Offline Password Keeper

1 view
Skip to first unread message

Harald Atta

unread,
Aug 4, 2024, 7:37:29 PM8/4/24
to apadmisna
Nobecause I want more features like comments or date when the account was created, and not to be tied to an eco system of a device/company. Also, be able to have all the passwords in one encrypted container which I can copy off of my device to another device.

self hosting

not interested in it, but I am curious, is it like installing the normal version of Bitwarden on PC and then pressing a button to start the self hosting service, or is it more complicated than that?


You can get a portable version of the Bitwarden Desktop app for Windows here. However, you will still need to register an account before you can do any testing, and you should be aware that the Bitwarden apps only run in off-line mode if the device is disconnected from the internet when you launch the app, and that while in off-line mode, the app is read-only (i.e., you will not be able to add or modify any vault contents).


The thing is: Bitwarden is literally a cloud-based = NOT offline-password manager. If you so much want Bitwarden, my advice would be: think about using an online-password manager. Because - offline or online: the security not only depends on that decision.


If I had that need for wholly off-line I think I would use one of the good existing solutions like KeePassXC (as already frequently referenced) with Strongbox or StrongBox Zero on iOS, Android being SEP.


A design strength of Bitwarden lies in its secure use of cloud sync. While I am in a position to host my own instance I could see no identifiable (real) security improvement at all, just more maintenance effort, so I pay my $10 very happily for premium.


If it were to be implemented, it should be under an advanced setting. With a warning saying that if turned on. That it would be up to the user to keep backups. As if users want to change devices, or if their device gets lost or stolen, there is no way to recover that vault without some form of backup.


The reason being is that some users do not trust the cloud. Even though Bitwarden is really secure because of the zero knowledge architecture and the vault being fully encrypted, even though with all that security there is no way of knowing that a data breach would never happen in the future as nothing is 100% secure.


Granted it could take years with all the encryption used for the vaults and also if the user has a strong master password. But cyber security is always evolving and we can never know what the future holds in a decade. That is why Bitwarden should have a future proof option.


Here is the surprise, literally every person in my life hate it too, but tolerate it since it is hard to find, so they just buy those earbuds that have a rubber tip that needs to be shoved deep in there. Eventually when it is not sold or too expensive to buy, I will bite the bullet and buy it. but they are horrible in hot climate.


but I doubt Bitwarden would implement this because they make money from being online, and I get it, in this case there are less people like us, but I hope this subscription trap ends. I am willing to pay USD 50 for the premium option of having it offline.


I am personally waiting for it to get a few more updates for the fully offline mode to become stable and for some UI design tweaks. Then I may switch over to Buttercup to make it my main password manager.


Dashlane is an impressive password manager that goes beyond basic password management. With advanced features like offline access, a VPN, and live dark web monitoring, it provides a comprehensive security solution. Plus, all paid plans come with a risk-free 30-day money-back guarantee.


I like how RoboForm offers the option of local-only storage, unlike most other password managers which require server synchronization. During my tests, I was able to use RoboForm offline, access my vault, and even make changes to my logins.


RoboForm is a cost-effective password manager with superior form-filling capabilities. Its offline mode, bookmark storage, and password sharing are really good. All RoboForm purchases come with a 30-day money-back guarantee.


The secure messaging app is my favorite Keeper feature. It uses end-to-end 256-bit AES encryption to protect all messages, ensuring complete privacy. I also like how it provides the ability to retract sent messages or set a self-destruct timer on them.


Additionally, importing passwords into Keeper proved to be exceptionally simple and convenient. The automatic import tool searches for all the accounts stored in your web browser and automatically adds them to Keeper. Keeper can also import passwords directly from LastPass, and while you have to use a CSV file for most other password managers, Keeper has very clear instructions on how to do this.


Keeper offers a free version with basic features, but its paid plans offer much more. The Keeper Unlimited plan, priced at PLN11.49 / month, offers unlimited password storage, secure record sharing, and access to the secure messaging app, among other features. The Keeper Family plan, which costs PLN24.59 / month, adds up to 5 licenses and 10 GB of secure file storage.


