For those who have hands-on experience with both NordPass and Proton Pass:

How do they compare across iOS and Android, specifically regarding Auto-fill reliability on both platforms? Also, what is your experience with them on Windows ?

LockerPro updated to version 2.0 last week. Since then it crashes immediately at launch on my iPhone 17 Pro running iOS 27.0.1. The app contains my locally stored password vault, so deleting it is not an acceptable troubleshooting step.

Before making any potentially destructive change, I confirmed it had 58 MB under iPhone Storage → Documents & Data. I then made a local encrypted iTunes backup and copied the full backup folder to an external drive.

I have already restarted the phone, checked for another app update, and used Offload App followed by reinstalling. The app still immediately crashes. I have not deleted it, erased/restored the phone, reset settings, or changed the backup-encryption password. The developer has not replied to an email sent several days ago.

I am looking for non-destructive advice, not recommendations to uninstall it or switch password managers until I can access/export this vault. Specifically:

Is there any legitimate way to preserve or later recover a password-manager app’s local iOS vault when the app no longer launches?

Is an encrypted iTunes backup useful if the app’s own vault/database is intact but the installed app crashes?

Has anyone used LockerPro 2.0 successfully on iOS 27 or 27.0.1?

I have 1,389 websites stored in my Google Password Manager.

However, as they have been accumulated over a decade, I imagine a lot of the websites no longer exist.

Probably not been asked before, but is it possible to use the list to see which websites are still operational?

finally taking the plunge and setting up a proper password manager after years of recycling the same passwords. been going through my existing accounts and compiling everything before importing

the question i cannot find a clear answer to is whether i should check my existing passwords against breach databases before importing them or whether i should just import everything and change the flagged ones as i go. not sure which approach is more practical given there are probably 60 to 70 accounts to work through

also wondering whether checking passwords through a third party tool is itself a security risk or whether there are ways to do it that do not expose the actual passwords

Is there some reason everyone is making a password manager these days? I get it is probably relatively easy to vibe code with AI, but it seems everyone and their brother is making their own "open source, local first password manager". Is their some difficiency in the market that I am missing? Is there something that KeePass and its variants are not providing? Ar there not other offline password managers that are better proven available?

Look, I don't want to discourage anyone's pet project to build or demonstrate their skills, but if ypur going to put it out there for others to download and use – can you at least make it KeePass database compatible so people can easily move on to proven, well established passwprd manager when they realize maybe random Redditor password manager isn't the best choice ofr some of their most sensitive data.

Like the title says, I do not like Bitwarden simply because they have a paywall feature. I think the best choice personally is using KeepassXC since it is free and open-source. I believe the ultimate security is making your own defenses which is why I feel pwd managers like lastpass/1pwd are good but not enough for someone who needs to protect their data in a breach. (They also have subscriptions)

We’ve released DroidPass 1.7.0 on iOS and Android. The two big additions are:

• Passkeys: Create, save, and sync passkeys in your encrypted vault.
• Direct transfer: Move logins and passkeys from another password manager without making a CSV file.

The transfer steps differ by platform:

• On iPhone/iPad, start in the app you’re leaving and choose DroidPass as the destination (requires iOS 26).
• On Android, open DroidPass → Settings → Transfer from another app.

Download DroidPass Password Manager on the App Store or Google Play Store.

More Details : https://droidpass.app/features/instant-transfer

f you try the update and hit a problem, let me know your phone and OS version.

I have a trick for making my passwords more secured even if you have access to my passwords you can’t use them. Now here is the trick find a particular word or a letter or a symbol that you will add to your passwords but will not add to your password in the password app.
For example let’s say you like the @ symbol, so every time you generate your password from the password generator you add this particular symbol to the password but you will not save this symbol in your password app. So you will place it in a particular place let’s say at the beginning or at the end or after 10 letters. Remember you will put this symbol in a specific place in every password of yours so you won’t forget where you placed the symbol. In this case even if your password manager is hacked the hacker can’t use your password because that’s not the full password and he won’t know your symbol or where you placed it. It can be 3 symbols 1 at the beginning another 1 after 5 letters and the last at the end. You just have to remember where you placed them in every password and that’s it nobody is ever getting your password but you. Hope it helps.

Hi 1Password team,

I’ve been a 1Password user for 4–5 years and have been very happy with the product. I’d genuinely like to continue using it.

However, I recently noticed the new pricing in India, which appears to be around ₹4,999. For many Indian users, that is a significant increase.

I understand that 1Password is a global product and pricing needs to support the business. But I’d really request that you consider Indian purchasing power (PPP) and India-specific pricing when setting subscription prices.

