this post was submitted on 05 Jul 2023
1520 points (98.5% liked)

Android

28002 readers
391 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

[email protected]


founded 1 year ago
MODERATORS
 
(page 4) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 9 points 1 year ago* (last edited 1 year ago)

Yeah, that's pretty standard. You should have been using one for the past decade at least.

Edit: My bad. Still used to reddit

[–] [email protected] 9 points 1 year ago (4 children)

My goto is KeePass. Does everything I need. I like the use of hotkeys and the ability to have complete control over how the autotype works. Plus if you have a fingerprint scanner (phone or laptop or something) you can use autotype with that too. And the program is completely free.

load more comments (4 replies)
[–] [email protected] 9 points 1 year ago

Yes, and Bitwarden. Strong master password, with 2FA, and randomly generated passwords for the rest. For deeply personal apps such as banking I do have another localized system though. I moved on from LastPass and never looked back.

[–] [email protected] 9 points 1 year ago* (last edited 1 year ago) (1 children)

1Password since forever. Can’t imagine having to type passwords or remember them.

load more comments (1 replies)
[–] [email protected] 9 points 1 year ago

You should really use a password manager so you always have a secure and different password for each site

I recommend KeePass if you want to save your password locally

Or if you want something cloud based then I recommend Bitwarden You can even host your own instance

[–] [email protected] 9 points 1 year ago

Yes. I’m in the free KeePass ecosystem. Self hosted via iCloud and backed up to Proton Drive.

KeePass2Android no net on my Android.

Keepassium on my iPhone.

And KeepassDX on my desktop.

[–] [email protected] 9 points 1 year ago

Keepassxc for storage/backup and then I let the browser save the passwords I use. I like this setup.

[–] [email protected] 9 points 1 year ago (2 children)

I prefer a password with pronounceable content of nonsense words, separated by dashes, with some numbers and symbols in there somewhere. Such as: tostog-Meenish-flurbit-dalsag-3023# . It's long enough to be very secure, and easy to transcribe if I have to type it. None of the words are in a dictionary. I keep a big list in a note on my desktop, and peel'em off as needed, finally keeping the utilized PWs in Enpass.

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago (6 children)

I use KeePassXC and synchronise it with syncthing. This allows me to keep it off devices I have no control over (OneDrive servers) and also allows me to have per device version history.

load more comments (6 replies)
[–] [email protected] 8 points 1 year ago* (last edited 1 year ago) (1 children)

I used to use BitWarden but switched to 1Password about a year ago once I decided to buy a business account for my department at work (which gives every user a free family account)

1Password is fantastic. It stores more than passwords, it's fine tuned to do that, but really can be used to store anything securely. The dev team uses it to share secure .env variables and API keys for example.

One of the best features though is the ability to share secured links to VIEW passwords outside of your network. When a coworker asks me to share an account password I don't just copy and paste the username and password over email. I click share in 1Password and shoot them a link that only they can view (using email 2fa). I can also make more open links to shared credentials that expire (or until I expire those links myself).

The phone app works great and once you get it set up on one device it's easy to configure it on others.

load more comments (1 replies)
[–] [email protected] 8 points 1 year ago (2 children)

I use KeePass (more specifically KeePassXC). I manually copy my password files around like a caveman but I don't mind. At least my kdbx files are not accessible easily.

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago

Use whatever but also use 2fa as well for every important account that you have.

[–] [email protected] 8 points 1 year ago (6 children)

I've used LastPass in the past but now I use bitwarden, gets the job done

load more comments (6 replies)
[–] [email protected] 8 points 1 year ago (5 children)

What are my thoughts on a password manager?

I think it’s both a good thing, and a crutch. I feel the fact that most services are rendered unusable without an account is sad, and with the 100’s of accounts one is expected to have a password manager is sadly needed if you can’t memorize a password or can make passwords with a consistent pass phrase.

Do I use one?

Nope, I have a password system which is good enough for most accounts that’s always more than 7 character long and unique for each account without being lost to me. The only time it has failed as when my work decided to have us change our passwords every quarter, and I ran out of password ideas.

load more comments (5 replies)
[–] [email protected] 8 points 1 year ago (2 children)

I’d say they’re pretty much necessary so you can have unique, complex passwords.

I’m currently test driving Proton’s new password manager, I’ve been using 1Password for ages.

