[grinsekatze]

I tried to convince my father to use a password manager and tried to explain that using the same 8 letter password for 75% of services is incredibly risky, but i got so much resistance from him .. in the end he wanted me to send him an article on why a password manager would be good. When I looked for something I could send him and thought about what I need to do to help him transition to using a password manager I realized that even though there are great services out there are I don’t want to be responsible for messing with his current way of doing stuff. So I let it go.

I use keepassXC (actually MacPass, which is brilliant and has an HTTPConnecter plugin that can talk to the Firefox addon keepasshttp) and it works great. Maybe not as fancy as 1P etc but free and open source. On iOS I use MiniKeePass which also works well.

This is the setup that I was going to suggest to him. Personally I find it not that complicated, just needs some time to get used to the routines.

[PuffinBlue]

Just make sure that the MacPass implementation of that HTTPconnector isn't listening on 0.0.0.0 by default.

Some implementations do and it has been patched in the main repo but didn't make it out to all users. Communication from KeePass/MacPass to the browser is just over http as the name suggests so passwords are sent in plain text and can be sniffed over the network.

If it's confined to localhost then you're fine as it's as secure as not having a compromised device in the first place.