Overblog Tous les blogs Top blogs Célébrités Tous les blogs Célébrités
Editer l'article Suivre ce blog Administration + Créer mon blog
MENU
http://xkjs.over-blog.com/

xkjs.over-blog.com/

Publicité

Open Source Password Manager



Download KeePass for free. A lightweight and easy-to-use password manager. KeePass Password Safe is a free, open source, lightweight, and easy-to-use password manager for Windows, Linux and Mac OS X, with ports for Android, iPhone/iPad and other mobile devices. With so many passwords to remember and the need to vary passwords to protect your valuable data, it's nice to have KeePass to manage. Pass, an open source password manager. If someone gets access to your machine, they can run the pass program or whatever other password manager is installed on the system and steal all of your usernames and passwords; it doesn't matter if they are encrypted.

If you're not sure what a password manager is, or why you should use one, I recommend you read two of my previous posts. What is a Password Manager? covers the 'what', and Why Should I Use a Password Manager? covers the 'why'.

What is the best password manager is, of course, subjective. But my criteria are as follows:

  • The password manager has to be open source. Open source code means that everyone can audit the code and make sure nothing fishy is going on.
  • It has to be free as in speech (libre). There are no restrictions on how the password manager can be used.
  • The password manager doesn't have to be free as in beer (gratis). If it's good enough, and the price is fair, I'd gladly pay for it.
  • The password manager has to work on the operating systems I use frequently: Windows, macOS, Linux, and Android.
  • It has to be possible to self-host the password manager. This means that I can install and run it on my own server or computer.
  • It has to be possible to synchronize the password manager's database across multiple devices.
  • Backing up the password manager's database has to be hassle free.
  • The password manager has to have an accompanying browser extension to make using it with a browser as user friendly as possible.

The open source and self-hosting criteria limit the number of possible password managers. While there are a lot of different password managers available, only a few of them are open source and supports self-hosting.

Now let's get cracking!

Passbolt

Passbolt describes itself as 'free, open source, self-hosted, extensible'. The password manager features passwords sharing, filters, search, comments, user management, e-mail notifications, support for the KDBX database format, and browser integration.

Passbolt is primarily designed for teams and not individuals, which makes it rather pricey. There's a free community edition with unlimited users, but the features in the community edition are limited. You'll miss out on features like the admin panel, and multi-factor authentication. Those features, and more, are only available in the paid premium version, starting at €19 per month.

Passbolt can be used both as a SaaS cloud-service, or it can be self-hosted on your own server. But self-hosting doesn't mean you get all the features. You'll still have to purchase a subscription, which, as far as I can tell, will cost you the same as using the cloud-based version.

I'm also not sure how mature Passbolt is. All the screenshots I've found has an 'alpha'-tag slapped to them, and several of the premium features are not yet implemented.

KeePassXC

KeePassXC is an open source community fork of KeePassX, which is a cross-platform port of KeePass for Windows. I can't use KeePass because it's Windows only, and KeePassX hasn't been in active development in quite a while. The most recent KeePass release was back in 2016.

KeePassXC, on the other hand, is in active development. It's not a web-based password manager, but an application that you download and install on your computer. In this day and age, that might sound old fashioned. But that KeePassXC doesn't require the user to run any server software, makes it very easy to get up and running quickly.

The password manager has all the features you'd except. You can store usernames, passwords, notes and other information in an encrypted database. The database can be secured with a password. More advanced users can use a key file, a YubiKey challenge, or any combination of the three.

KeePassXC also comes with a password generator, auto-type for automagically filling in login forms, 2FA support with TOTP generation (including Steam Guard), and browser integration through the KeyPassXC-Browser extension. On the more advanced side, KeePassXC features an SSH agent integration, and a command line interface.

What KeePassXC is missing, though, is a built-in mechanism for synchronizing the database between multiple devices. Xilisoft iphone transfer 5 7 280. If that is something you need, you'll have to facilitate it yourself. One solution is to use a cloud-based file service, like Dropbox or Nextcloud.

There are no official KeePassXC apps for Android and iOS. But because KeePassXC uses the KDBX database format, other people have implemented compatible clients for both operating systems. Examples are KeePass2Android on Android, and Strongbox on iOS.

KeePassXC looks like a good alternative. But you need to do a little work to get database synchronization across devices working.

Bitwarden

Bitwarden is another open source password manager that can be used as both a SaaS cloud service, or installed as a self-hosted service. It comes with a web interface, native clients for Windows, macOS, Linux, Android, and iOS, browser integrations for every major browser, and a command line interface.