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago (1 children)

https://play.google.com/store/apps/details?id=keepass2android.keepass2android

Been using this for years. Hosted via ssh on my server in a ovh data center. Fingerprint access and every single account with a random password.

load more comments (1 replies)
[–] [email protected] 8 points 1 year ago (1 children)

Been using the keepass format with varying applications for about 14 years. I used to host it in SVN repo for that sweet sweet cloud access! Not that smart im retrospec.. I feel like you shouldnt trust your passwords to the cloud, especially if their thing is password management. Last pass for example is under constant battery from attackers.

load more comments (1 replies)
[–] [email protected] 8 points 1 year ago

Bitwarden, open-source, free, and awesome!!!!!

[–] [email protected] 8 points 1 year ago* (last edited 1 year ago) (2 children)

I've been a KeePass user for over a decade and it's always been good to me, especially when using Box and OneDrive to sync it between devices. The ecosystem is great with enough plugins and support to make it fit your use case on any modern OS.

Can't recommend it enough. Especially over other options that are offered by a commercial company (LastPass for example). Not only because you're intently placing your trust in them to not expose your data and keep it secure, but also because you're giving them a lot of leverage to turn around and hold your passwords for ransom at some point in the future (when they IPO for instance, as a popular example) or lock you out after they fold for whatever reason.

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago

Switched to bitwarden last October and couldn't be happier. Was previously just storing everything in chrome/my Google account. Reused the same password on pretty much every website. When I saw a few articless about chrome causing issues with ad blockers I decided to switch to Firefox which meant having to figure out my passwords. Decided that was a great time to figure out a separate password manager. I still occasionally run into websites I don't use often that still have my old password but for the most part everything is switched over and if 2FA is an option I have it set up. Going through my main sites was a drag but I felt so much better afterwards. I was really shocked at how many websites have really low limits on password length. And how some of the accounts I would really really prefer to have 2FA it's not even an option, looking at you banks.

My work actually just switched payroll companies and when creating my account I noticed the password field was 0/127 so of course I bumped up my password generator to 127 and maxed out the password field 😂

[–] [email protected] 8 points 1 year ago

Started with LastPass, used it for 10 years. Switched to Bitwarden a while ago, would never go back.

[–] [email protected] 8 points 1 year ago* (last edited 1 year ago) (2 children)

After using one for like 8 years I really don't know how people have the time/energy to make up and remember all their own passwords

load more comments (2 replies)
[–] [email protected] 8 points 1 year ago (1 children)

Started off with Lastpass free tier, then after they limited the free tier to only one device, switched to Bitwarden.

load more comments (1 replies)
[–] [email protected] 7 points 1 year ago

I absolutely use one and regret I didn't use one earlier. I remember so often how I had to reset my passwords for different sites. Now every password I super complex because I don't have to remember it.

[–] [email protected] 7 points 1 year ago (2 children)

Butwarden. Always Bitwarden. Just like almost everyone else in here it seems like.

load more comments (2 replies)
[–] [email protected] 7 points 1 year ago

KeePass. Putting your passwords on someone else's webserver is just asking for trouble.

[–] [email protected] 7 points 1 year ago (3 children)

I can't imagine not having a password manager. I even got my mom to switch to bitwarden. I'm not sure if I just don't know how to do it, but the only thing I wish I could do with bitwarden is share a password with another bitwarden user.

load more comments (3 replies)
[–] [email protected] 7 points 1 year ago (1 children)

Have been using 1password for about 5 years now and have not have a single problem. I really like the integration with browsers and the iOS app. I am keen on testing protons though since I use the VPN and email.

load more comments (1 replies)
[–] [email protected] 7 points 1 year ago

1Password for years, never had any issues.

[–] [email protected] 7 points 1 year ago* (last edited 1 year ago)

Perhaps a bit more technically involved for some tastes, but here's my setup –

I've used pass for the past few years, a command line based password manager that stores GPG encrypted passwords as text files in a git repository. I use it for more than passwords, so it's more like a passwords-and-other-sensitive-secrets manager.

There's no defined structure, that is left to the user to figure out, but the basic command to get a password and copy it to the clipboard simply grabs the first line of the file, which is where I insert the actual password. There's other info in there too, usernames, challenge questions, etc.

I push the git repo to gitlab, transported via ssh. On my phone, I use a client for Android called Android Password Store, which pulls from the git repository and has an easy interface for adding, editing, and accessing the passwords.

It costs nothing, stays backed up, and works pretty well for my purposes. Despite that, I was looking around to see if KeePass would be a better solution for me in any way, and found this cool thing, passhole, which provides KeePass with a CLI interface similar to that of pass, which is a big part of my attraction to it.

load more comments
view more: ‹ prev next ›