Use keepassXC instead. You don't need any kind of cloud for a password manager. Keepass database can by synchronized between devices with syncthing. Safer and free forever
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
Bitwarden offers this feature for free using custom fields, although 2FA is paid unless you self-host IIRC
I don't think that's where entrees go.
Hypothetically it should have. Those were additional fields that I added to the main account login entree, in order to keep all the relevant data in one place.
Strange, I keep my entrees covered in the fridge and take them out about one hour before guests show up.
Download BitWarden and be done with it.
Keepass is tried and true, I'm going back to Keepass.
Welcome back 👍
If you can, just self-host vault warden (compatible with bit warden and supported). Gets your data out of the cloud entirely.
I’m with you, but the hosted subscription is miles more secure than I can make my installation, and at $10 per year probably cheaper than the electricity to self host. Plus it supports the devs.
But I do make regular backups in case I need to migrate.
Your first point is debatable. You still have to trust them to be that secure, and you can't verify that. If they are ever breached, it's literally the worst case scenario. You can self-host their solution, but only in the enterprise tier (6$ per user per month). Also BitWarden is a target woth attacking, I am not. BitWarden hosts thousands of instances worthy of being attacked individually. A personal VaultWarden instance of "Mike and Molly Peterson" isn't exactly an attractive target. I do think they are pretty secure, but a single mistake with these stakes can have immense consequences. LastPass was also breached repeatedly, with a similar buiseness model.
The second point about electricity wouldn't be true in my particular case, as the server for self-hosting it is running anyway. Running VaultWarden or not doesn't change the power usage noticably. Obviously this is different for someone who doesn't just have a server at home running anyway.
Side note: I'm not actually running a personal VaultWarden instance, as my personal requirements are being met just fine with KeePass files. We do run an instance at work, but it isn't world-accessible (internal access only).
Have you considered upgrading to Proton Lux™?
Because a bunch of dementia patients started leaving 1 star review as they kept on forgetting their passwords
I know someone that signed up for an account with them, they froze it immediately for suspicious activity. He does nothing with that IP address, reads, social media, that's it. No way to get off the shit list without giving up personal information like a phone number and or alternate email and no guarentee that would fix it.
Their IP was on a blacklist from some shady company for some strange reason. But other companies let you write the company and plead your case, proton does not.
They further suspended a bunch of accounts based on some half baked unproven accusations by the government(s) if I recall.
They aren't trustworthy, they will give you up at the first sign of friction it appears.
That happened to me. I wasn't even on a VPN when I created my first and only Proton account, and within minutes they restricted it so I couldn't send any mail. They said I would have to upgrade to a paid account if I wanted to send mail.
I would never trust Proton after that. I'm just glad they immediately restricted my account instead of waiting until I'd switched everything over.
Check your ip against the lists of blacklists, there are sites that do it directly from the search page, there are a few dozen blacklists supposedly for spam and the like.
I suspect israel critics get dropped on them. A brazillian firm did the one we found.
Interesting theory and I've definitely made posts and comments critical of Israel. I've switched ISPs since creating that Proton account and I wonder if they'd restrict me again (not going to try though).
KeepassXC + Syncthing has worked fine for me for a few years. Sure, it's a bit of a hassle and not exactly perfect, but nothing is. I have control over my data and I don't have to pay anyone anything, that's enough for me.
Also, tasty entrees 🤤
I use KeepassXC with rclone, and that works well too.
Good tip, thanks
Pretty sure the warning signs were apparent when the CEO submitted to Trump. it just his "personal beliefs" and not representative of the company. Right.
The CEO was lobbying for online privacy by publicly shaming the Democrats. He was doing his job.
Wait the Democrats respond to public shaming? At this point I thought they got off on it. He was doing his job but, he was kissing fascist ass just like Google, Microsoft, and Apple have not lobbying for privacy.
Why is it that just doing their job excuse or just following orders tends to be associated with questionable actions as opposed to positive ones? It's starting to seem like a red flag if those two phrases get used for an action.
He made a mean tweet about the Democrats, it's not like he loaded bullets into ICE guns.
Complimentary remarks to Republicans depicting them as a party open to being privacy respecting and respect for the rule of law. Took the Joe Rogan hand book of trying to sane wash the Republicans and downplay concerns regarding them while trying to come off as moderate.
And it aged terribly. Someone who went to Harvard and spent significant time in the US wasn't blind to what those way less educated than him saw when it came to the direction the US was headed towards before Trump officially took office.
Dude, jfc calm down. You pay a little money to get premium services, instead of them monetizing user data. This is the way the world works with paid software, except they're not making money on your data and you, just you.
Maybe some context in what exactly you pay for would help too. I'm assuming you pay for a base tier of mail, bc I use their password manager too but pay for the full suite, and don't have this issue.
Maybe also a chat with support might find this to be an unexpected bug, but instead you're coming to Lemmy to the echo chamber of hate on proton which won't help.
I won't say your wrong, but IMHO it's unacceptable for a password manager to not warn you that information you give will be inaccessible without paying more money. Imagine if someone gave you 30 free entries before requiring a subscription, but let you add any number of accounts. Unless you want to reset all those passwords, your forced to pay them.
Their data should have been grandfathered in rather than locked out. Premium is a ransom with the lock out model
It is a shakedown to accept your data for free then charge you to access it later.
What the fuck else would you call that?
??? I use Proton mail and I never saw something like this. Account with nick, other mail, password and go.
It's in Proton Pass. When you create an account entree, there is an option to create additional fields that you can name and fill out, kind of like multiple notes in one file. Somehow I was able to create those fields on my account just fine, but then to be given access to that data it turned out that I had to upgrade my account. In other words they duped me into entering data at no extra cost, but then charged me to access that same data later on.
That's scummy as fuck.
I guarantee they do that on purpose just like all other scams that make you invest your time before telling you you need to pay.
I tried protonmail not for the privacy purpose but just to have a normal web email client.
After wasting an hour before finding out you can't disable the "sent from protonmail" footer without manually deleting it in each draft you make, I said screw it and deployed my own email server with stalwart lol.
It's receive only because outgoing SMTP is a pain to make reliable these days and my ISP blocks outgoing SMTP anyway, but for everything else I now use Thunderbird.
What do you mean? It's a slider setting you can thurn on or off individually for each address (if you want to keep it one one but not others). It's under identity and addresses.