Differences

This shows you the differences between two versions of the page.

--- security:password-managers [2024/07/02 23:08] – [Password Managers] Humphrey Boa-Gart
+++ security:password-managers [2024/08/06 05:48] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Password Managers ======
-A **password manager** is exactly what it sounds like: It manages your passwords. A good one will store them in an encrypted database somewhere, with options for 2nd layer security tools like hardware keys. Bad ones, like the ones found in web browsers, will just leave them lying around in the same directory on everyone's computer, ripe for extrapolation.
+A **password manager** is exactly what it sounds like: It manages your passwords. A good one will store them in an encrypted database somewhere, with options for 2nd layer security tools like security tokens. Bad ones, like the ones found in web browsers, will just leave them lying around in the same directory on everyone's computer, ripe for extrapolation.
-Not only will it store your usernames and passwords in a secure environment, separated from your web browser, but it will help you keep track of them as you accumulate more accounts at more websites and servers. There is an actual condition called [[wp>Password fatigue|Password Fatigue]], which is basically just like [[wp>Dunbar's Number]], but for passwords instead of people.
+A good one with not only store your usernames and passwords in a secure environment (and even [[diy:identity-management|compartmentalized environments]]) separated from your web browser, but it will help you keep track of them as well. This will be infinitely useful as you accumulate more accounts at more websites and servers. There is an actual condition called [[wp>Password fatigue|Password Fatigue]], which is basically just like [[wp>Dunbar's Number]] but for passwords instead of people.
-//**Note:** Many password managers offer the lovely "feature" of being able to tie them to your web browser with an extension. This completely undoes the security benefit of not having literally every single one of your accounts open to whatever gets into the browser (which in 2024 is one of the biggest attack surfaces of everyone's computer, tablet & phone). Your browser only needs what it is using on a regular basis (and many skilled Anons find their way around that as well) so you do not need to give it the proverbial **Keys to the Kingdom**.//
+//**Note:** Many password managers offer the dubious "feature" of being able to tie them to your web browser with an extension. This completely undoes the security benefit of not having literally every single one of your accounts open to whatever gets into the browser (which in 2024 is one of the biggest attack surfaces of everyone's computer, tablet & phone). Your browser only needs what it is using on a regular basis (and many skilled Anons find their way around that as well) so you do not need to give it the proverbial **Keys to the Kingdom**.//
 ===== List of Password Managers =====
+There are all sorts of password managers out there. Some of them are for web browsers. Others store your passwords in the cloud. For this list, we are going to be focusing only on local password managers with decent encryption and security options, as these will give you the most control over your own data:
+==== CLI-based ====
+  * [[https://www.passwordstore.org|pass]]
+==== With GUI ====
+  * [[https://keepassxc.org|KeePassXC]]
+  * [[https://bitwarden.com|Bitwarden]]
+  * [[https://www.pwsafe.org|Password Safe]]
 {{tag>Security Tools}}

User Tools

Site Tools

Differences