Password Manager

[raptor1956]

I just upgraded my phone to the Samsung S20+ after 5.6 years with the Samsung Note 4 and rather than copy all the crap I had on the old phone over I'm trying to pare things down a bit.  With the old phone I had a password manager which should probably remain nameless for security reasons but at some point the ability to backup the database to Dropbox was borked and I've been living with the possibility of losing all my passwords if the phone were lost or stolen or just died so I decided to upgrade to a new password manager and that's what I'm here to ask about.

Could I get some feedback on the best options for, ideally, a 100% free app to properly handle passwords in a secure way that would also permit, ideally, the installation of apps on my Android phone as well as my Windows 10 PC's.  This would best be done using a cloud based database so that several systems could use the same encrypted database and also have the added security so that if my phone was lost or stolen or died I would not lose everything. 


Brian

[enz]

I use Keepass 2 (https://keepass.info/) since a couple of years now and am very happy with it.
Runs on nearly every plattform.
Highly recommended.

[Daixiwen]

I use the open source Bitwarden which I can highly recommend too.
It has apps for every platform and save your passwords on the cloud, either Bitwarden's or your own server.

[Red Squirrel]

I ended up writing my own, since I wanted something that is hosted locally and is web based.  Could not find anything premade.  It's not fancy and probably not military grade secure but since it's local, if someone gains access to it I have bigger problems to worry about such as someone breaking into my house or compromising my network.

The nice thing though is I can access my passwords from any device/machine as long as I have access to my network.

[rdl]

The number of passwords I need to remember is pretty small, less than twenty, so I use a piece of paper and a Sharpie marker.

It's not fancy and probably not military grade secure but since it's local, if someone gains access to it I have bigger problems to worry about such as someone breaking into my house

 

[GlennSprigg]

I've written my own too!!!   
Let's face it, one doesn't have to be too paranoid to wonder what some developers
do/want behind the scenes, no matter what 'Algorithms' they 'purport' to use!!!

I have LOTS of logons/logins for all manner of sites/services, including eBay, PayPal,
various Banks, Forums etc etc etc. Of course, I don't use something Stupid like peoples
birthdays etc, but is a special system that no-one would ever understand!!
Still, I have my own personal software for storage/infusion, I laugh to myself, because
I know my coding is SO different from what exists, that is absolutely untraceable! 

[SerieZ]

I also use KeePass 2.
Have been looking into some others as well and most, while more Powerful areseemed not as easy to use and implement.

My needs:
- Only 1 User - Myself.
- Cheap (Without cost in this Case)
- Able to use and access/update it on Android,PC or any Linux connected to the Internet or without Internet with a pendrive/phone.
- I need it to remind me to change passwords/masterpw every once in a while.
- Customizable Passwords for Websites which ask for specific Criteria

The most important pw for stuff like Financial are all done with at least two Factor Authentication.
I believe this should suffice for a regular Joe like myself who is not a Millionaire. At least I sleep well at night 

[raptor1956]

Thanks for the input guys!


Brian

[retiredcaps]

I run keepass2 because I wanted an open source application that can run on a variety of platforms.

I recommend that you do not store your passwords anywhere in the cloud regardless if its encrypted.  It only takes an "oops" software programming moment in the past, present or future code and your cloud database password is potentially vulnerable.  While some would argue that probability is low, I will say it's non zero if it's stored in the cloud.

If you must, then I suggest 2 password databases.  One for non critical stuff (like forum username/password) and one for banking/financial stuff.  The encrypted banking/financial database stuff can be backed up onto an encrypted USB key and stored offsite like your parent's/friend's house.