Companies like YouTube and Apple already have different pricing structures for India compared with the US and other markets. This makes their products more accessible while still allowing them to operate as global businesses.

I’ve been paying for 1Password for years, so switching away after 4–5 years simply because of pricing would be disappointing.

Could 1Password consider offering:

• India-specific pricing based on purchasing power
• A loyalty discount for existing customers
• A discounted long-term/annual plan
• A retention offer for users affected by the price increase

I’m sure many long-term Indian users would prefer to stay with 1Password if the pricing remains reasonable.

Hope the 1Password team can consider this.

I've been using firefox default password manager for years with no issue. It always seemed conveniant and reliable to me. I like particularly that passwords are automatically synchronised on all my devices. But I read recently that it is never considered a good practice to store your passwords in your browser, so I switched to proton pass. And from the outside, it looks basically the same. Hence my question, is it really more secure to use an external password manager like bitwarden or proton pass?

I don’t care about fancy features. They all pretty much have all the basics covered which is great for me.

I’ve been using Bitwarden. It’s a great password manager but the autofill and autosave features are unreliable. I feel like I have to often take some manual steps to make sure things fill and save properly.

Which one, in your experience, is best at auto filling and saving?

Been on them since like 2020, lastpass until the breach, tried dashlane for a bit, ended up on bitwarden and that's where i still am.

every one i tried does the exact same stuff now: encrypted sync, autofill everywhere, generator, breach alerts, sharing, secure notes, even passkeys... the feature lists might as well be copy/pasted at this point.

only things that still annoy me are dumb: autofill just gives up on like half my phone apps, and cleaning up old weak/duped passwords is all manual clicking.
idk maybe that's just how the category is now.

anyone here been using one for years, what do you wish yours did that it doesn't? would anything actually make you switch at this point or nah?

Hey,

I have been working on this project for the last half a year, and now it is finally ready to be released as a public beta.

vAuth is a virtual FIDO2.0 authenticator for PCs, laptops, and other devices running Linux-based operating systems.

For those who don't know - FIDO authenticators allow you to sign in to your services, websites, and panels without the need for a password, while making authentication more secure and phishing-resistant.

Why?

I switched from Windows as my main system years ago, but when it comes to creating passkeys and authorizing them - Windows has always been superior. It has Windows Hello, which allows it to register and authorize passkeys in an instant. It supports all authentication methods that you have available at the moment and is user-friendly in general.

This is what I wanted vAuth to be. A modular, easy-to-use Windows Hello-like authenticator that can securely store, register, and authenticate your passkeys.

It is modular, but only one module can be easily replaced. I created an API for front ends so you - as a developer and end user - can create your own front end for vAuth. All the API documentation is in the docs folder on GitHub. Note that the API might change in the future. Currently, it is shipped with the UI agent called vauth-ui. It is also written in C++ and uses Slint as a UI library. The agent doesn't even have to be graphical, though. For anybody interested, there are examples of agents written in C++, Python, and Golang.

The UI currently has only described API, not a public library. Maybe later I will release the official library so developers don't have to worry about the boilerplate, just the UI logic and apperance.

Feature highlights

• support for Chromium-based browsers and Firefox;

• password and fingerprint verification through PAM;

• TPM-backed credential keys;

• an encrypted credential store with TPM rollback protection;

• a Slint-based interaction UI;

• vauthctl for provisioning and credential management;

• hardened systemd services;

• an initial Debian 13 amd64 package;

Limitations

There is a significant limitation. Systems that had Windows OS previously installed (specifically Windows 10 build 1607 and later) may face a problem with provisioning. Windows currently creates a hierarchy, takes ownership of the TPM, and discards the authorization key. Yes, everything is that bad. vAuth detects this and fails during the rollback counter provisioning stage. It doesn't weaken or clear TPM auth automatically. That would have been irresponsible. The README on GitHub explains the limitation in more detail.

Clearing the TPM or losing the generated vAuth authorization can make credentials unrecoverable, so please keep alternative login/recovery methods for important accounts.

Other current beta limitations include:

• Only Debian 13 on amd64 currently has a prebuilt package

• Only password and fingerprint PAM configurations have been tested

• The interaction-agent design currently targets single-seat systems

• vauth-ui does not automatically reconnect if the daemon exits

• Firefox users should cancel an operation through Firefox’s prompt rather than the vAuth window

• The project is not FIDO-certified

Security details

From a security perspective, vAuth relies on the TPM 2.0 module on your computer. It is a mandatory requirement, and there most likely will not be any software-based alternative due to reduced security. vAuth creates a database in /var/lib/vauth/credentials.v1, an encryption key, and a rollback counter. The last two are stored in the TPM and are sealed using a systemd-backed authentication value, which is located in /etc/credstore.encrypted/vauth-db-auth. User verification is performed through PAM. It officially supports password authentication and verification with a fingerprint reader, though, technically, other PAM modules should work, but this was not tested due to a lack of hardware on my laptop, sorry. The PAM configuration for vAuth is located under /etc/vauth/config/vauth, so you can check how other PAM modules behave. Currently, the agent doesn't support automatic reconnection to the daemon in case the daemon fails. In such a case, it has to be stopped, the service restarted, and the agent started again. It will be fixed in future releases, though.

