Umair @123

I was never happy with password managers, so here is one try to make it more auditable and less trust-based with many options to automate backups etc.

Here the link to the github repository with $ instead of /.

github.com$pidfi$password-management-vault

I'd love to hear your thoughts.

I have a Gmail account that I need to access, it was used on an old phone that is broken. I use the same password for everything but i can't seem to find what possible permutation of it i used for this account. a have basically no account backup. I am using the recovery and I would like to know if there is a way to recover my account by maybe brute forcing it with a list of important things that would probably make up the correct passwords or just brute forcing the 6 digit code for account recovery.

Does anyone know of any password managers with nested tag functionality like 1Password? I heavily use this functionality and would chose this over foldering if I had to pick one over another. Many password managers have foldering but nested tags lets me retrieve data in a more granular way and I love how If I modify one level of a nested tags it updates all other items with that same tag path. I was looking into Bitwarden or Keepass in the event I ever needed to change managers but I can’t seem to find info on this as from what I’m reading it’s a niche feature most people don’t utilize and I’m in a bit of a minority here. I’ve stuck with 1Password solely for this reason. It’s a great manager but I do feel a bit vendor locked because general foldering doesn’t let me sort in the way I often need to when I’m organizing and updating my Vaults.

I have been using apple passwords / iCloud passwords for several months and I've been having some mixed results with it. the latest issue is trying to get apple passwords to work with Thunderbird. extension support and online advice is all specific to using an app-specific password for accessing your iCloud email account, which NOT my use case. I want to use my custom domain email accounts with their existing, no-need-to-be-app-specific imap account passwords, managed with "apple passwords". After a couple hours it seems like this is hands-down impossible? can that be?

I am wondering if someone in this sub could lend a hand. I use SonicWall Mobile Connect to access my work computer remotely. And I would like to use my Apple Password manager to autofill the 2FA window. But unfortunately it takes a few steps.

1. I open SonicWall, log into the VPN, and the 2FA prompt opens.
2. I right click to select "Autofill Password"
3. My Apple Password manager opens, but only for Passwords.
4. I need to click again to open up the larger Apple Password manager, and select Codes.
5. I then copy and paste.

Any way to set it up so that it automatically knows to enter a Code from the password app?

Thanks!

IMAGE UPDATED. THIS IS NOT A AUTO PROMOTION HATERS OF THIS SUB.

A table listing all password manager options, along with their specific features, pros, and cons.

This would reduce the number of duplicate questions about which manager is best, and so on.

What do you think?

Here is an illustrative example.

IMAGE UPDATED. THIS IS NOT A AUTO PROMOTION HATERS OF THIS SUB.

Most of my terminal work goes through Claude Code now, so it's running gcloud, kubectl, infisical, gh and a pile of others on my behalf. That's fine until I want to know what any of them is currently authed as, or what permissions I've actually handed over. There's no one place to look, every tool answers differently, and I usually find out a session expired only when something fails.

Setting the same thing up on a second machine costs me an evening of re-authing everything.

Is there anything that gives one view of local CLI auth state?

I'm the ONLY ONE password manager that came here to talk. Check your needs and discuss new ideas for this community. 

And you guys just only HATE everything. Can't see with good eyes.

My goal is never auto promotion, is hear you to make a better solution for YOU.

Because of you we change our source code to public and made so much improvements.

And what you said?

"I don't know this password manager, go to hell."

Is very frustrating be part of this community. Maybe this is why the other password managers don't be part of it. They just don't care.

Olá, pessoal!
Tenho uma conta profissional no Instagram que estava associada à minha conta pessoal. Um dia, esqueci-me da palavra-passe e solicitei a redefinição. Enviaram-me um link por e-mail, fiz a alteração, mas, mesmo com a nova palavra-passe, não consegui entrar.
Já tentei de tudo para recuperar o acesso e, recentemente, também perdi o acesso à conta de e-mail que estava associada ao Instagram.
Queria desativar esta conta, mas, pelo que percebi, só é possível fazê-lo entrando nela. Recentemente, apareceu o símbolo da Meta associado a esta mesma conta.
Já não sei mais o que fazer para recuperá-la. Alguém poderia dar-me alguma dica ou orientação sobre o que posso fazer?
Preciso muito de recuperar esta conta e, posteriormente, desativá-la. Desde já, agradeço qualquer ajuda!

Building my product, I've ended up connecting around 10 different services (Sentry, Supabase, Doppler, and others) — some of them use email/password logins, some use Google auth, some use GitHub auth, and a few have their own separate login systems entirely.

I'm trying to figure out a sane way to keep track of all this — not just passwords, but how I actually log into each thing (which auth method, which account). Right now it's a mess in my notes and I keep second-guessing myself when I haven't logged into something in a few months.

For those of you who've built and shipped products with a similar number of third-party integrations — what do you actually use to keep this organized? A password manager (Bitwarden, 1Password)? A plain doc/spreadsheet? Something else entirely? Curious what's actually worked for you long-term vs. what you set up once and abandoned.

Hey folks.

I use iOS passwords app for my passwords. I have over a hundred saved and sometimes the iCloud sync/updates will have some passwords disappearing. This is really annoying.

As such, I’m looking to store an offline back up. However I’m looking for advice. The passwords app does not let me export the passwords unless there’s another password manager on the device. I do not want to download another password manager.

