KeePassXC VS Keycloak

KeePassXC Reviews

Keycloak Reviews

KeePassXC mentions (232)

• TOTP Codes in the Terminal

  KeePassXC[1] password manager supports TOTP and I use it for that purpose in addition to storing passwords. It never made sense to me to use an app like Authy. [1] . - Source: Hacker News / 2 months ago

• Ask HN: Best Password Manager without cloud login?

  If you use KeePass, make sure you use the KeePassXC variant. KeePass is dead. https://keepassxc.org/. - Source: Hacker News / 4 months ago

• Help a noob out, please.

  For the internet, use a password manager like keepassxc with a strong password. Source: 5 months ago

• Google-hosted malvertising leads to fake Keepass site that looks genuine

  When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / 6 months ago

• Google announces passwordless by default: Make the switch to passkeys

  > People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / 7 months ago

Keycloak mentions (4)

• Beyond the login page

  Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 5 months ago

• Okta Says Hackers Stole Data for All Customer Support Users

  Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 5 months ago

• I built a ready-to-use auth server with TypeScript and Express.js

  I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago

• Authelia is an open-source authentication/authorization server with 2FA/SSO

  A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / about 3 years ago