this post was submitted on 12 May 2024
1042 points (98.2% liked)
Open Source
29862 readers
335 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
KepassXC for PC and KeepassDX for Android phones.
I personally would recommend it over Bitwarden since with Bitwarden you NEED internet to access your passwords, and even if is open source, i canmot trust it, security breaches can happen in any time, having your vault locally stored helps a lot.
There are more but i can't Remember them right now.
I just tried because you made me doubt, but you can access your passwords offline with bitwarden. Your argument about trusting a third party is far more pertinent, i'm choosing to trust them but thats really my choice. It is also a limited trust: even in a case of a data breach, bitwarden is encrypted end-to-end with your password, even if someone gets access to your data they wont be able to read it without your master key.
I ran into issues when using Bitwarden for the first time, i don't understand why, i just like having my password vault close to me, KeepassXC and KeepassDX just makes things a little more painless
You don't need internet to access the passwords stored in Bitwarden if you have their local clients installed. It stores an encrypted copy of your database locally to your device which syncs (updates) over the internet.
It gave me trouble when i tried to log in ob my account, and i prefer having the database WHERE I CAN SEE IT
These would also be my top two apps. Absolutely essential pieces of kit IMO.
The android integration is just so good these days. Syncing is the only minor issue but it is minor.
Hoe do you sync it? I've been meaning to make the switch to these for a long time now, but still not gotten around to it.
I use syncthing (mentioned below)
I used to use Dropbox, but switched to Nextcloud years ago.
Do you use KeePassDX on Android? If so, how do you access the vault from Nextcloud?
I've been using KeePassDroid. Nextcloud has an option to set files to favorites which keeps them local on Android.
But how do you access the files from another app? Where are they stored? I have nothing in the com.nextcloud.client folder for example. Proton Drive mounts in the left-hand menu of Files. Would be nice if that was achievable with Nextcloud also.
EDIT: Turns out it does if there is no app passcode enabled. Not sure I am comfortable having that turned off though.
To be honest I use signal "message to self". I know there are better ways to do it but it's a very convenient way to transfer small files from my laptop to my phone securely.
You can self-host Bitwarden, and sync your vault to your phone. Maybe not an option for everyone since it requires some technical skills, but very doable.
Oh you just reminded me, KepassXC and DX Doesn't demand you to create an account and log in to access your vault 😄
Self-hosting KeePassXC requires installing one package and backing up one file. I expect that requires less technical skill and is doable for more people than to self-host Bitwarden.
I love KeepassXC, but I use Keepass2android on my phone. Do you know how it compares to KeepassDX?
KeepassXC honestly is more userfriendly IMO.
Don't you still need internet to access your passwords if you want to use Keepass across devices?
You don't. KeePass databases can be easily shared totally offline.
However, it all depends on "how easy" you want the sync to happen...
There are many ways to "sync" KeePass databases, basically you just have to copy password database among the devices, which can be done totally offline.
So, I'll just give one example.
If you have 2 devices:
You can use KeePassXC on the Linux PC, and KeePassDX on the Android Phone, and have a copy of your kdbx file (the encrypted database) on each device, manually copying the newer version whenever there are changes on them.
Issues that might happen: consistency between the files in case you make changes to both databases and forgot to sync manually previously. There's no easy way to handle this currently afaik if you are doing manual syncs... I'd suggest maintaining one of the databases as "kinda read only", not performing edits on it unless you can immediately copy it to the other one.
You can do the same thing above, but instead of manually copying the files among the devices you can use Syncthing... Or if you have a local Nextcloud server, you can use that to share the files, which is pretty easy to use to ensure consistency if you are using KeePassXC and KeePassDX, since if you open the database on Android using KeePassXC directly to the "file system" that links to the Nextcloud folder, it will always automatically retrieve the newest version to your device if there has been any change and if your local Nextcloud server is reachable, otherwise it just uses the local cache, and you will know it's using the local cache and was not able to sync.
Here's an easier option: Syncthing
Nope, sonce your Keepass database is store locally, all you need is Syncthing, you won't beleive how easy it is to use.
Can only second this
pwsafe too.
I will still prefer KeepassDX and KeepassXC