Sticky Password has all the basic password management features and adds some unique extras, like local Wi-Fi sync and a portable version of the program. Sticky Password also offers a 30-day money-back guarantee on all plans.


On the Admin site within the Forgot My Password self-service workflow, go to the properties of the Reset Password in Active Directory step. Select the 'Allow users to reset passwords offline' option to enable users to use the offline password reset functionality provided by Password Manager.


From your News Feed, click Admin Panel in the left menu. Click the People tab. Find the user account whose password you'd like to reset. Click to the right and select Force Password Reset. Force Password Reset? Click Confirm. Click OK.


By default you get a copy of your password by email. Using an email client like thunderbird and with an openpgp plugin like enigmail you can then access these passwords offline. This is far from the best best case scenario but this is something you can do right now.


In the next few weeks we will introduce a plugin for export import from LastPass, 1Password and Keypass, so you could use for example keypass to store a copy of your password on a usb key to access them during offline use. This feature will be first available for passbolt pro users.


In the long term we want to implement other mode of offline use, like allowing the passbolt application to work in the browser without being connected to the internet. This should come by the end of the year though.


The problem with the export/import functionality is that most of the formats it exports to are plaintext: the risk of users downloading a plaintext CSV file and leaving on their desktop is too high, so we disabled that function.


I comprehend the principle of client-to-server interaction. However, this does not preclude the option of having an offline password, potentially based on cached data, when the server or the connection to it fails. This feature is essential because, in its absence, the server represents a point of failure.


You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC is for people with extremely high demands of securepersonal data management. It saves many types of information, such as usernames, passwords, URLs, attachments,and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions.


Our Getting Started Guide walks you through the steps of downloading and installing KeePassXC for Windows, macOS, or Linux.Additionally, many Linux distributions ship their own versions, so in that case please check your distribution's packagelist.


Today, we are releasing KeePassXC 2.7.9 with many bug fixes and enhancements. Highlights include improvements to CSV and Bitwardenimporting, passkeys refinement, several UX issues, and improvement to using browser integration with the Snap distribution.


Today, we are releasing KeePassXC 2.7.6 with a few bug fixes and enhancements. This version fixes a crash onmacOS that occurred on exit. We also improved the visual display when dragging entries to move/copy, Quick Unlockis now automatically activated when unlocking for Auto-Type or Browser access, and the Auto-Type button and shortcutkey will be disabled when Auto-Type is turned off for the entry or group.


I have an Android smartphone, a Mac, an Android tablet, a Macbook and a Linux notebook. As I trust no other cloud than my own I only trust the Nextcloud instance on my own Server located in a datacenter, so I have a relient internet access.

Everybody talks about 2 factor and passkey authentication, but in case of my many devices I am afraid about synchronisation.

OK if I have a synchronisation a device can go lost or defect without problem. But what is when i.e. my NextCloud instance fails, get lost, get defect I have to have a reliable backup.


The are some solutions for Nextcloud, but as more as I read i am confused which one to use. And as I see thats all 2 factor solutions, but I am afraid, that if the second factor is i.e. my smartphone what if i goes lost, or damaged, stolen?


So anything accessible from the web can be hacked, in particular : passwords. Something that needs to be protected from hackers is your Nextcloud instance, because it probably contains sensitive info. Storing passwords in the very thing that should be protected is a very bad idea : in case it falls, the rest of your digital life falls with it.


I would advise you to use something like a security key (Yubikey is the most ubiquitous) to handle your second factor. You can have more than one Yubikey for offline backups. You can wear the Yubikey on your keychain or around your neck. The Yubikey will securily hold your second factor offline, has its own password, and can be used on Linux/Mac/Windows/Android/MacOS, through Yubico Authenticator app. This app is merely a GUI for the key, and will display the one-time password that the key computes through its internal cryptographic magic.

3a8082e126
Reply all
Reply to author
Forward
0 new messages