If you're seeing the latest LastPass incident and thinking you should get off hosted password managers, I finally got around to this last year after the previous major LastPass incident and I've been extremely happy with https://keepassxc.org/ with the password database stored on your file sync tool of choice (I use OneDrive and Syncthing but anything will do, it's just one heavily encrypted file). Keepass2Android is a better Android client than LastPass's ever was too.
And if you're thinking "I'm OK, I'm on 1Password," well, good luck with that, I'm sure *this* time trusting your passwords to a corporation will work out.
And if you're thinking "I'm OK, I'm on 1Password," well, good luck with that, I'm sure *this* time trusting your passwords to a corporation will work out.
@bodil How does it deal with merge conflicts on that single file?
@robryk Pretty well, in my brief experience.
Follow
@bodil I mean, when I add a password on two machines simultaneously eonugh, *how* does it handle the conflict? How is it even notified of the need to handle it? (Each file sync implementation has its own thing for that, and keepassxc's documentation doesn't seem to mention anything about the topic.)
@aredridel @robryk I never saw this, usually it looks for changes before saving and merges them cleanly. Idk how it handles actual conflicts because I don't think I've ever had any, but if you change different records on different machines it copes very well.
> but if you change different records on different machines it copes very well.
I strongly doubt that this works if the changes are simultaneous enough. In that case, the sync mechanism will end up with two versions of the file and have to do _something_ with them.
@robryk @aredridel KeePassXC doesn't do file sync, so it obviously can't handle file sync problems. I can only tell you this has never caused any issues for me, because I don't generally update my database from two devices at exactly the same time.
@robryk @bodil I used it briefly, and a failed sync wiped out a day's password changes. It's not designed for sync :/