I currently use Syncthing to keep my Keepass database updated on my phone, laptop, and home server. Any change anywhere is instantly sent directly to the other 2 devices.
Comment on Passkeys might really kill passwords
Heavybell@lemmy.world 4 months ago
Until someone can explain to me how I can transfer, manage and control my passkeys without syncing them to some hostile corporation’s cloud infrastructure, passkeys will remain a super hard sell for me.
DemBoSain@midwest.social 4 months ago
drengbarazi@lemmy.world 4 months ago
this is the way
you can even tweak folders to either send or receive only on some devices
plus if you really want to be safe you can set file versioning and ignore deletes on a folder to make it strictly backup on more than one device
no internet connection required, you can set it all on lan
I think it is my favorite open-source project after Torvalds’ creations
Heavybell@lemmy.world 4 months ago
Yeah, I do the same but with nextcloud.
fedroxx@lemmy.world 4 months ago
How’d you get nextcloud actually working? I’ve tried a few times and it was never stable.
Heavybell@lemmy.world 4 months ago
I use the ebuild on Gentoo, combined with some custom nginx config, and a dedicated php-fpm instance just for Nextcloud. Never tried using any of the Docker packages for it so I can’t comment on those.
Updates involve merging the new package and running webapp-config to link the files into place, running occ upgrade, and refreshing ownership of the php files. Never had a serious problem with it.
boatswain@infosec.pub 4 months ago
Does KeePass support passkeys?
Spotlight7573@lemmy.world 4 months ago
KeePassXC is working on it but I haven’t seen anything about the original KeePass.
csolisr@communities.azkware.net 4 months ago
Can you use SyncThing along with Nextcloud? I currently use Nextcloud to store my data, but the one part where it still lags a bit behind is on Android specifically (you need to manually sync certain changes).
DemBoSain@midwest.social 4 months ago
I don’t know anything about Nextcloud. Syncthing is open source, and there are a couple of Android apps. I use Syncthing Fork and don’t have any problems.
Landless2029@lemmy.world 4 months ago
KeePass
Self hosted password keeper
Heavybell@lemmy.world 4 months ago
I already use KeePass, but as far as I know it doesn’t do passkeys, only passwords?
Spotlight7573@lemmy.world 4 months ago
I haven’t seen anything about the original KeePass supporting them but KeePassXC is working on it:
Heavybell@lemmy.world 4 months ago
I have been super hesitant to look into KeePassXC, should I give it a chance?
Of course, unless I can also access these features on my phone it doesn’t really matter…
ikidd@lemmy.world 4 months ago
Bitwarden does passkeys supposedly. Haven’t tried it myself yet because I don’t know what to make of passkeys.
Spotlight7573@lemmy.world 4 months ago
Currently Bitwarden’s passkey support is limited to the browser extensions not the apps but from my experience it works relatively well. When logging into a site you just select the passkey from the extension popup and it logs you in.
Example passkey registration:
- Click create a passkey button in the accounts settings page
- Bitwarden extension pops up with a list of matching accounts
- Select the account in your password manager that you want to associate the passkey with
- Click Save passkey button
- The account now has a new passkey associated with it that’s stored in your Bitwarden vault
Example login:
- Click sign in with passkey button on the login page
- Bitwarden extension pops up with a list of matching accounts from your vault
- Select the account you want to sign in with
- Click Confirm button
- You’re signed in
Flying_Hellfish@lemmy.world 4 months ago
Depends on where the line is as far as evil goes. Most of the popular password managers are now starting to support passkey login.
EngineerGaming@feddit.nl 4 months ago
I draw the line at the password manager being fully local.
Tau@sopuli.xyz 4 months ago
Browsers can save them and extensions like, KeepassXC, can behave like a passkey provider
Heavybell@lemmy.world 4 months ago
That’s something, but isn’t half the benefit meant to be storing them in the TPM? Also, that won’t help if you’re logging into a game or app, surely? Would love to be wrong on that, of course.
Spotlight7573@lemmy.world 4 months ago
Many apps now do the ‘app opens the browser for login’ process instead of having the login in their actual app. They don’t have to implement all the different ways to log in then, they can just use the same system that their normal account management stuff on their site uses.
You can get greater security with hardware-backed solutions like a TPM but the adoption rate was not great. I think the goal is to improve things over passwords, even if the credentials are then available on multiple devices via a sync or a password database file. Perfect being the enemy of good and all that. Hardware options still exist and you can still use them; they use the same WebAuthn standard that passkeys use.
Tau@sopuli.xyz 4 months ago
Also, that won’t help if you’re logging into a game or app, surely?
MicroG has added support for passkeys already
IHawkMike@lemmy.world 4 months ago
Yeah, I personally will only use hardware solutions for passkeys – YubiKeys and TPM-backed WHFB creds.
But the other reply makes a very good point about adoption being more important than perfection since, even with software-backed passkeys, you still have the benefit of the secret never leaving the client.
johannesvanderwhales@lemmy.world 4 months ago
You can create passkeys on individual devices without cloud syncing them.
frizop@lemmy.world 4 months ago
Enpass stores the passkey in their db, can be used cross platform and has browser extensions and local (or WiFi) syncing.
TreeGhost@lemm.ee 4 months ago
You can use Bitwarden to store passkeys. Not sure if the self hosted solution has support for it yet though.
sailingbythelee@lemmy.world 4 months ago
I must admit that, despite reading about passkeys a bit, I still don’t understand the actual practicalities. I seem to recall that Bitwarden can store keys, but can’t generate them. If that’s true, who generates the passkey?
Spotlight7573@lemmy.world 4 months ago
Bitwarden can both generate and store them in the browser extension. It can also use them through the browser extension but it can’t yet use them through the mobile apps (they’re working on it).
Zeroc00l@sh.itjust.works 4 months ago
Bitwarden pro right? ($10 for the year, totally worth it). My mobile app can create/use them already too.
TheOneCurly@lemm.ee 4 months ago
Vaultwarden does at least, I’ve been using it with passkeys for the last couple months and it’s been great.
csolisr@communities.azkware.net 4 months ago
VaultWarden user here - yes you can now use your own self-hosted server to store passkeys and that’s a gigantic game-changer. Just install the BitWarden add-on on a recent version of Firefox and voilà
subtext@lemmy.world 4 months ago
2024.1.2 released with self-hosted server passkey support.
TBH though I would not trust myself to self host my keys to my digital life when the alternative is $40/year for the whole family. You may have a different perspective though.
csolisr@communities.azkware.net 4 months ago
You can just use something like YunoHost, and synchronize weekly encrypted backups via Nextcloud or Syncthing to all of your computers. That way, if your server ends up busted for whatever reason, you can just restore it elsewhere and go back to business