Don't combine email, password manager, or 2FA authenticator together with the same company. All 3 should be completely separate from each other.
Bitwarden has a distinct advantage for this reason alone.
this post was submitted on 17 Jul 2023
19 points (88.0% liked)
Technology
58061 readers
31 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Am I a boomer for still using KeepassXC synced via Dropbox?
It works but partitions can and will happen and a merge afterwards is non-trivial AFAIK.
KeepassXC + SyncThing in my case, to skip the middle man (Dropbox/Google drive)
Do you encrypt it before syncing in Dropbox? Or just raw .kdbx and password (+ key)?
Bitwarden because it is open source.
Both are open source
Thanks for all comments and opinions. I'll give a chance to bitwarden.
I love Proton but I don't use their password manager because I use Proton for email (and calendar, and VPN, and cloud storage). If my email gets compromised somehow, I don't want my password manager compromised too.
I use protonpass for alias email and bitwarden for passwords.
Why not simplelogin integration in Bitwarden? The first comes as part of your assuming proton unlimited package
Just got an email from proton today about their "lifetime deal" for proton pass I currently use bitwarden and Firefox relay but I've been debating trying to drop my Gmail account and switch everything to my proton account. Thinking it would be silly to pay Firefox $12 a year just for relay when I can get that and more from proton for the same price.
All of that to say how exactly does the email alias work and can I set a custom email subdomain to just have an alias get created whenever an email is sent to the email I give someone without me having to go manually create it?
I like Bitwarden because I can host my own server and control it all. Not sure if the other service does set-hosting. Maybe you can do the same with that?
I've been thinking of setting up my own server. Does hosting your own server feel secure? I feel capable of setting up my own server but I'm not sure if I trust myself to secure it appropriately.
KeepassXC
Bitwarden is what I am using and I am having no problem with it so far.
Been using Bitwarden and Firefox for years and years. Never had any integration issues.
Bitwarden isn’t a brand new solution. I don’t understand the comment in Firefox, though, Bitwarden has no issues with it that I’ve found.
I've used Bitwarden heavily in various browsers and Android. It's really great and very effective at filling in passwords. Every now and then there's a site that does something weird to make it autofill a bit wonky, but I can only recall seeing that happen with registration forms (sometimes the enter + confirm your password fields seem to confuse it). It's near perfect at sign in forms that I've used.
There are issues with Firefox private browsing windows that don't happen in Chrome. Quoting their help article:
- Your vault will lock every time the browser extension closes, unless you set vault timeout to Never.
- Unlock with PIN will work only if the Lock with master password on browser restart option is not selected.
- The badge icon will not update to show vault state (locked or unlocked).
Not huge issues, but definitely annoying on a daily basis.
I don't have experience with the second point but the other two don't happen to me; it works as it should.
Really? With Firefox in a Private browsing window - are you certain?
Here's mine, with the vault currently locked, but not showing any locked state (point 3):
And for point 1, just unlock the dropdown extension, exit the extension window, then click on the icon again. It will be re-locked when it shouldn't.
If you're really not seeing this, would you mind telling me how you fixed it?
I missed that you said in private tabs. I can reproduce it there but BW also says that private tabs support is still experimental when you try to do it.
Been a longtime user of Bitwarden (free, and over the last year paid). It's a straightforward/good but a bit boring UI, connects very well and easily into browser, phone etc. Works well, highly recommended, and having 2FA on paid version is awesome.
Been trying out Proton Pass for the last few days since I already pay for Proton Unlimited. It's got a good UI and so far it's been working well in Firefox and on my phone. It's much better integration with Simple Login features so I like the slightly more seemless sign-up ability. It's not 100% feature parity with Bitwarden paid though.
Bottom line - I prefer proton pass as a heavy proton user already BUT if I just wanted a standalone password manager, Bitwarden is probably better. Both are good options though, and competition is good.
(Possibly a silly question: Is there anything wrong with a boring UI? What makes a good UI not boring?)
Nothing wrong with a utilitarian boring UI/UX. It's not going to be a determining factor but a nicer looking and feeling experience is...nicer.
I was just about to ask this too. I think boring is better than complicated, Especially for something you use everyday and that too, on autopilot a significant amount of time.
I subscribe to both services, and each has its own unique advantages. Proton's ability to generate disposable email addresses for questionable or bothersome websites is a standout feature that makes it worth the investment. Additionally, Bitwarden's thorough third-party audit instills confidence, and its excellent autofill functionality coupled with the option to self-host data is highly appealing. Moreover, the ability to unlock your vault using a YubiKey adds an extra layer of security to Bitwarden. While Proton shows promise and has great potential.
I have all things in Proton except password manager. I'm already using Bitwarden, and I don't think keeping all your eggs in one basket is a good idea. That and I don't want to support it, as Proton should be focusing on improving their existing products instead of creating new ones.
load more comments
(2 replies)
Bitwarden+vaultwarden server = free enterprise access 👍
I love this. I have it running on my Synology which has native docker support, reverse proxied through a wire guard tunnel to a digital ocean droplet.
I prefer Bitwarden just to not put all my eggs in the same basket
I prefer proton pass since I pay for proton and get access to everything so it's convenient and it makes alias emails for me. It's usually better not to keep all your eggs in one basket though.
I think it depends on the mobile device you use. I've read that proton is better on iPhone and bitwarden doesn't integrate that well with it but it's seamless on android. I also haven't had any issues with bitwarden and Firefox and they've been my combo since I started using bitwarden a couple years ago. I haven't given proton pass a full on try yet though and I pay both companies for their awesome services so I'm a bit of a shill for both. I don't think you can make a bad choice here.
I use Bitwarden on iOS and have for years now. I have never run into any major issues. Occasionally I’ll have to jump out to the Bitwarden app to copy a password but that’s usually because the website I’m trying to log into has their form set up weird/wrong.
To be fair, I have to do this with Android sometimes as well
I was copying passwords and usernames all the time. This comment made me realize I didn't configure it properly
I use Bitwarden because it easily syncs across devices, and it's also more secure.
Do you have a source for the secure part?
Maybe they mean the security audits over the years: https://bitwarden.com/help/is-bitwarden-audited/
That can say something about the safety of Bitwarden, but it cannot tell you that Bitwarden is more secure than Proton Pass.
You could argue that there have more/fewer audits.
It’s a very reasonable choice to go with Bitwarden on the grounds that they have a longer track record with good audits and that you therefore trust them more.
Just don’t say that it is more secure unless you know it is so.