Why you need to take back control of your synced passwords and how to go about doing that

https://www.neowin.net/editorials/why-you-need-to-take-back-control-of-your-synced-passwords-and-how-to-go-about-doing-that/

32 points · 13 comments · view on lemmy.world

13 Comments

ShutUpWesley@piefed.zip · 9 pts · 58d (4 replies)

A self hosted solution (like passbolt or Vaultwarden) is also a good choice, especially if multi user workflows are critical for you.

Creat@discuss.tchncs.de · 8 pts · 58d (3 replies)

Or just a keepass file in a network or NextCloud share. Works perfectly well for any number of devices, but obviously can't do sharing of secrets to others.

ShutUpWesley@piefed.zip · 3 pts · 58d (2 replies)

That works, but makes it more difficult to manage which individuals /groups have which passwords.

Creat@discuss.tchncs.de · 8 pts · 58d (1 reply)

As I said it's probably the best/easiest solution for individuals, but unsuited for groups or families.

42firehawk@fedinsfw.app · 1 pts · 58d

I mean what I have is multiple database files I mean I just have multiple databases in use for that. I have my accounts, a "shared with partner." and a "friends" database. It works decently well just have to set default for passwords to save on mine, and then use sync thing to sync between my devices to the home pc, and just Google drive for others.

nymnympseudonym@piefed.social · 8 pts · 58d

Note: article is about syncing eg betwen Chrome and FireFox

lka1988@lemmy.dbzer0.com · 7 pts · 58d

This is essentially what I did. I exported my passwords from Firefox, Chrome, iCloud, and even my work stuff from Edge; then imported all of it into my KeePass database, under their own folders.

I'm slowly clearing out duplicates and outdated credentials from each "browser export" folder, and sorting current passwords from them that weren't already in my database. It's a pain in the dick, but absolutely worth the trouble.

Kirk@startrek.website · 2 pts · 58d (5 replies)

Bitwarden is so worth it

Mac@mander.xyz · 9 pts · 58d (4 replies)

Bitwarden, the company that onboarded ptivate equity and removed inclusion and transparency?

Railing5132@lemmy.world · 5 pts · 57d

Even with the current situation involving bitwarden's on boarding of a vulture capitalist, the product is still a dramatic security posture increase from storing credentials in any browser pw store. Then once in there, tackle the re-use/weak/exposed issue.

Shooting the baby out of a cannon with the bathwater is peak "I don't have shit to get done" energy.

Kirk@startrek.website · 1 pts · 57d (2 replies)

nope not that company

Mac@mander.xyz · 2 pts · 57d (1 reply)
Kirk@startrek.website · 1 pts · 57d

still nope