for my personal accounts and passwords as well. It works well enough, never had any issues.

load more comments (1 replies)
[–] Peeko@lemmy.ml 3 points 1 year ago

I've had enough friends and family members lose access to critical accounts due to things like changing phone numbers, and relying on auto-signin until their cookies get cleared, that I've begun just recommending password managers to everyone.

But alas, most don't listen.

[–] Ghostface21@lemmy.world 3 points 1 year ago

It's a must.

[–] aranym@lemmy.name 3 points 1 year ago

Bitwarden is great, have recommended it many times. It's extremely reliable, I have easily 100+ logins stored there and it loads them all instantly. Its premium features are nice (it's also very cheap), and the export feature allows me to move to another password manager if I feel the need.

[–] nx5qly@pawb.social 3 points 1 year ago (3 children)

Been using Bitwarden since 2017, I think.

I love it! I did use other password managers, but I ended up retaining Zoho Vault and KeePass. Zoho for work credentials while KeePass for archive and backup purposes.

load more comments (3 replies)
[–] rknize@lemmy.world 3 points 1 year ago* (last edited 1 year ago) (9 children)

Went LastPass (avoid) -> 1Password -> Bitwarden. Pretty happy with BW, as it has reasonable integrations on Android. Prior to that, i was using a UNIX tool called "pass", which used GPG and allow some degree of organization. I still use it for some stuff.

load more comments (9 replies)
[–] dan1101@lemmy.world 3 points 1 year ago (1 children)

I don't use a password manager, I don't trust the people that run them forever and I don't trust the software to be totally secure. I write them down, plus I have a mental system to generate passwords that I can usually rely on.

load more comments (1 replies)
[–] Whisper06@lemmy.dbzer0.com 3 points 1 year ago (1 children)

I use Firefox Lockwise and Apple passwords. Whether or not it’s safer is a plus but I just like my passwords being autogenerated and saved, makes life easy. Yes I understand that once they have the password to that account they have all my passwords but the same could be said about an email.

[–] M0oP0o@mander.xyz 3 points 1 year ago (3 children)

Yes the same could be said about email, but that does not make it a great idea. I don't think putting all your bets on apple/firefox never having a breach or issue is the best idea. As all your passwords are autogenerated and stored, you don't know what they are and can not use them without the manager. I can not in this day and age assume any company or group no matter how good and noble will be around/competent/not evil tomorrow.

load more comments (3 replies)
[–] jg1i@lemmy.world 3 points 1 year ago

I pay for 1Password for families. Everyone except one person uses it. The person who doesn't use it is always getting locked out of his accounts....

I also use 1Password to store what information I've given a website. That's come in handy when I've needed to change my phone number, email, or credit card.

load more comments
view more: ‹ prev next ›