Conversation:
Notices
-
I switched to KeepassXC because of the browser extensions. However, once the extension checks and finds out there’s an updated version of the password manager, it refuses to connect to the old version. I need to file a bug, because I’m not about to install software that is not in the standard OS repositories.
-
Meanwhile, I still have KeepassX installed, so I think I’m going back to it.
Or, interestingly, there is now a version of Bruce Schneier’s Password Safe in the Debian & Ubuntu repos. I might switch over to that.
-
There's also regular Keepass, (keepass2 in Debian and Ubuntu), but it is based on the Microsoft dotnet platform, so it requires Mono. I try not to install #Mono on any non-Windows platforms (and it really isn't needed on Windows, since much of dotnet is already installed.
-
)
-
@mangeurdenuage @orekix@anime.website
> bug reports ... Github ... browser extension has brought a number of security issues ...
I haven’t checked. I’ll look soon. There are also some security risks involved in copying to the system clipboard, which is why finding a password manager that could directly talk to the browser became an issue.
-
@mangeurdenuage From what the KeepassXC site says, development in the KeepassX project is nearly dead. Not saying it is true, but there were a lot of fairly old patches awaiting action when I looked.
-
When working with family members and personal friends, telling them to use a copying and pasting password manager instead of the browser’s built-in password remembering function (or using the same password everywhere) is a losing battle. It is necessary for a good pwdmgr to have such extensions for browsers and certain other software.
-
@mangeurdenuage There are also some sites that try to prevent copy-pasting passwords. I think PayPal does this when people are changing passwords. It's evil, but if users have #JavaScript / #JabbaShit activated, sites can do things like this. I do agree that users need to be willing to think and to learn something when using computing devices. Trying not to have to think, not t…