712
you are viewing a single comment's thread
view the rest of the comments
[-] ocassionallyaduck@lemmy.world 31 points 2 months ago

Keepass vault synced over syncthing.

I keep not regretting it.

[-] druidjaidan@lemmy.world 105 points 2 months ago

This is incredible

Right next to each other lol

[-] Cris_Color@lemmy.world 12 points 2 months ago

Syncthing fork seems to still be under active development

[-] cyberwolfie@lemmy.ml 31 points 2 months ago

Was going to be my solution as well, bjt Syncthing-Android just got discontinued.

[-] ocassionallyaduck@lemmy.world 15 points 2 months ago

F-Droid syncthing-fork is still actively developed and had a patch in the last few weeks.

So hopefully this isn't the end.

[-] _edge@discuss.tchncs.de 2 points 2 months ago

What? I need syncthing-android, where is it going?

[-] ocassionallyaduck@lemmy.world 12 points 2 months ago

F-Droid syncthing-fork is still actively developed and had a patch in the last few weeks.

[-] _edge@discuss.tchncs.de 2 points 2 months ago
[-] Routhinator@startrek.website 2 points 2 months ago* (last edited 2 months ago)

I've always loved Keepass, however I moved away from it in 2012 as it and any file based vault has brute forcing issues. You need to track every copy of it that has been made and if any copy falls out of your hands, like if you lose a device, you need to do a password rotation on 100% of your passwords. Since its a file, its not possible to prevent brute forcing.

[-] ocassionallyaduck@lemmy.world 1 points 2 months ago

An online database is still a file ultimately. A SQL or other DB file stored in a webserver, accessed through a web interface.

Vaultwarden, etc, are the same, only the database file is less directly visible IMO. Keepass IMO is simple. The DB in a bespoke format, stored outside the application.

You could put the vault in system32 and name it "trustedinstaller.log", and if someone saw you had keepass they wouldn't even know where your vault is.

Given the number of well documented breaches of online password vaults, I would much rather do a private device to device sync via syncthing and keep it out of webservers.

this post was submitted on 20 Oct 2024
712 points (100.0% liked)

Technology

60083 readers
2726 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS