this post was submitted on 02 Aug 2025
745 points (98.9% liked)
Open Source
39552 readers
261 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 6 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
KeePassXC: A modern, secure, open-source password manager that stores and manages sensitive information offline.
Mixed with syncthing to sync your database file across your devices and its chef's kiss
but don't forget to exclude your key file from sync
My only complaint with KeePass is that if any corruption occurs, your passwords are borked. I use KeePass for non-critical accounts, like Lemmy, etc. I don't trust myself or the sync enough for storing my bank or other identity passwords.
I have used KeePass for many, many years and have never run into this. Besides, I usually have a copy of the database on some other device so I'm not too worried
Syncthing means it and its backup lives on two laptops, a desktop and my phone.
Beware that syncthing is a bad backup strategy as it will update to sync the broken file (or even file deletion). I advice to do some other sort of backup. Even a simple shell script that copies selected folders into selected location that you run from time to time is a better one.
Edit1: I've looked at my script, I use rsync for that.
Syncthing can easily be set to retain the last n copies. And you only need one or two to protect against corruption because you aren't editing a corrupted file. Likewise a lot of the KeepassX clients can snapshot periodically too. Been doing this for years with no issues over Linux/Win/iOS and Android.
As does syncthing under the hood. The issue is with backing up an open database and getting an inconsistent state, but KeepassXC keeps its database closed except on update. I also tick the backup old before save setting in KeepassXC (the aforementioned 'and it's backup') and use a versioning backup of the sync directory on the desktop with 3-2-1, so I am sanguine.
KeePassXC can automatically keep a backup when it makes changes.
You can toggle syncing only in one direction
I can also recommend Bitwarden which is a hosted password manager (enabling e.g. automatic sync). The commitment to FOSS is not as great (there have been some controversies AFAIK) but self-hosting is possible.
A little trick for people who are worried about putting business / work passwords in web-hosted managers such as Bitwarden: put just the username in Bitwarden, and put all the full information into KeepassXC.
Bitwarden will recognize the site and fill in the username - meaning you are at the correct site and are not being phished. Then, you can fill in the password from KeepassXC. This gives the benefits of browser-based managers while keeping more sensitive passwords (and recovery info) local-only.
If it is only about fishing, why not use the KeePass browser plugin? That can also autofill by domain.
Good question - does the browser plug in sync to the internet or is any part of it internet accessible? I've not used it. I just know a lot of people are put off by the idea of their passwords being "in the cloud" or otherwise accessible through the internet. Looking at the add-on for Firefox, it looks like it communicates with the local keepassxc instance, which should be fine for many people.
Thanks. I was not aware of this option.