Keepass it's simple and it has been audited.
this post was submitted on 26 May 2026
51 points (94.7% liked)
Fuck AI
7162 readers
1237 users here now
"We did it, Patrick! We made a technological breakthrough!"
A place for all those who loathe AI to discuss things, post articles, and ridicule the AI hype. Proud supporter of working people. And proud booer of SXSW 2024.
AI, in this case, refers to LLMs, GPT technology, and anything listed as "AI" meant to increase market valuations.
founded 2 years ago
MODERATORS
Password safe is the one i use
Does an "AI" password manager even exist? I'm pretty sure that's a terrible idea.
Of course, text prediction machines would create low-entropy passwords, that would be awful.
They mean "coded with AI".
Been using keepassxc for well over a decade and syncing with nextcloud, but yes syncthing works too. Only once did my database go corrupt, but I have zfs snapshot and nextcloud has versioning too so it was no big deal.
Hmmm I'm using vaultwarden. Its a fork of bitwarden that is opensource. My problem with it is that you have to use the bitwarden app. But it is opensource and as the web corrected me last week when bitwarden's CEO went Nazi, it is completely unrelated to bitwarden. Except that at least one of bitwarden's engineers who is not a Nazi but works for one is allowed to work on vaultwarden by that Nazi CEO.
Maybe not a Nazi, but the new CEO is a private equity type that tend to enshitify things. So he started by removing the 'always free" and changing the company's stance on supporting equality to nothing...so Nazi.
I like KeePassXC and SyncThing for my own use. I am not sure that I am ready to apply a no-llm purity test if a dev is using a model appropriately. If the code becomes obfuscated somehow, that would be another matter. In the longer term I hope FOSS devs do not come to rely on paid cloud models or favor code quantity over quality.
Then just the the normal/official KeePass client. Old as hell but probably therefore also AI free.
chipass is a strict no-ai fork of the last keypassxc version without ai code. it's got a banner warning that's it's in dev and may likely cause corruption so make regular backups of your db, but i've been using it for a week or so with no issues so far.
as for android, i'm using keepass2android as it's got a fancy cloud saving feature where i can keep the db saved in my nextcloud and easily sync the db on my desktop as well.
@nublug oooh, this needs to get added to the various no-ai lists out there
https://codeberg.org/small-hack/open-slopware
is what i use and is where i learned of chipass. notably they don't mention keepass2android either way so i just lightly poked around its repo and didn't see any sign of llm so went with it for now.
@MxRemy @fuck_ai I use and love "pass", a command line local password manager for linux. Instead of syncthing I use git to manage versioning and synchronization.
I know that's a super limited use case, but there are GUIs and TUIs available for pass, and other manager tools may be built on top of it, I'm not sure
keepassxc is fine.. i'm aware they're testing LLMs in the development process but last I checked it was sane enough and quite understandable
keepass
I don't know of any AI features in it but I could be wrong. I use Proton(after moving from 1PW to Bitwarden then to Proton): https://proton.me/blog/pass-open-source-security-audit
Does Proton's pw manager have any missing features at the free tier compared to Bitwarden? For example Proton Calendar paywalls the ability to color code events. Not much, but just curious.
I've no firsthand knowledge on it(went from paid BW to free Proton) but did find this comparison of features that seems to show what's added at each tier:
Battten down the hatches! Downvotes incoming!
Battten down the hatches! Downvotes incoming!
Battten down the hatches! Downvotes incoming!
Battten down the hatches! Downvotes incoming!
No AI, no database, no vault.
Self hosted (html only, zero dependency).
@vala whoaa what!! Lemme see if I understand this right... It's less of a password manager and more of a deterministic password generator? As in, it'll always spit out the same resulting password given the correct input passphrase + domain of the site being logged into? So you just essentially generate it again instead of ever storing it.
I'm so amazed and curious about this approach, what are the pros and cons? Obviously there's still the risk of someone learning your passphrase, but there's no hackable database of passwords. Do you get a different output from different variations of the same URL, like including a "/" at the end? What does saving the bookmark actually do, like pre-fill the URL field? Given that autofilling is supposed to be more secure than copy/pasting, is there some way to make this do that?
Sorry for the barrage but I'm very tempted by this one, it's neat!
Yeah that's more or less how it works. You generate it deterministically every time.
what are the pros and cons?
Not really sure of the cons aside from the fact that you get significant "vendor"/algo lock-in. You need the exact same algo this app uses to get your password back out (good thing it's GPL).
Do you get a different output from different variations of the same URL, like including a "/".
Yeah an extra slash at the end means a whole new password. The "name" is not really a "URL" per se. It can be any string.
So for example "lemmy.dbzer0.com", "vala@lemmy.dbzer0.com", and "lemmy.dbzer0.com 2" are valid site names and will give different passwords.
That being said I could see omitting some special trailing chars, protocol strings etc.
What does saving the bookmark actually do, like pre-fill the URL field?
Basically every parameter of the password generator is codified into the URL. So bookmarking a URL allows you to load a page with prefilled data like:
- Special chars
- Length
- Revision number
- Algorithm
- etc
These parameters are all required to be the same each time you need to generate the password. So it can help you avoid filling these forms each time + act as a reminder of what you used.
Given that autofilling is supposed to be more secure than copy/pasting, is there some way to make this do that?
It will auto-fill your master passphrase but if you mean auto-filling your credentials into sites, it would need to be made into a browser plugin to do that.
I have a password manager app that I've been "developing" since college. I'm not a cryptologist or an expert in cyber security. I haven't updated it in years, and it lacks basic functionality. I have no plans to update it in the near future, I have shiny new projects to half bake. But it meets your criteria
You can always go back to simple, yet secure, passwords you remember with your brain.
@rob_t_firefly is it still best practice to use a different password for each account though? Because I have probably like 300 of them at this point, and I don't think I could remember that many no matter how memorable each one is
It's still easy enough if you use a mental algorithm.
Say, for example, your chosen memorized password is "correct horse battery staple". Let's make that password different for every site and service you use without having to remember each one.
For instance, you're signing into your todon.eu account.
Now, let's say your favorite one-digit number is 5, because your Auntie Mabel's birthday is on the 5th and she always enjoys your visits.
Combine todon.eu and the numeral 5, by choosing the 5th letter in the address. That's N.
Now, to turn that N into an innocuous-looking word you can add to the others in your password. Going over to your favorite phonetic alphabet, you see that N is "November."
Guess what? Your secure password for todon.eu is now "november correct horse battery staple".
Signing into your old account on Myspace.com? Using the above pattern, your password is "alfa correct horse battery staple".
Once you get into the habit of doing this routine, it'll become second nature and you'll be able to figure out your passwords to anything without trouble, using just your one memorized stock password plus a simple memorized tweak.
You can also make your own rules for exceptions. Are you buying hacker magazines from 2600.com? You get to decide if you want to count the dot or the C as the fifth character, and what to type in for the dot. (Perhaps "dot.")