As with Passbolt, Bitwarden comes with some basic, free, features, and an extended feature set for premium users. Among the free features are access to all Bitwarden apps, unlimited synchronization between devices, unlimited item (passwords, notes, credit card numbers, etc) storage, 2FA authentication on your Bitwarden account, and a secure password generator.

Premium users also get 1GB encrypted storage, 2FA authentication with YubiKey, FIDO U2F, and Duo, and TOTP authentication key storage and code generation.

Open Source Password Manager

Unlike Passbolt, Bitwarden is designed with individuals in mind. A premium account will set you back $10 per year, which is a lot cheaper than Passbolt's premium fee of €19 per month. Bitwarden also provides a premium family plan that supports up to 5 users for $1 per month.

Bitwarden is feature rich, looks awesome, and can be self-hosted. With several affordable premium plans, it's certainly a viable alternative for anyone looking for an open source password manager.

So What's the Best Password Manager in 2019!?

Even though Bitwarden almost won me over, I'm leaning towards KeePassXC. Compared to both Passbolt and Bitwarden, it's rather basic in terms of features, but it still has everything I need. I also like that I don't need to host anything on my own servers to get KeePassXC to work. It's just an application I install on all the computer I use. While there is no official app for Android, the KeePassXC developers recommend KeePass2Android, which seems legit.

The KeePassXC password database is just a simple file, which makes it easy to back up and synchronize between devices. While KeePassXC doesn't have a built-in synchronization feature, this can be accomplished by using a cloud-based file storage like Nextcloud. I'm already using Nextcloud, so getting the database synchronized should be effortless.

So there you have it. KeePassXC seems to be the best open source password manager in 2019. It might not look particularly sexy, but when it comes to password managers, brains are certainly more important than looks.

When it comes to keeping passwords and other credentials in a convenient cloud vault without worrying about attacks from hackers, there is no compromise; this means choosing a password manager that is user-friendly and includes every feature that could keep even the most sensitive data safe. This is why most people have doubts when they hear the terms 'open source' and 'password manager' put together.

While the fact that open source programs are free of charge is worthy of praise, when average users hear that the software's source code can be accessed publicly they might immediately and unfairly assume that this also means greater vulnerability.

However, most open source password managers are on par with or, sometimes, even better than their commercial counterparts – and we have six examples to prove that.

Use our special promotional code below and if you haven't used RoboForm before you can enjoy RoboForm Everywhere or Family for as low as $1.16 per month, saving 30% on the subscription fees.

Why Pick Open Source?

As in the case of commercial solutions, the development of open source software is never truly finished. But unlike traditional password managers open source programs can be improved by anyone using that very solution. This might seem like a huge disadvantage at first but, actually, it is a feature where open source wins by a mile. Users can patch errors into the code immediately, whereas patches for commercial software are released much slower, giving a significant head-start to hackers.

Additionally, an open source password manager can be customized to your liking, even allowing the option to create plug-ins for solutions that normally would never be integrated into paid-for password managers (i.e. offline apps). But by far the biggest advantage over regular password management tools is that open source solutions are free with the option to donate to the original developers.

The Best of the Best: Six Top Open Source Password Managers

KeePass

Developed by Dominik Reichl in 2003, KeePass is a Windows-based password manager also available for macOS and Linux computers. KeePass possesses bank-level (AES-256) encryption with SHA-256 hashing, multiple database import and export options online and offline, a strong password generator, and fully customizable and searchable password groups. The software is extremely convenient since it is fully portable, doesn't require installation and saves its database into a single file, making data transfer virtually hassle-free. The program provides two-factor authentication and can be used with multiple keys to replace the password or use them alongside your master password for increased security. Additionally, the database can be locked to the current Windows account as well, so it can only be opened by the person who created it.

Passbolt

There's a common misconception that says that open source programs cannot match the feature set or quality of design of their commercial counterparts, but frankly that isn't necessarily the case. Luxembourger Passbolt is a prime example of just how wrong that attitude is. It is an open source solution that not only has an appealing user interface but also manages to include all the important features that commercial password managers have. For instance, it allows for fully editable and searchable passwords that can be shared with trusted parties and the option to safely copy credentials to the clipboard. Passbolt also features built-in password evaluation and generation, plus there is the option to receive email notifications regarding the state of your account. Although some features are in development, like importing and exporting passwords, autofill and two-factor authentication, it is already compatible with the most popular web browsers, namely Chrome and Firefox.

