Where do you keep your secrets?
Where is everybody keeping their passwords, SSH keys, and other credentials?
I personally started to use GNOME Password Safe (linking my blog post with screenshots), because it does what I need and fits natively on my GNOME desktop.
What I also like is that it is offline-first with a simple KeePass file backend so creating a backup is as easy as storing a file somewhere. Bitwarden might be another fine choice, but it's Electron, which I don't like.
How do you keep up with secrets? Do you use something online?
Bitwarden rocks. Used pass for years, but Bitwarden is much easier to use with multiple devices.
I am using LastPass. I preferred the 1Password interface when my previous employer bought me a subscription, bu LastPass was free 😅 Can't complain though, does the job.
Same here, LastPass has been really good and I haven't felt the need to upgrade. LastPass also seems to work better than most when there's SPAs that don't refresh upon login/registration and those that have two separate screens because of SSO services.
I actually use a Nitro Key, great way of having the keys 'wherever' I go (basically my home and office computers). The Password Safe looks nice from the screenshots, at least nicer than the Gnome Keyring, I'll give it a try for sure
Nitro Key looks great. Can you describe how you use it in practice for every day use? Do you need to install something on the host computer?
Nothing special, just the standard PGP tools
1Password. The auto-fill features on web and mobile is just fantastic. It can also store 2 factor codes for you and auto-fill those in for you. Incredible fast to log into things. I also often use the password generator for new accounts, so my passwords are all pretty complex.
Thats really interesting Josef. I'm currently building Keepsy.app which I hope to finish in October. It's a tool I'm building that allows you to keep your secrets, passwords, important documents, insurance papers, contracts, photos, business files, last wishes and pretty much anything that is important to you. The great thing about this tool is you can setup a Buddy. A Buddy is a family, friend or legal advisor who can access your data in case something happens to you. This problem is based on a real problem I had in my family and continue to have now.
When my father passed away we had no idea how to access his email, phone or had any idea about his digital and non digital life. Now I'm a father and I'm living through the same problem. I'm building Keepsy.app. For the moment users can signup and I can notifiy you when we go live. If you are interested to know more about the tool please reach out.
Thanks
This is indeed a real problem.
Two questions.
1, What kind of encryption will you use? Will this be open source for people to vet?
2, How will you do confirmations about someone being deceased in different countries?
Hi @strzibnyj,
1/ Data will be encrypted using AES-256 encryption (AWS). All user passwords will be stored salted and encrypted in our database. Other user data is encrypted at rest in the cloud (AWS RDS). We will use 256-bit ECC keys for SSL, 50% longer and more secure than RSA. We will be Zero knowledge proof, that means we don't know what data you hold in our servers as all your data is encrypted using AES-256 encryption with a unique key for each user. For security reasons keys are held separately from your data in a different location. We don't sell or share your personal data with third parties.
2/ When you setup your new Buddy you can define an "Unlock Time", eg. 12 hrs, 3 days or 4 months. You Buddy can request access to your data through the Keepsy.app and we won't grant them access until the "Unlock time" has ended. During that time we will try to contact you via email (In the future SMS and Personal phone call). If you haven't responded in the time specified by you or you haven't blocked your Buddy from accessing your account we will proceed to unlock your data.
We also add an extra security measure which you can also define when you setup your new Buddy. You can define the time your Buddy has to look at your data eg. 1 week, 2 months or up to 12 months. After that time we will close your account and delete all of your data for your peace of mind.
If you have any questions @strzibnyj please reach out to me or you can signup on Keepsy.app to get notified when we launch. Is it something that you might be interested in using? Are you interested in being one of our first testers? We'll be giving away free access for life for our first 25 beta users. I am open for feedback ;-)
Thanks
EDIT: Sorry @strzibnyj, forgot to mention that for the moment it will not be open source.
Remember too that we want the user to be comfortable and decide for them selves how much data they leave on our app. They can also leave the data on a pen drive hidden in the cupboard and that can be an instruction for your Buddy to keep it on Keepsy.app. This has some advantages. But if you house burns down you've lost your data. If you decide to keep it on our app the advantage of losing it goes down.
Thanks for a detail answer.
This looks quite good. I think open source is not important for self-host (which is not a purpose of "what if?" service), but just to vet the implementations.
The time window is a good idea although if you could pull off official death confirmations that would amazing (but understandably tricky and "worth" it for you).
I think that there is a need for such a service. My own concern is that you are new and so it's hard for me to trust you with all my most sensitive data. I mean I use Password Safe offline now :).
I am also fairy young with no kids, but one day...:) Good luck!
Thanks for your feedback and kind words @strzibnyj. We have just opened Keepsy.app to Private Beta. If you are interested please signup.
Thanks again
1 Password for passwords for Mac OS and iOS Touch ID integration, works perfect!
Day One for my personal diary and reflections. I was struggling to find perfect not taking app, until moved all the personal stuff to day one.
Contracts, invoices etc in iCloud.
And the last thing is photos and videos, still storing in a .zip thinking about building an app for that 😢 crazy world we living
I have been using KeePass for a while. When I forgot my master password for almost a year I moved over to BitWarden.
Better question; do you store your master passwords somewhere outside your brain?
As of now, I don't. But it's a good question to ask yourself. Might store it somewhere offline.
Keepass for some of the serious secrets.
Last Pass also for serious secrets but not so - works well and fast with chrome extension. Easy to handle.
Yes, KeePass is not easy to pair with your browser. I let Firefox to store some not-so-important passwords to avoid typing them all the time.
I host my own password manager (bitwarden). Bitwarden's electron is just the desktop pp, I believe. I almost never use this app. The browser extension is the one I use almost on a daily basis.
I am strongly against in saving my passwords on someone else's computer (the cloud!) (I tried all of cloud version).
Yes, I would also prefer to avoid cloud hosting. One never know.
This comment was deleted 3 years ago
This comment was deleted 3 years ago
Do you know if the Linux app is native or Electron?
This comment was deleted 3 years ago
Unrelated question, just curious, why are you pairing Macbook with Android?
This comment was deleted 3 years ago