pass VS KeePass

pass Reviews

KeePass Reviews

pass mentions (20)

• The notes field in iOS keychain items and the comments field in macOS keychain items are not the same thing

  Not sure of your technical chops... But I use passwordstore.org between all my devices (iOS/MacOS/Linux) that is PGP backed, and I sync them via a bare git repo I host. Does TOTP, text, password generation, etc... Source: about 1 year ago

• LastPass Shouldn't Be Trusted With Your Passwords

  If you're in a technical role you should be using https://passwordstore.org. Source: about 1 year ago

• What should I install on my extra laptop?

  You could host your home server for: VPN, passwordstore.org (how?), git, cloud, probably more. Source: about 1 year ago

• Ok, I may have gone on a little rant the other day but someone suggested I ask for help... So I'm asking for help.

  And if you'd like to store the token encrypted in password store, there's a helper for that: pass git helper. Source: about 1 year ago

• How to prevent 2FA + pw vault deadlock lock-out

  My password manager is secured using GPG. It's encrypted with two keys, one of which lives on my Yubikey (to access my passwords on my phone) and the other of which is on my desktop (as a backup). Presumably, the only way I'd get locked out is if my Yubikey is lost/stolen/broken and my desktop stops working and my local backups aren't working. In other words, not very likely at all. Source: almost 2 years ago

KeePass mentions (206)

• Ask HN: Why do people use Password Managers?

  And the best part is there are solutions already that do this: https://keepass.info/ Does it work on Android or iOS? - Source: Hacker News / 5 months ago

• Ask HN: Why do people use Password Managers?

  The key difference here being that this is two way hashing so passwords can be decrypted. In reality, there are a lot of attack vectors like MITM, event logging or sometimes straight up storing data in plaintext. Through these hackers can generally get passwords of all users of these services. So, why don't people use local password managers? Just a txt file encrypted with "master password" should be pretty... - Source: Hacker News / 5 months ago

• Google-hosted malvertising leads to fake Keepass site that looks genuine

  When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / 7 months ago

• Google announces passwordless by default: Make the switch to passkeys

  > People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / 7 months ago

• If you cannot download any books, then you’re on one of the scam sites

  If you have used this combo at many sites (which is of course not recommended) then download one of the available free Password Managers like Keepass, Bitwarden, Lastpass or any others you can find with a Google Search. Source: 7 months ago