Whichever you choose just make sure to disable the automatic autofill.
this post was submitted on 09 Sep 2023
257 points (96.1% liked)
Privacy
31913 readers
583 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Isn’t that, like, the whole point of a password manager?
I would guess so, although the real purpose is likely to keep your passwords somewhere so that you can find them when you need them. I'm not sure why autofill is bad since your password manager generally already knows which password works on which website.
If an attacker compromises the page or does a man in the middle and injects a form that isn't displayed, it can trick your password manager to auto fill your login information and then send it anywhere. But that's just one vector and if an attacker has compromised the server, there are a number of attack vectors they could take.
load more comments
(1 replies)
load more comments
(1 replies)
load more comments
(3 replies)
I use KeepassXC for years, but lately I'm having problems connecting it. I use it only offline and the Firefox plugin doesn't work very well. It has many options, too many in my opinion. I don't like having my passwords in a company's cloud. The selfhosting is the solution, but i dont have to know
They forgot to include the best one: 1Password
yeah… you can’t publish a “the best” list like this that doesn’t include the most popular/well-know options without at least writing a little bit about why not those alternatives
to me, it feels a little less like a “the best” and more a “the best that happens to be developed in a reasonable OSS-friendly fashion”
I use ironvest, it's had two name changes now, was originally maskme and then blur. I'm sure I found it originally because of an article but I've never seen it mentioned since but for free it's done me well over the years.
Personally I'm using Dashlane, I'm pretty comfortable with it and as far as I know there have been no breaches in security
Dashlane is fantastic. I was a bit hesitant about the price, but it's so much sleeker and functional than everything else I've tried.