Comment on More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user

• OberonSwanson@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

  Any recommendations on how-to?

  source

  • treadful@lemmy.zip ⁨1⁩ ⁨year⁩ ago

    KeepassXC (desktop)/KeePassDX(mobile) on top of something like Syncthing or Nextcloud.

    source

    • OberonSwanson@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      Thanks for the suggestion, I’ll try checking out both options. Unfortunately, I have an iPhone, so sadly there’s no KeepassDX. 🤔

      source

      • treadful@lemmy.zip ⁨1⁩ ⁨year⁩ ago

        I think there’s probably a Keepass compatible iPhone app out there but I haven’t vetted it. Worth looking for though.

        source
  • hobbit@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Vaultwarden is what I use: https://github.com/dani-garcia/vaultwarden/

    Their wiki is pretty good assuming you’re comfortable with Docker.

    source

    • OberonSwanson@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      Interesting, I’ll check it out, as it looks like it’ll cover what I need. Hopefully it’s simple enough, as always having an iPhone makes things more complicated lol.

      source

      • hobbit@lemm.ee ⁨1⁩ ⁨year⁩ ago

        I host for my family which has a mix of Android and iPhone. So far, no complaints about Bitwarden on iOS. Hopefully it works out for you. If self hosting becomes a problem, I think premium is only $10/year and family is up to 6 people at $40/year.

        source
  • Potatos_are_not_friends@lemmy.world ⁨1⁩ ⁨year⁩ ago

    It doesn’t have to be difficult.

    1. Download keepass to your computer.

    2. Keep the save file on a USB or private cloud backup.

    3. Done!

    As you get more comfortable with it, you’ll start using it in more complex ways. Like having a phone app, connected to a self hosted network. But keep it simple for now.

    source

    • OberonSwanson@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      This might be a good idea for my family, they definitely prefer a K.I.S.S. approach lol.

      source
  • whileloop@lemmy.world ⁨1⁩ ⁨year⁩ ago

    If you wanna use KeePass, you just have to store your database in some secure location. It can be on your local drive or in the cloud, and location you trust really.

    source

    • OberonSwanson@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      Guessing it’s suggested to use a small flash drive and keep it hidden somewhere?

      source
    • Nighed@sffa.community ⁨1⁩ ⁨year⁩ ago

      You can set the encryption strength though, so I guess you could set it high and could even have it untrusted.

      Mine takes a while to open on my phone because of that

      source
  • linuxguy@lemmy.gregw.us ⁨1⁩ ⁨year⁩ ago

    Vaultwarden!

    source
• Ado@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Self-hosted with yubikey 2fa. Even Santa Claus can’t see my info 😎

  source

  • iHUNTcriminals@lemm.ee ⁨1⁩ ⁨year⁩ ago

    I should get around to doing this… But it scares me haha.

    source

    • Ado@lemmy.world ⁨1⁩ ⁨year⁩ ago

      I started out with the Yubikey, which was such a relief all by itself. Even if you have my password, you need my physical USB key to plug in or NFC confirm for the 2fa. I did later move to self-hosting, but I def have a backup of a backup for that since space is cheap-ish.

      source
    • olympicyes@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Not sure about that software specifically but most yubikey 2FA implementations allow you to set up more than one key. That way you don’t lose access if you lose your key. I personally have three keys.

      source