The most secure option is likely using something that’s encrypted and offline like KeePassXC. Even realizing the convenience is often the enemy of security, I can’t bring myself to give up cloud sync and mobile apps. The majority of people today have multiple devices. I couldn’t imagine trying to keep a KeePass vault in sync between devices even using a third party service like Dropbox.
Cloud Options
I’ve been using Bitwarden for a few years now and am satisfied with it. Occasionally, I’ll export to CSV that gets locked away in a VeraCrypt container but I struggle with doing regular backups and worry about somehow forgetting Bitwarden’s and/or VeraCrypt’s master passwords.[1]
Bitwarden is great however there was recent controversy over ‘always free’ being scrubbed from their website after a new CEO came aboard with a lots of experience with private equity and mergers/acquisitions. The company backpedaled after Reddit went a little nuts but people, myself included have begun to fear Bitwarden might start paywalling features similar to seemingly every other password manager.
Enter Proton Pass their free features seem on par and in some cases exceed Bitwarden. I trust Proton with my data as much if not more than Bitwarden.
Personal Thoughts
I’m not looking to jump ship from BW at the moment but I’m going to at least start using Proton Pass as a backup vault. Import BW weekly or what have you. I’ll figure out the specifics down the road.
Backups
All this leads me to ask my fellow geeks:
What do you use for password management?
How do you backup your primary password management system?
How many backups are enough?
Currently, I’m using Apple’s Passwords app to store BW’s master password AND 2FA key. This isn’t too swift but to be perfectly honest if someone has full unfettered access to my phone, I probably have much bigger problems to worry about then my passwords.
This did happen to me about 5 years ago. I got sick and couldn’t remember any of my passwords (along with a bunch of other stuff) for a good 3-4 months it was terrifying. Luckily, I figured out a way in eventually. ↩︎
I’ve been using Bitwarden and I’m very happy with it. I too have struggled with the inconveniences of using KeePass and similar offline password manager options. I just can’t stomach it, remembering my past travails using password/fingerprint-protected USB sticks with all of my codes (with multiple ones locked in a safe, just in case). I know at some point, once quantum computing ever improves, everything encrypted and password-protected will be replaced. Not looking forward to it.
I don’t use any password managers. I have 2FA for all of my accounts that counts.
My password for many sites where you need to log on is basically the same (I have few variables) but I use different emails/user names.
My bank accounts have an app to use the bank and another app to make the 2FA.
With PayPal I use finger print when on mobile and 2FA of on computer.
I’m lazy to make backups. I don’t have too many things to backup. My company data is backed up in cloud mostly. I do have some backups of my /home but not system. When I used Arch I did a backup every week because the system broke so often.
I use Bitwarden too. I have not tried it, but BW allows to setup a recovery logon incase you forget your password. But then again, you would have to remember the recoverry logon and password.
I like your idea of using Proton as a backup. I will have to look into it.
I second the choice of Proton Pass. I like its ability to create a passkey, too. So far, Proton as a company seems to meet its security obligation and is moving forward with its offerings.
I back up important data by copying it on an external hardrive, which is synced with Mega NZ in New Zealand. I don’t like automated backup programs.
I am old fashioned. I use vim with encryption and I also write it down on paper.
I can read my encrypted vim file on Linux or Android, and it gets backed up along with all other files.
With vim, I can view the unencrypted file content on screen without having to put the unencrypted version anywhere other than in ram .
I have no automatic sync.
[1]