Editing Credentials


Clipperz

Clipperz is an online, single page password manager that, unlike many open source programs, can be used from mobile browsers as well. There are various import and export options supported and it features offline access, which is a huge asset when there is no internet available. Additionally, Clipperz allows for direct login to sites that have been saved to the program's database and provides one-time passwords for quickly authenticating access from unknown devices. The safety measures don't stop here, though, since Clipperz is host-proof, meaning that no information leaves the vault without being encrypted first with the 128-bit security level cryptographic system. In fact, the software itself is built upon proven and trusted cryptographic algorithms like AES, SHA2, Fortuna, and so on – so it is one you can trust.

Padlock

If you want an open source password manager that has a desktop client for Windows computers and Macs, as well as an equivalent app available for iOS and Android devices, then Padlock is your choice. The program focuses on simplicity, meaning that it has left out all unnecessary features that might be present in most commercial password managers. Padlock is capable of storing more than just passwords, though, all of which can be organized into specific categories. But that's not the only way in which Padlock resembles commercial password management solutions: the app can import to and export from various sources, has a built-in password generator, and provides the option to determine the time period after which the program automatically locks itself from further use.

Stored Credentials in the App


But do note that as of 2018 the Padlock Chrome add-on will be discontinued!

LessPass

LessPass is a very unique specimen since it is a three in one product: it's an advanced password generator available on the company's site, a browser add-on for Chrome and Firefox, and an Android app. It works like this: you enter the site or thing you want to associate a password with, provide your username and a ‘master password' – which can be anything – and then LessPass creates a unique password using only this data. The most ingenious thing, however, is that if the same login credentials and the same master password are entered to LessPass's interface, the software will always generate the same complex password with which you can access the desired site.

Bitwarden

We left the best for the last – and that's not an exaggeration. Bitwarden is just as presentable as any comparable commercial product, with an impressive visual design and feature set to compete with any top-tier password managers.

Bitwarden provides everything you would expect from a password manager: Windows, Mac, iOS, Android, and Linux support; unlimited syncing between vaults; extensions for all major web browsers; a built-in password generator; intelligent categorization of credentials that also allows them to be put into custom folders. There is even an option to create multiple credential collections within the same account and then share that content with other Bitwarden users in a secure manner. All data is protected by an AES-256 encryption, in fact, with the option for further reinforcement via two-factor authentication – including Google Authenticator and FIDO – and a time limit that automatically locks the software.

Desktop VaultMobileExtensionPassword GeneratorAutolock
Password Editing in the Mobile Version


The Built-in Password Generator


As an open source program Bitwarden is free of charge, but it also provides very generous pay-only solutions for families and teams for as little as $1 per month for the former and $5 per month for the latter, this premium package adding in unlimited collections, 1GB of encrypted file storage, and advanced two-factor authentication options.

Best Password Managers of 2020
RankProviderInfoVisit
Editor's Choice 2020
  • Fantastic security
  • Flexible platform
  • Reasonably priced
  • Easy-to-use
  • Full review…

  • Simple, straightforward
  • Flawless data import
  • Built-in VPN
  • Advanced iOS/Android app
  • Full review…

  • Simple and straightforward client
  • Categorization of stored credentials
  • Biometric authentication
  • Versatile customer service
  • Full review…

Get the Best Deals on Password Managers

Subscribe to our monthly newsletter to get the best deals, free trials and discounts on password managers.

If you're not sure what a password manager is, or why you should use one, I recommend you read two of my previous posts. What is a Password Manager? covers the 'what', and Why Should I Use a Password Manager? covers the 'why'.

What is the best password manager is, of course, subjective. But my criteria are as follows:

  • The password manager has to be open source. Open source code means that everyone can audit the code and make sure nothing fishy is going on.
  • It has to be free as in speech (libre). There are no restrictions on how the password manager can be used.
  • The password manager doesn't have to be free as in beer (gratis). If it's good enough, and the price is fair, I'd gladly pay for it.
  • The password manager has to work on the operating systems I use frequently: Windows, macOS, Linux, and Android.
  • It has to be possible to self-host the password manager. This means that I can install and run it on my own server or computer.
  • It has to be possible to synchronize the password manager's database across multiple devices.
  • Backing up the password manager's database has to be hassle free.
  • The password manager has to have an accompanying browser extension to make using it with a browser as user friendly as possible.

The open source and self-hosting criteria limit the number of possible password managers. While there are a lot of different password managers available, only a few of them are open source and supports self-hosting.

Now let's get cracking!

