Hacker News new | ask | show | jobs
by hosteur 3 hours ago
How does anyone trust ANY third party with all their passwords and encryption keys is beyond me.

Setting up KeePassXC is trivial.

6 comments

it's "trivial" in the sense of "I can launch the app in 2 minutes," but "non-trivial" in the sense of "I have a working, synced password manager across my devices with good security practices."
KeePassXC is not for a "normal" user. It really needs to get default entry tempates [1] out the door.

[1] https://github.com/keepassxreboot/keepassxc/issues/8228

I use KeepassXC, but I have no need to share passwords with other people. In a corporate situation that would probably not work as well.
Passbolt and Bitwarden can be self-hosted on top of offering the usuals pros like MFA, an API incl. integrations (e.g. https://external-secrets.io/latest/provider/passbolt/) and a better UX that does not involve syncing files between team members
E2EE done properly is why. See 1Password security whitepaper for how.
This. KeePassXC plus Google Drive client is all you need.