pass VS KeePassXC

pass Reviews

KeePassXC Reviews

pass mentions (20)

• The notes field in iOS keychain items and the comments field in macOS keychain items are not the same thing

  Not sure of your technical chops... But I use passwordstore.org between all my devices (iOS/MacOS/Linux) that is PGP backed, and I sync them via a bare git repo I host. Does TOTP, text, password generation, etc... Source: about 1 year ago

• LastPass Shouldn't Be Trusted With Your Passwords

  If you're in a technical role you should be using https://passwordstore.org. Source: about 1 year ago

• What should I install on my extra laptop?

  You could host your home server for: VPN, passwordstore.org (how?), git, cloud, probably more. Source: about 1 year ago

• Ok, I may have gone on a little rant the other day but someone suggested I ask for help... So I'm asking for help.

  And if you'd like to store the token encrypted in password store, there's a helper for that: pass git helper. Source: about 1 year ago

• How to prevent 2FA + pw vault deadlock lock-out

  My password manager is secured using GPG. It's encrypted with two keys, one of which lives on my Yubikey (to access my passwords on my phone) and the other of which is on my desktop (as a backup). Presumably, the only way I'd get locked out is if my Yubikey is lost/stolen/broken and my desktop stops working and my local backups aren't working. In other words, not very likely at all. Source: almost 2 years ago

KeePassXC mentions (232)

• TOTP Codes in the Terminal

  KeePassXC[1] password manager supports TOTP and I use it for that purpose in addition to storing passwords. It never made sense to me to use an app like Authy. [1] . - Source: Hacker News / about 2 months ago

• Ask HN: Best Password Manager without cloud login?

  If you use KeePass, make sure you use the KeePassXC variant. KeePass is dead. https://keepassxc.org/. - Source: Hacker News / 3 months ago

• Help a noob out, please.

  For the internet, use a password manager like keepassxc with a strong password. Source: 4 months ago

• Google-hosted malvertising leads to fake Keepass site that looks genuine

  When you're at a point where you're relying on a display name to make security-critical decisions, you've already lost. Character substitutions like ķeepass or ƙeepass or keypass are at least possible to spot if you know the name of the product, but not the full URL. But there are many ways to create lookalike domains that don't change the product name: https://keepass.org https://keepass.net https://keepass.info... - Source: Hacker News / 6 months ago

• Google announces passwordless by default: Make the switch to passkeys

  > People love to hate on passwords but the reality is that for many circumstances (threat models) they are the best compromise. You can make them more than strong enough (take 32+ bytes out of /dev/random and encode however you like, nobody will ever brute force that in this universe) and various passwords managers solve the problem of re-use (never reuse a password). > And it comes with the benefit that you... - Source: Hacker News / 6 months ago