DEV Community

Cover image for Password manager recommendations?
Jess Lee
Jess Lee

Posted on

Password manager recommendations?

Password managers are one of those tools that people don't tend to swap around because it can be a real pain. I have hundreds of credentials and going through the process of setting up new passwords is something I don't have time for, and only consider when my password manager has an outage. Like today.

We set up our password manager years ago and now I'm wondering if it's time to switch to something else. What are your suggestions?

Below are two open source password managers I'm looking into:

GitHub logo buttercup / buttercup-desktop

๐Ÿ”‘ Cross-Platform Passwords & Secrets Vault

Buttercup Desktop

Buttercup for Desktop - Mac, Linux and Windows

Buttercup Latest version Chat securely on Keybase Discuss on Reddit

Buttercup Desktop screenshot ยฒ

About

Buttercup is a free, open-source and cross-platform password manager, built on NodeJS with Typescript. It uses strong industry-standard encryption to protect your passwords and credentials (among other data you store in Buttercup vaults) at rest, within vault files (.bcup). Vaults can be loaded from and saved to a number of sources, such as the local filesystem, Dropbox, Google Drive or any WebDAV-enabled service (like ownCloud or Nextcloud ยน).

Why you need a password manager

Password management is a crucial tool when you have any online presence. It's vital that all of your accounts online use strong and unique passwords so that they're much more difficult to break in to. Even if one of your accounts are breached, having unique passwords means that the likelihood of the attacker gaining further access to yourโ€ฆ

GitHub logo bitwarden / server

The core infrastructure backend (API, database, Docker, etc).

Bitwarden

Github Workflow build on main DockerHub gitter chat


The Bitwarden Server project contains the APIs, database, and other core infrastructure items needed for the "backend" of all bitwarden client applications.

The server project is written in C# using .NET Core with ASP.NET Core. The database is written in T-SQL/SQL Server. The codebase can be developed, built, run, and deployed cross-platform on Windows, macOS, and Linux distributions.

Developer Documentation

Please refer to the Server Setup Guide in the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great information to get you started.

Deploy

docker

You can deploy Bitwarden using Docker containers on Windows, macOS, and Linux distributions. Use the provided PowerShell and Bash scripts to get started quickly. Find all of the Bitwarden images on Docker Hub.

Full documentation for deploying Bitwarden with Docker can be found in our help center at: https://help.bitwarden.com/article/install-on-premise/

Requirements

โ€ฆ




Latest comments (130)

Collapse
 
jatin2856 profile image
jatin sablok

I am using avira password manager.

  1. Its free.
  2. Secure.
  3. App and desktop extension available.
Collapse
 
fredbrooker profile image
Fred Brooker ๐Ÿ€

KeePass and UPM

Collapse
 
shostarsson profile image
Rรฉmi Lavedrine

I had a look at Buttercup and I like the UI.

Nevertheless, I am using KeepassXC because it is a well-known open source Password Manager and it works properly on Linux, Mac OS and Windows and it has a very good mobile application.
On Android I am using Keepass2Android.
You can send your password database on your device through the File Manager which is supposedly secure.

Collapse
 
shostarsson profile image
Rรฉmi Lavedrine

I looked at Buttercup since the beginning of the project.
It is indeed very beautiful designed.

I personnaly am using KeepassXC as it is widely available on a lot of OS and widely watched by the community. Which is very important for a Password manager.

Collapse
 
stojakovic99 profile image
Nikola Stojakoviฤ‡ • Edited

On macOS I use KeePassXC which is community edition of KeePassX and on Android I use KeePass2Android. Database with passwords is stored on Google Drive so I can sync them easily + it's stored on Dropbox too just in case.

Collapse
 
markel profile image
Markel F.

I personally use BitWarden and it works perfectly. If you upgrade to the premium version you even have a 2FA code generator. I haven't used Buttercup ever, so I can't tell you.

Collapse
 
nuculabs_dev profile image
Nucu Labs

If you need an open source and robust password manager I'd suggest KeePassXC. It's cross-platform, free and written in C++: github.com/keepassxreboot/keepassxc

Collapse
 
devfanooos profile image
FaN000s

I am using encryptr. You can give it a try. (spideroak.com/encryptr/)

Collapse
 
itachiuchiha profile image
Itachi Uchiha

I can't be using applications like this. I think I don't trust these kind applications. I remember my first Hotmail password. But if you asking how you store them, sometimes I'm using KeePass. Mostly I prefer to save them to my brain. I know, there are many useful shortcuts in these applications that my brain doesn't have.

I prefer KeePass.

 
moopet profile image
Ben Sinclair

I've never used it so I don't know. Is there anything about the UI that makes it easier to use, or do you just mean eye candy?

Thread Thread
 
alex_barashkov profile image
Alex Barashkov

Can't compare it properly with LastPass because I switched 2 years ago.

  • auto copy of one time passwords
  • on iOS now keyboard has integration with third party password managers
  • ability to create custom fields and store important docs such as id, certificates etc
  • password share with family
  • my wife is non tech person but she did not have any problem with 1password and migrating all her passwords from notebook to a better place ๐Ÿ˜„
  • onboarding instructions are good, even if there are a lot of security measures
  • clean look, easy navigation and search on all platforms

I'm the guy who always complain about things, because still a lot of problems everywhere. But I can't say anything bad about 1password.

Thread Thread
 
moopet profile image
Ben Sinclair

I also am currently not using LastPass, but these apply:

  • ability to create custom fields and store important docs such as id, certificates etc
  • password share with family

These two are opinion-based and I think the same about LP:

  • onboarding instructions are good, even if there are a lot of security measures
  • clean look, easy navigation and search on all platforms

I don't know about iOS integration (or what you mean by keyboard integration), and I can't speak for your wife!

Collapse
 
plaoo profile image
Paolo Monni

Bitwarden, my choice.

Collapse
 
snowleo208 profile image
Yuki Cheung

I am using keepass in my Linux, Windows and android! I am satisfied :)

Collapse
 
jerodsanto profile image
Jerod Santo

I'm a bit late to this party, but we had @perry_mitchell on The Changelog last week to dive deep on Buttercup and what it's all about.

We talked through encryption, security concerns, building for multiple platforms, Electron and React Native pros and woes, and their future plans to release a hosted sync and team service to sustain and grow Buttercup into a business thatโ€™s built around its open source.

Worth a listen if you're curious about an awesome open source offering!

Collapse
 
perry_mitchell profile image
Perry Mitchell

๐Ÿ™๐Ÿ˜

It was a great chat! We love building OSS and Buttercup is how we're satisfying our desire to create software. Let us know if you have any suggestions/critiques, we're always happy to hear new ideas.

Collapse
 
jess profile image
Jess Lee

Awesome, thanks for mentioning this @jerodsanto !

Collapse
 
moopet profile image
Ben Sinclair

It's been a couple of weeks since this was posted and it encouraged me to take BitWarden for a test-drive. I've been a long-time user of LastPass, which I have no problems with (and will happily fight anyone telling me it's insecure...) but after reading some of the comments here I thought I'd try out BW.

I can say that it's pretty good, and apart from a couple of tiny niggles (like the web vault keeps telling me I should verify my email address even though I have already done so) it's really nice.

The auto-fill feature is better than LastPass's too - it doesn't glitch out as much. Importing and exporting is comprehensive, too.

Some comments may only be visible to logged-in visitors. Sign in to view all comments.