Passbolt

Passbolt describes itself as 'free, open source, self-hosted, extensible'. The password manager features passwords sharing, filters, search, comments, user management, e-mail notifications, support for the KDBX database format, and browser integration.

Passbolt is primarily designed for teams and not individuals, which makes it rather pricey. There's a free community edition with unlimited users, but the features in the community edition are limited. You'll miss out on features like the admin panel, and multi-factor authentication. Those features, and more, are only available in the paid premium version, starting at €19 per month.

Passbolt can be used both as a SaaS cloud-service, or it can be self-hosted on your own server. But self-hosting doesn't mean you get all the features. You'll still have to purchase a subscription, which, as far as I can tell, will cost you the same as using the cloud-based version.

I'm also not sure how mature Passbolt is. All the screenshots I've found has an 'alpha'-tag slapped to them, and several of the premium features are not yet implemented.

KeePassXC

KeePassXC is an open source community fork of KeePassX, which is a cross-platform port of KeePass for Windows. Rhinoceros 5 64 bit in safe mode. I can't use KeePass because it's Windows only, and KeePassX hasn't been in active development in quite a while. The most recent KeePass release was back in 2016.

KeePassXC, on the other hand, is in active development. It's not a web-based password manager, but an application that you download and install on your computer. In this day and age, that might sound old fashioned. But that KeePassXC doesn't require the user to run any server software, makes it very easy to get up and running quickly.

The password manager has all the features you'd except. You can store usernames, passwords, notes and other information in an encrypted database. The database can be secured with a password. More advanced users can use a key file, a YubiKey challenge, or any combination of the three.

KeePassXC also comes with a password generator, auto-type for automagically filling in login forms, 2FA support with TOTP generation (including Steam Guard), and browser integration through the KeyPassXC-Browser extension. Shapes 4 9 – simple diagramming app. On the more advanced side, KeePassXC features an SSH agent integration, and a command line interface.

What KeePassXC is missing, though, is a built-in mechanism for synchronizing the database between multiple devices. If that is something you need, you'll have to facilitate it yourself. One solution is to use a cloud-based file service, like Dropbox or Nextcloud.

There are no official KeePassXC apps for Android and iOS. But because KeePassXC uses the KDBX database format, other people have implemented compatible clients for both operating systems. Examples are KeePass2Android on Android, and Strongbox on iOS.

KeePassXC looks like a good alternative. But you need to do a little work to get database synchronization across devices working.

Bitwarden

Bitwarden is another open source password manager that can be used as both a SaaS cloud service, or installed as a self-hosted service. It comes with a web interface, native clients for Windows, macOS, Linux, Android, and iOS, browser integrations for every major browser, and a command line interface.

Open Source Password Vault Server

As with Passbolt, Bitwarden comes with some basic, free, features, and an extended feature set for premium users. Among the free features are access to all Bitwarden apps, unlimited synchronization between devices, unlimited item (passwords, notes, credit card numbers, etc) storage, 2FA authentication on your Bitwarden account, and a secure password generator.

Premium users also get 1GB encrypted storage, 2FA authentication with YubiKey, FIDO U2F, and Duo, and TOTP authentication key storage and code generation.

Open Source Password Manager Server

Unlike Passbolt, Bitwarden is designed with individuals in mind. A premium account will set you back $10 per year, which is a lot cheaper than Passbolt's premium fee of €19 per month. Bitwarden also provides a premium family plan that supports up to 5 users for $1 per month.

Bitwarden is feature rich, looks awesome, and can be self-hosted. With several affordable premium plans, it's certainly a viable alternative for anyone looking for an open source password manager.

So What's the Best Password Manager in 2019!?

Even though Bitwarden almost won me over, I'm leaning towards KeePassXC. Compared to both Passbolt and Bitwarden, it's rather basic in terms of features, but it still has everything I need. I also like that I don't need to host anything on my own servers to get KeePassXC to work. It's just an application I install on all the computer I use. While there is no official app for Android, the KeePassXC developers recommend KeePass2Android, which seems legit.

Best Open Source Password Manager

The KeePassXC password database is just a simple file, which makes it easy to back up and synchronize between devices. While KeePassXC doesn't have a built-in synchronization feature, this can be accomplished by using a cloud-based file storage like Nextcloud. I'm already using Nextcloud, so getting the database synchronized should be effortless.

Open Source Password Manager

So there you have it. KeePassXC seems to be the best open source password manager in 2019. It might not look particularly sexy, but when it comes to password managers, brains are certainly more important than looks.





Publicité
Partager cet article
Repost0
Pour être informé des derniers articles, inscrivez vous :
Commenter cet article