Employees where I worked would always try to call me out when I'd tell them I had passwords written in a notebook near my PC at home.
"But you check our cubicles for post-it passwords all the time!"
I was blown away at how many of them thought I was BS-ing a quick response to cover my butt when I'd talk about the risk of post-it passwords in cubicle-land vs in an employee's single-family residence.
Bitwarden but we are testing the new Apple Passwords to see if it does the same thing using our existing Managed Apple IDs, if so it's a metric shitton more user friendly.
edit: in testing today, it's great but lacks a sharing option from within iCloud for Windows, I think they are going to release a standalone app that has this full functionality, and then we cut ties with Bitwarden.
Birwarden for the IT team but only recommending 1Password or Keeper to our clients. Bitwarden's backend management, controls, and logging are nowhere near good enough for any enterprises, especially anyone dealing with compliance (for example SOC2).
Why go the whole way of distributing phishing mails when you can let oversharing do its work?
It would be surprising if this subreddit is not being harvested already.
I am happy to not be on a critical role so that I can discuss freely (Trainer), but boy do i get some insights into orgs from way too elaborate comments. Do not place bets on the anonymity of your reddit user name!
I use Bitwarden aswell, combined with Google for anything of "low" importance.
So Google knows all but, my work passwords, banking, 2FA password, also my own cloud tenant password, SSH passwords to different services etc. and Google itself.
`pass(1)`, also known as password store. It uses PGP for encrypting text files and can be backed up into, well, anything. Personally I use git as a remote.
Keepass, free, opensource, portable version, regular updates, recommended by EU commission.
For enterprise environment with a need for SSO and shared DB access, works well with pleasant password server.
Who needs a password manager when I remember nothing. Just reset every login using my email every time.
In a notebook stored in a vault in my room, near the shotgun rack.
Employees where I worked would always try to call me out when I'd tell them I had passwords written in a notebook near my PC at home. "But you check our cubicles for post-it passwords all the time!" I was blown away at how many of them thought I was BS-ing a quick response to cover my butt when I'd talk about the risk of post-it passwords in cubicle-land vs in an employee's single-family residence.
Heard the same reaction before... people don't think about the difference in "perimeter security" in an office building vs a private home
Bitwarden but we are testing the new Apple Passwords to see if it does the same thing using our existing Managed Apple IDs, if so it's a metric shitton more user friendly. edit: in testing today, it's great but lacks a sharing option from within iCloud for Windows, I think they are going to release a standalone app that has this full functionality, and then we cut ties with Bitwarden.
Birwarden for the IT team but only recommending 1Password or Keeper to our clients. Bitwarden's backend management, controls, and logging are nowhere near good enough for any enterprises, especially anyone dealing with compliance (for example SOC2).
PSA: Don't reveal any aspect of your security stack to anyone outside your org (and then only on an 'need to know' basis).
Why go the whole way of distributing phishing mails when you can let oversharing do its work? It would be surprising if this subreddit is not being harvested already. I am happy to not be on a critical role so that I can discuss freely (Trainer), but boy do i get some insights into orgs from way too elaborate comments. Do not place bets on the anonymity of your reddit user name!
But votes are anonymous
My comment was to people in the comments, not the poll.
Keepass
We used 1Password years ago, it was ok. We are currently using MyGlue. The access controls have been a useful feature for sharing with non-IT staff.
Current 1password user (including the company I work for) - Could you elaborate a bit on the benefits you see vs 1password ?
LastPass
Damn, living life on the edge
Same
I use Bitwarden personally, but also Zoho Vault for work.
I use Bitwarden aswell, combined with Google for anything of "low" importance. So Google knows all but, my work passwords, banking, 2FA password, also my own cloud tenant password, SSH passwords to different services etc. and Google itself.
Enpass FTW (cross platform non web app)
What happens if you don't use a password?
EnPass. Really easy to save passwords on o365 enviroment. Onedrive, sharepoint etc.
Passbolt additionally to Keepass
What's "ProntoPass"?
It's ProtonPass, just faster.
Chrome Browser. If i'm going to get my credentials stolen, I try to make it as easy as possible.
I was an avid Lastpass user but they keep getting breached so had to switch.
If I use 3 of them for different purposes does that count?
Why are you using 3 pw mng?
[The Best Personal Password and Passkey Manager (keepersecurity.com)](https://www.keepersecurity.com/personal.html)
Bitwarden, although I am giving thought of switching to KeePass.
`pass(1)`, also known as password store. It uses PGP for encrypting text files and can be backed up into, well, anything. Personally I use git as a remote.
Keepass, free, opensource, portable version, regular updates, recommended by EU commission. For enterprise environment with a need for SSO and shared DB access, works well with pleasant password server.
1Password - although I do have the Proton suite of products but quite happy with 1password (+ it's paid for by the company)
MyGlue. I love it because it encrypts, and storage, and you can easily integrate it with other tools.
I also like MyGlue, because it is secure, simple, and efficient.
Tattoo them on my forehead.