KeePassXC VS Doppler

KeePassXC Reviews

Doppler Reviews

KeePassXC mentions (232)

• TOTP Codes in the Terminal

  KeePassXC[1] password manager supports TOTP and I use it for that purpose in addition to storing passwords. It never made sense to me to use an app like Authy. [1] . - Source: Hacker News / 2 months ago

• Ask HN: Best Password Manager without cloud login?

  If you use KeePass, make sure you use the KeePassXC variant. KeePass is dead. https://keepassxc.org/. - Source: Hacker News / 4 months ago

• Help a noob out, please.

  For the internet, use a password manager like keepassxc with a strong password. Source: 5 months ago

• Google-hosted malvertising leads to fake Keepass site that looks genuine

  When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / 7 months ago

• Google announces passwordless by default: Make the switch to passkeys

  > People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / 7 months ago

Doppler mentions (19)

• Keeping secrets out of public repositories

  If you’re asking yourself where you should be keeping secrets, you should be using a secrets manager. Two examples include Doppler (https://doppler.com). - Source: Hacker News / 2 months ago

• Ask HN: How do you get developers to trust your product?

  I'm a developer advocate at Doppler (https://doppler.com), and we are a secrets (API keys, certs, etc.) management platform. I create content that's aimed at informing readers about our product. One of the biggest challenges I've encountered is convincing developers to trust our platform in a world of zero trust. Since we store important and sensitive data, we are often asked about how we encrypt data and what we... - Source: Hacker News / 2 months ago

• Ask HN: Where do you save your API keys?

  Doppler (https://doppler.com) is my preferred tool for storing API keys. It centralizes where you manage all of your environmental variables and makes it so you never risk exposing your API keys in a code repo. There's a CLI tool that makes it easy to use all of your environment variables while you're developing and a ton of integrations for wherever you prefer to deploy your... - Source: Hacker News / 3 months ago

• A mistakenly published password exposed Mercedes-Benz source code

  It seems like they made a lot of assumptions that something like this wouldn't happen. They assumed employees would never leak secret information, and that their GitHub repos would never be exposed. They could've used https://doppler.com) and never had this problem. It's a little too easy to get comfortable thinking things work well the way they are. This should be a warning to other companies to seriously... - Source: Hacker News / 3 months ago

• A mistakenly published password exposed Mercedes-Benz source code

  It's absolutely nuts that a company like Mercedes-Benz isn't using some type of secrets manager (like https://doppler.com or AWS Secrets Manager) to restrict access to this type of data. It also seems like they have extremely bad practices if they're pushing passwords and keys to code repos. - Source: Hacker News / 3 months ago