19
submitted 1 year ago by Pxtl@lemmy.ca to c/sysadmin@lemmy.ml

Not sure if this is the right place to ask, but recommendations for personal and family password management?

I finally switched to Firefox on my phone, because Chrome "privacy". And then when trying to find out how enable password storage, I accidentally set up Microsoft Authenticator as password management phone-wide. Realizing this meant cross-app password management, I finally accepted that my old approach of politely ignoring the problem and manually memorizing algorithmic passwords is no longer tenable. I honestly would prefer the anti-privacy approach where every service just uses oAuth and only one provider has my password, but we're not there today, so time to learn the new tech.

So basically, what's the current OSS best-practice for a one-stop-shop password management software? I know "OSS" and "big safe cloud storage provider" are kind of oxymoronic, but imho encrypted-cloud-storage is the best tradeoff between security and convenience.

And, ideally, something I could get my kids onto as well and manage some shared family-PWs as well, since I assume their password management strategies are either "reset every time" or "just use the same PW everywhere and it's a ticking time-bomb".

you are viewing a single comment's thread
view the rest of the comments
[-] BuckShot686@beehaw.org 18 points 1 year ago* (last edited 1 year ago)

I've used Bitwarden for ages and it fits your needs very well. Sharing the login info will allow the rest of your family to access the passwords and TOTPs too. Bitwarden does charge for TOTP use, but Aegis is amazing to use along with Bitwarden. You could setup Aegis on your device and then, if you wanted someone else to have access, you'd just export the data so they could import it into their Aegis app.

Self hosting vaultwarden enables TOTP and other organizational features that standard bitwarden charges for.

[-] BuckShot686@beehaw.org 6 points 1 year ago

Good to know, I didn't talk about self hosting as it seemed like OP was aiming for it to be through a cloud provider. Its rad Bitwarden has both options and security is top notch either way!

[-] Pxtl@lemmy.ca 3 points 1 year ago* (last edited 1 year ago)

I mean I'm okay to self-host something if there's a secure and safe and automatically backed-up solution. But realistically that's just "3rd-party paid cloud" like DigitalOcean. I could run a service on the pi I use for files and minecraft, but I'd still have to figure out making sure the service is secure and backed-up.

edit: I guess hoping that vaultwarden-server was a nice easy package already sitting in the Debian apt repos was too much to hope for right?

edit2: wow lemmy really poops the bed at deleted replies with replies doesn't it?

[-] BuckShot686@beehaw.org 4 points 1 year ago* (last edited 1 year ago)

Sorry OP, I was trying to do a few things at once. But found this which should be helpful https://vaultwarden.discourse.group/t/installation-for-a-noob/1609

One of the comments provides a step by step guide for setup. If this sounds reasonable, then you could do it all here and you'd have no need for Aegis!

[-] Pxtl@lemmy.ca 3 points 1 year ago
[-] BuckShot686@beehaw.org 4 points 1 year ago

Yep, you sure are lol, I edit the previous comment and added a Debian install guide for Vaultwarden. My apologies for the mix up.

[-] Pxtl@lemmy.ca 3 points 1 year ago

no worries, thanks.

this post was submitted on 08 Sep 2023
19 points (91.3% liked)

Sysadmin

5574 readers
1 users here now

A community dedicated to the profession of IT Systems Administration

founded 5 years ago
MODERATORS