password manager free open source

I'd make sure you're using a reputable password manager. There are a lot out there. The one that I think is really interesting is Bitwarden because it's open source and it's free for everyday folks.

reddit.com › r/fossdroid › open source password managers (questions)

r/fossdroid on Reddit: Open Source Password Managers (Questions)

November 18, 2023 -

Question 1

Bitwarden and (I believe) KeyPass seem to be the most popular among the members in this community. I was wondering if there was a particular reason for this because I'm still learning about the open source 'ecosystem'. I tested both of them (and I personally love KeyPass), but I noticed some people recommending one over the other, so I was curious whether they were equally safe to use.

Question 2

I've heard of several other open source password managers that aren't usually mentioned here, such as AuthPass, LibrePass, and Passky, and I'm curious if they're safe. Are there any vulnerabilities associated with them, or are they simply lesser known?

Question 3

I'm talking to more serious instances, such as when someone installs a malware / untrustworthy application. Can other applications and services access the manager's data, or do passwords remain protected at all?

I'm still new to this community, and all I want to know is how to use my phone more securely. I hope this post (question list) doesn't violate any of the community's rules. :) Thank you in advance.

Top answer

1 of 3

Bitwarden and (I believe) KeyPass seem to be the most popular among the members in this community. I was wondering if there was a particular reason for this because I'm still learning about the open source 'ecosystem'. I tested both of them (and I personally love KeyPass), but I noticed some people recommending one over the other, so I was curious whether they were equally safe to use. Between Bitwarden and KeePass: Bitwarden is easier to use KeePass is more privacy focused Bitwarden is cloud based password manager (vault can be easily accessed from everywhere and every device) KeePass is mostly local based password manager (While you can achieve the same result with KeePass, it would require some additional work on your end) Personally I would recommend Bitwarden for beginners and KeePass for more technical users. I've heard of several other open source password managers that aren't usually mentioned here, such as AuthPass, LibrePass, and Passky, and I'm curious if they're safe. Are there any vulnerabilities associated with them, or are they simply lesser known? While I'm not familiar with AuthPass and LibrePass, I'm one of the developers for Passky (So my opinion of Passky would be more subjective - Take it with a grain of salt). Passky has more similarities to Bitwarden than KeePass as it's also cloud based password manager. Between Bitwarden and Passky: Passky is easier to use (subjective opinion) Bitwarden offers more features (objective opinion) Passky is more privacy-friendly (No telemetry included) (objective opinion) Passky is easier to self-host (objective opinion) Passky looks nicer (subjective opinion) Passky doesn't lock any security features behind a paywall, but rather limit users by amount of passwords that can be stored (objective opinion) Bitwarden is audited by 3rd party while Passky isn't audited yet (lack of funds for security audit on our end) -> Note that Bitwarden Server includes over 50 3rd party dependencies that might not be audited and can also be infected if developers of those 3rd party dependencies aren't careful enough. While Passky only includes 4 3rd party dependencies. (objective opinion) Passky uses XChaCha20 encryption and Argon2id hash out of the box, while Bitwarden uses AES-CBC 256-bit encryption and PBKDF2 SHA-256. COMPARISON (objective opinion) I'm talking to more serious instances, such as when someone installs a malware / untrustworthy application. Can other applications and services access the manager's data, or do passwords remain protected at all? Once your device is compromised, no matter what password manager you are using the attacker can extract all of your passwords as soon as you unlock your vault. While most malwares might be written to extract passwords from popular password managers (Bitwarden, Dashlane, 1Password, LastPass, KeePass...), they probably won't target less known password managers like Passky. LINK

2 of 3

Are you talking about KeyPass : https://github.com/yogeshpaliyal/KeyPass , seems like this password manager uses it's own password storage format called *.keypass. A more general and known password manager called "KeePass" is there, which uses open source file format called ".kbdx" : https://keepass.info/ . There are different password managers available for Keepass password manager ecosystem. For android I would recommend KeePassDX and for linux,mac,windows: KeePassXC. AuthPass is also based on kbdx(keepass), available for ios also. About why opensource password managers: As the source code is open, so it can be audited for vulnerabilities, can be reported/patched ASAP. In future for any reasons the original developer stops working on the project, you can compile it yourself and someone else can continue work on it. Free as in FOSS. I personally use Keepass, because it's offline, no storage on cloud, so no fear of passwords getting cracked. It has layers of authentication:keyfile,yubikey.

Discussions

Padloc: An Intuitive Open-Source Password Manager

Just to save everyone a click, this is a clone of Bitwarden, and costs (USD) $3.50 every single month.

No thanks. Lmao.

Videos