this post was submitted on 05 Jul 2023
1520 points (98.5% liked)

Android

28035 readers
194 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

[email protected]


founded 1 year ago
MODERATORS
 
(page 7) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 5 points 1 year ago (3 children)

I personally use Firefox's built-in password manager and it works great for me. I use Relay to generate email masks and enter in random passwords that are saved and synced across my devices. It's been very helpful!

load more comments (3 replies)
[–] [email protected] 5 points 1 year ago

1password family user here. I cringe nowadays when people still try to remember their passwords and accounts and say they have a "good" system. It's a necessity nowadays. Sounds like the consensus favorite around here is Bitwarden. Anyone wanna tell why they prefer it over 1password? Is it because it's self-hostable?

[–] [email protected] 4 points 1 year ago (2 children)

I recommend one. Try to get one without a subscription. I bought the pro version of Enpass before they put up a subscription wall, and I've been riding that one ever since.

load more comments (2 replies)
[–] [email protected] 4 points 1 year ago

There are a lot of people recommending a very specific program in this thread. Be skeptical, everyone. Do your research on the strengths and weaknesses of these types of tools, and the specific offerings of all current leading services.

[–] [email protected] 4 points 1 year ago

Anyone not using a password manager is shooting themselves in the foot and often time not realizing till its too late. Along with that sign up for a service that notifies you of data breaches, I think bitwarden has one built in (might only be for subscribing members though) and there is always https://haveibeenpwned.com/

[–] [email protected] 4 points 1 year ago

Keepass with syncthing is GOAT

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (2 children)

I don't use them. I see this as a putting all eggs in one basket strategy, if my master password was lost, hacked, hosting company shutdown, or for whatever reason refuse to do business with me, my entire life would be screwed.

Instead I use long passwords made of words, and for each site it will be a few letters off. They're easy for humans to remember because how similar they are, but due how hash works they are equivalent to unique passwords to hackers.

[–] [email protected] 4 points 1 year ago (9 children)

Hashing only works if the website stores their passwords correctly. If a single website you use doesn't hash passwords correctly, and gets their database leaked, then your passwords will all be leaked. Changing a few characters per site may help a bit, but it shouldn't be relied on.

Also, if you're worried about the host shutting down, you should try bitwarden. It's completely open source, and you can self host it if you want.

load more comments (9 replies)
load more comments (1 replies)
[–] [email protected] 4 points 1 year ago

I just use the chrome password manager, works great and seamlessly transitions from Android to desktop. I used to use KeePass, but the convenience of the built in tools in chrome just works really well, especially after moving over from iOS.

[–] [email protected] 4 points 1 year ago (9 children)

I would love to use one, but to be honest, I have not found one that I trust, so far.

The perfect "password manager" would require 2FA, has some kind of "online backup" (cloud) that I can host myself and has to be open source. So far nothing really seems to offer all this.

load more comments (9 replies)
[–] [email protected] 4 points 1 year ago (2 children)

Having a password manager is incredibly useful when someone dies and you need access to their accounts. I think bitwarden and probably others lets you grant emergency access to someone, definitely leaving it in my will.

load more comments (2 replies)
[–] [email protected] 4 points 1 year ago

Password managers are a great tool for digital hygiene. The main way an average Joe gets his accounts taken over is because it reused the same user and password combination.

[–] [email protected] 4 points 1 year ago (4 children)

I toss my KeePass file (encrypted database) in Google Drive.

That way I have all the convenience of syncing through the cloud, but I also get the benefit of having my database access and database storage be managed by separate companies.

If Google has a breach and my data gets leaked, sucks, but the database is encrypted so I’m good. If KeePass encryption is broken, sucks, but attackers would also have to find a way to gain access to my Google Drive.

load more comments (4 replies)
[–] [email protected] 4 points 1 year ago (2 children)

Yeah I use Lastpass, it's very useful. I'd like to switch to something FOSS and locally encrypted, but honestly I've tried a couple times and never got it working properly, meanwhile Lastpass always works. I hate their blinding white UI lol.

load more comments (2 replies)
[–] [email protected] 4 points 1 year ago

I use pass which is a frontend for GnuPG. It's sort of primitive and I had to write user interface for it but it's super flexible. Since every password is saved in encrypted file syncing is easy and we use Git to share company passwords amongst ourselves.

[–] [email protected] 4 points 1 year ago (1 children)

I kinda don’t trust em tbh.

load more comments (1 replies)
[–] [email protected] 4 points 1 year ago

Keepass with key file. I synchronise only the database with cloud servers while the key file stays on my devices and never gets synched. I think that's a good tradeoff for security and convenience.

[–] [email protected] 4 points 1 year ago

I personally use pass, which uses gpg for encryption and can also use git repositories (I use it with my personal gitea instance).

[–] [email protected] 4 points 1 year ago

Just moved from bitwarden to proton pass, so far so good. Would recommend keepass, bitwarden,1password but definitely not lastpass.

[–] [email protected] 4 points 1 year ago (4 children)

I use 1password. I heard that Apple uses 1password internally. I figure their IT guys are more expert than me, a random internet dude. So I chose 1password. Works great on desktop, mobile, and even Linux. Family plan is a good deal. You can even share passwords between users for common things like bank accounts, etc, between family members.

load more comments (4 replies)
load more comments
view more: ‹ prev next ›