Hacker News new | ask | show | jobs
by egberts1 1118 days ago
I really really like Strongbox.

My only resistance from going the route of strongboxsafe is the lack of app-specific PIN, opposed to OS-specific PIN that is still missing from the free version.

While a master password covers the specific database, the PIN covers the app.

This is a problem for me there:

1. No OS-specific PIN/passcode in free version

  A wider acceptance should borne with this simple feature in the free version.
Also Netwrix is more enterprise-ready with their SOC 2, ISO 27001 and HIPAA ready but that is a moot point for most SMBs, SMEs, family-servers and homelabs.

I do do like the simple fact that Strongbox has it all out with their Github repository.

https://github.com/strongbox-password-safe/Strongbox
2 comments
ssbash 1118 days ago
You have two options:

1. Pay and support this small developer. A password manager is a critical tool that needs to be constantly updated to support the latest OS. This isn't Adobe, it's a bootstrapped indie developer making an app for a small audience. I think the free version is already quite generous. Plus Strongbox includes a one time purchase for all platforms, no subscription unlike 1Password or Bitwarden.

2. Compile and build from source. It's an open source app, you are free to sideload the app if you want to.

link
egberts1 1118 days ago
An excellent case for StrongBox Safe, support the indie who did all the hardwork. This would save you, the end-user, from having to do the following:

Sideloading a self-compile app for Apple ecosphere often requires a DUNS ID by Apple App store which in essence will plunge you, the developer, into a yearly subscription.

Sure that one can do a TestApp, but that one-time DUNS ID requirement still remains.

link
ssbash 1118 days ago
That is not true. To sideload an app a free Apple Developer is required. A 7 day limit is placed on that app before it has to be refreshed. If you pay for Apple's Developer subscription then that limit is increased to 1 year.

Alternatively you can use Altstore [0] and avoid paying for an Apple Developer subscription.

[0] https://altstore.io

link
egberts1 1117 days ago
Right. My bad: DUNS ID is only required if you want over the air (OTA) update to your Apple devices through the use of Mobile Device Management (MDM) tool. (I was looking for ease of use, easiest, that is.)

Was unclear on how to circumvent this DUNS ID for just the sideloading. of apps.

link
egberts1 1118 days ago
Oooooo, that is cool to know.

When you say refresh after 7-day, is the original installation of your downloaded developer app gets affected/disabled or that 7-day is just a time-limit on how often you can upload your development app?

link
Wevah 1118 days ago
The provisioning profile expires after 7 days; you can transfer your development app to your devices as often as you want. Not sure if you lose data, when the profile expires, though.
link
yunohn 1118 days ago
> I really really like Strongbox.

> still missing from the free version

The obvious solution is to pay. Any reason you are opposed to this?

link
egberts1 1118 days ago
Not for me. I am currently evaluating Strongbox and will consider a purchase of Strongbox Zero for seemingly unlimited use.

But for others, it should be a caveat that you would not get the full security provided by Strongbox Zero or Strongbox Pro.

link
yunohn 1117 days ago
> a caveat that you would not get the full security

Paying the developer for access to the full security version, while the free one has more than security than most actually use, seems reasonable to me?

link
egberts1 1117 days ago
ummm, and you expect me to evaluate a freebie that wont keep my password secured enough.

In short, make the leap before you really safely try it out?

link