this post was submitted on 20 Aug 2024
193 points (96.2% liked)
Asklemmy
43808 readers
874 users here now
A loosely moderated place to ask open-ended questions
Search asklemmy π
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- [email protected]: a community for finding communities
~Icon~ ~by~ ~@Double_[email protected]~
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Eh, I don't trust any 3rd party enough to give them all my passwords and I don't trust myself enough to secure a server for self hosting a password manager.
I know all my passwords, can't forget em, no paper or notes, no repeat passwords.
Fucking THANK YOU.
A very good friend of mine doesn't use any password manager. I've often in the past told them why don't they? They argue that then all their passwords would be gone if they forget that one master password. Okay, I say, how the fuck is having to remember 1 password harder than having to remember 20 passwords?
Any good password manager nowadays also has an account takeover feature if you opt in. Basically your spouse / child / parent can take over your account to recover it for you if you canβt get in.
I had to save my wife's account before on 1password family. It worked nicely!
If you know all your passwords and canβt forget them, Iβm assuming your using some sort of pattern to remember them in which case you have a major issue in case of data breaches as your other passwords can be guessed.
Just as a heads up, sometimes the pattern is not that easy for computer to brute force. As an example, my old password contains a birth date but with an alternating shift making them a combination of digit and symbol.
The issue is if you are a) targeted, and b)involved in multiple breaches. If they can get the pattern, they potentially get everything.
Is it worth it? That depends. Are you willing to risk it NOT being worth it to a random guy in Africa earning a few $ a day?
Yeah, a fair point
Keepass. Password database is a local file.
Technically you could use PGP to encrypt a .txt file with all your passwords in it. Which would be more or less the same thing with a lot less polish to it.
Sorry, what is PGP?
PGP is 'pretty good privacy'; it's an encryption standard. It's not the best, but it's fairly easy to use, and it going to resist decryption pretty well, for most use-cases. The idea is that you have a public key, and a private key. The public key allows messages to be encrypted, while your private key allows decryption.
this is the way
Sorry stupid question, but how do I import my passwords from Proton Pass to KeepassDX?
I looked it up for you; you can export your Proton Pass database as a .csv file and then import it into KeePass. Not sure about KeePassDX but on XC, there's a csv import option. There's also a json import option but it says BitWarden for that so I'm not sure if the json Proton Pass exports is in the same structure as KeePassXC expects.
Keepassdx is an android app for keepassdx databases with a nice ui. I use it too.
Thanks for the answer! Another question: does saving the data on KeepassDX keep all the passwords and such for me to import to other apps if needed? Or what does the file include?
You can export as csv, html, xml from KeePassXC. Dunno about DX but you can just try it on your desktop if it's not an option on mobile.
You know I'm looking up all these answers right? I don't mean to be rude but you can and should just look these up yourself. You can check import and export options by opening keepassxc/keepassdx and checking for yourself
Yeah, you're right. Sorry, I definitely have a tendency to treat Lemmy as a search engine sometimes. Nonetheless I appreciate you answering me!