Never used a password manager before, been dependant on my memory so far.
Are they something I should look into?
Discussion
I’ve used a few. Always a bit concerned about a centralized honeypot of passwords. I prefer to just change them frequently for important accounts 🤷♂️
bitwarden/vaultwarden
Absolutely 100% Yes…..
How many passwords do you remember?
I suppose i should look into this as well
Yes. I don’t know any of my passwords and that makes me feel good. I used 1password but recently migrated to self-hosted Bitwarden. 1password is excellent as a starting point. Everything is encrypted at rest and it’s *highly* unlikely that that service would be the point of failure in your personal security setup.
Should clarify: encrypted end to end, not only at rest! This part is crucial. Unless someone gains access to your account key (much like your bitcoin private key), even if 1password itself is breached, the data the attacker finds will be useless.
Which operating system?
Linux: https://apps.gnome.org/app/org.gnome.World.Secrets/
iOS: https://keepassium.com (Luxemburg)
Seconding the mentions of Bitwarden+Vaultwarden.
Self-hosted, works on every platform, includes 2FA.
Great password generator built in. Can't lose.
Yes
Bitwarden (for most) or Keepass depending on your threat model
Yes, I use vaultwarden.
It helped me. Before that when singing up to a new page or service it was a hussle for me now it just generate a long random one for me. It is also important so I left only my password manager’s password to my loved ones in case something happens to me so they can access my accounts without me.
They are useful if you use always the same device. If you use it in your PC, and you will want to enter an account on your phone some random day, you might wanna have a simple pass haha
Security and comfort are a trade off
Yes
1password looks the nicest, Bitwarden is open source and free.
Either or I think are sound choices for an online solution although it is pretty wild to think you trust an online service with access to your life...
If your paranoid like me there's offline solutions such as KeepassDX for android.
Both decent recs
I use one and generate random usernames and passwords that I can't remember.