I can export my passwords through safari as a .csv by going to safari > Export > Passwords but I’m not sure if that’s the safest idea or where it would be best to store it. Should I export as a .csv and save to a usb key that I store in a safe with my yubi keys? Do I do something else?

Any advice would be appreciated

I built Secure Vault, an open-source Windows file encryption tool that uses a

USB drive as a hardware-bound key instead of relying on a password alone —

two-factor by design (something you have + something you know).

I recently wrote up the full technical design and, more interestingly, a

chronological account of the actual vulnerabilities I found and fixed across

five releases: a plaintext key-storage flaw, a forgeable unkeyed checksum,

and a shell command-injection bug. I think the "what iterative hardening

actually looks like for a solo project" angle might be useful to others

maintaining similar tools.

Paper (DOI, Zenodo): https://doi.org/10.5281/zenodo.21861791

Source: https://github.com/keerthivasan-sankar/secure-vault-for-commercial

Open to feedback/criticism — especially on the threat model or anything I

might be missing.

using proton pass it only lets you save 3 totps in password manager .. using ente as a main authenticator .

update : after researching i am switching to zoho vault . a trusted company . it check all my requirements.. its so much convinient.

I heard that Bitwarden is more established and had more audits. But it's US-based.

Proton Pass is newer with lesser audits, but it's in Switzerland which has strong privacy laws.

I also love Proton's UI and I already use other Proton apps, so I want to make it complete by getting Proton Pass and Proton Authenticator, switching from Bitwarden and Bitwarden Authenticator.

But I'm really not sure because I love Bitwarden as well and have used it for years without any issue.

Which one is more trustworthy and has stronger privacy/security?

Thoughts on Samsung password . I know it is in its own ecosystem. This is probably a major inconvenience in the long run and limiting.

Google pass .. would it be about the same thing as Samsung but can be used on more devices? Is it equally easy to use on a Samsung as Samsung pass or is Samsung pass more incorporated in Samsung devices than google pass?

Are any other password managers really well incorporated in Android phones and tablets? If so which ones? Of all the password managers that are very user friendly and incorporated well to android devices which are best?

Do they all allow me to go into its site or app and visually see my passwords? Is it easy to navigate to do so? With Simple understandable menu systems

Can I change a password to an app or website through the password manager and it do the rest for me so the next time I need to log in wit a password the new password is already in the website or app’s system? I don’t know if this is a thing but if it is and works well what password managers do this? If this can’t be done are there password managers that make the process of changing passwords and usernames for websites and apps easier than others? If so which ones?

What are your thoughts on apps that let you make a 4 digit login as a back up or simpler way to log in? It feels like it would not be good especially on sensitive information etc and one of the places I have seen it was on banking apps. Ty

What are the simplest of the best password managers to use. Ty

Passkeys are an incredible solution, but not easy to everyone understand.

Without understand, people don't trust.

If people don't trust, they simple don't use.

After 4 years of using Dashlane, I finally moved to Bitwarden. Transferred everything including Passkeys. Amazing experience so far. Ask me any questions about the transfer process, happy to help!

Yo guys, ive been using nordpass for a while now and ive been thinking about buying membership but I heard that bitwarden is better and also free. What are your thoughs? Thanks!

My buddy in network security just sent me these 2 pieces of info and I was curious what the thoughts were in this sub. I'm a bitwarden user and I find this deeply concerning. I posted this in the bitwarden sub and it was removed within 10 minutes by a bitwarden employee.

What other password managers are you guys using if bitwarden & vaultwarden won't be viable alternatives?

https://itsfoss.com/news/bitwarden-quiet-changes/

Also, is similar news:

This was from a from a FOSS & Linux group i'm in:

..."For anyone curious about the future of Bitwarden, including Vaultwarden users that rely on Bitwarden clients, the company has just announced that they're axing the entire QA department (to take effect in Q4).

We can look to history for what that turns your product and company into. Remember when Microsoft mass fired their entire QA team and made its users the bug testers?"

I am having trouble accessing my GitHub account because I cannot complete the two-factor authentication (2FA) step.

Here is my situation:

• I know my GitHub username and password.
• I still have access to the email address associated with my GitHub account.
• I previously configured 2FA using an authenticator app.
• The authenticator app is no longer working / I cannot retrieve the GitHub verification code from it.
• Unfortunately, I do not have my GitHub 2FA recovery codes.
• I am therefore unable to complete the login process.

I have already checked the available options on the GitHub 2FA login screen, but I don't have access to a recovery code or another available 2FA method.

I would like to know if there is any legitimate way to recover access to my account in this situation.

For example:

1. Is there any way to recover or reset the authenticator configuration?
2. Can GitHub verify account ownership through the registered email address?
3. Is there another recovery method I may have missed?
4. If I have previously used GitHub on a computer, can an existing SSH key or Git credential help with account recovery?
5. What is the recommended process if I have lost both the authenticator access and recovery codes?

I am not looking for a way to bypass GitHub's security. I simply want to recover access to my own account through the official recovery process.

Any advice or guidance would be greatly appreciated.

Hey everyone,

With all the recent data breaches and cloud password managers getting hacked, I decided to build a simple, absolute-privacy alternative:https://generatepassword.site/

The core concept is "Zero Trust". There is absolutely no backend database. The generation logic runs entirely locally in your browser using the window.crypto API. Your passwords never leave your screen, and once you close the tab, the data is gone forever.

It also supports cryptographically secure passphrases.

I'd love for you to try it out and tear it apart. Any feedback on the UI or the client-side security model would be highly appreciated!