Hacker News new | ask | show | jobs
by armada651 1395 days ago
You can sync the encrypted KeePass database using Dropbox and then your zero-knowledge cloud storage won't just be theoretical.

Simply secure the database with a password and keyfile then copy the key file manually to your mobile devices and workstation.

That way you can be certain that your cloud provider has zero knowledge of your key file and also doesn't control the application in which you enter the master password.

4 comments

While this is true, and I did this for the better part of 2010s, it was pretty clunky. Especially if one needs a platform for their wife or children to also use.

I'm gonna ride out LastPass until webauthn really takes off. Which could be soon based on what we're hearing from the mobile vendors.

> Which could be soon based on what we're hearing from the mobile vendors.

I'd really like to see wider webauthn support, so I'm curious to know what you mean by what you're hearing from the mobile vendors please?

Yeah I'm definitely not saying this is the right solution for everyone, but for my personal password database I'm willing to sacrifice a bit of polish to make sure the zero-knowledge claim is iron clad.
You don't even need Dropbox, for a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
I've had multiple failures to merge (including corrupted databases) with keepass. I'm still using it but I'm considering moving to {bit,vault}warden
I sync my keepass using signal's 'note to self' feature.