Not sure if this is the right place to ask, but recommendations for personal and family password management?
I finally switched to Firefox on my phone, because Chrome “privacy”. And then when trying to find out how enable password storage, I accidentally set up Microsoft Authenticator as password management phone-wide. Realizing this meant cross-app password management, I finally accepted that my old approach of politely ignoring the problem and manually memorizing algorithmic passwords is no longer tenable. I honestly would prefer the anti-privacy approach where every service just uses oAuth and only one provider has my password, but we’re not there today, so time to learn the new tech.
So basically, what’s the current OSS best-practice for a one-stop-shop password management software? I know “OSS” and “big safe cloud storage provider” are kind of oxymoronic, but imho encrypted-cloud-storage is the best tradeoff between security and convenience.
And, ideally, something I could get my kids onto as well and manage some shared family-PWs as well, since I assume their password management strategies are either “reset every time” or “just use the same PW everywhere and it’s a ticking time-bomb”.
KeePass.
It’s got an app for basically all platforms, and you retain complete control over your data. Passwords go into an encrypted file, and you maintain that however you see fit.
I’ve used Bitwarden for ages and it fits your needs very well. Sharing the login info will allow the rest of your family to access the passwords and TOTPs too. Bitwarden does charge for TOTP use, but Aegis is amazing to use along with Bitwarden. You could setup Aegis on your device and then, if you wanted someone else to have access, you’d just export the data so they could import it into their Aegis app.
I love Bitwarden and you can self host Vaultwarden. I’m not sure how OSS it is however.
Hello
We are using for years home and business gnupg (for public/private keys) + pass + QtPass + git (for remote central storage). We are using it even as a team with shared keys.
Despite the breach, LastPass has been pretty solid for me for over a decade. Syncs across devices, easy sharing between family members, etc. If your master pw and iteration counts are in the green, even them losing your data is relatively low risk, apart from exposing the sites you have accounts for, which is equal parts privacy & security issue. If I wasn’t so invested in LP, I would probably go elsewhere but since the horse has bolted…
I’ve also heard good things about Bitwarden and KeePass but can’t speak to how easy they are to set up.