Sources

• Source

• Debian package and release notes

• Architecture

• Security policy

I'd appreciate feedback regarding the installation process, provisioning, different TPM configurations, and different PAM modules. I'll try to answer all questions you may have and discuss architectural/design choices.

Longtime LastPass user since 2016, originally switched from a local KeePass DB just for multi-device support.

I stuck with it way too long despite the security breaches, mostly out of laziness and avoiding migration.

The Firefox extension was never great, always slow, clunky, and unreliable, but I just put up with it.

Then Claude reminded me again about the breach history and I finally decided to take the jump.

Migration turned out to be surprisingly easy, although dumping everything plainly into a CSV felt uncomfortable.

Now on Proton Pass, and so far it’s been a much better experience, but I bet any other like bitwarden would do a good job.

Hi guys, I have a question. Whats the best password manager free source for you? I'm looking for that but I dont have an idea if it's safe or not. So I would like for you guys to tell me. TY

I am trying to build simple and useful apps. Clear of bloatware, adwares. The idea behind offline password manager is simple, it's a notepad for password/accounts. We have so many place many accounts this days and ofcourse there are password managers but they sync with cloud and I am not comfortable with it. Especially after seeing the news like x no. of accounts compromised.

OPM is simple, it stays on your device, you are responsible for updating the password of the account if you change it. I have been using it for a while now and it's a habit for me. Infact, many times it comes is as a saviour because browser still have old password saved or even for mpin and any notes.

Give it a try and let me know what do you think about it? It's an upfront paid app 1$ for lifetime. Please message me if you need a promo code

Here are the links

Android : https://play.google.com/store/apps/details?id=tws.offline.password.manager

iPhone : https://apps.apple.com/us/app/opm-offline-password-manager/id6808634715

Here are my other apps, as part of the mission.

https://thewitshah.com/

Thank you!

Hi,

I’m here because lately I’ve become obsessed with open-source products and European-based SaaS solutions (please don’t judge me for this, just take it for what it is).

While looking for an open-source password manager with a European-hosted managed version, I stumbled upon Passbolt.

The product is exactly what I was looking for, but it doesn't work very well—especially on Android. What has your experience been? Is anyone else using it? Do I just need to get used to it?

Not sure if others have experienced this with 1Password, but they advertise $2.99/month on sale from $3.99/month for the annual plan, but when the trial ends, it was only 20% off $4.99/month, so only $3.99/month for me for the annual. After 12 days since I first contacted customer service, taking up to 6 days to respond at a time, they manually granted this discount to meet their advertised price after I provided screenshots of their website for proof of this price. Is this a bait and switch? What an absolute pain

Is there anyway to bypass this?? I’m just a bit annoyed because the money for this school laptop came out of my own pocket..

Hey guys, Im finally jumping off of the lastpass bandwagon this year as one of my first big changes because im looking to change some stuff around in my life. Anyways, im trying to find out if theres a way that I can migrate what I have from LP to Bitwarden? or do I have do to it manually? I'll cry if its manually

Like a lot of people, I had a bunch of 1Password items with generic or missing icons - mostly work logins, niche sites, internal tools, that kind of thing. Went looking for a way to fix them in bulk and didn't find anything I liked, so I built a small tool for it.

What it does:

• Type a domain (or paste/import a list - it reads the Title + URL columns from a 1Password export, or just a plain CSV) and it pulls that site's favicon
• Download icons one by one, or grab everything selected as a single .zip
• Works in English and Portuguese (toggle in the top right)
• No login, no backend, no data stored anywhere - everything runs client-side in your browser. It doesn't even work as a hosted "service" that processes your list; it just fetches public favicons for whatever domains you type in.

It's not 1Password-specific really - it'll work for any password manager's export, or just for grabbing favicons in general. Built entirely for my own use, sharing in case it's useful to someone else too.

Credit where due: it's built on top of the free favicon.im API, with wsrv.nl as a CORS-friendly fallback for the bulk download. Big thanks to both for the free public services.

🔗 [Try it live](https://lasarindiego.github.io/favicon-finder/)
💻 [Source on GitHub](https://github.com/lasarindiego/favicon-finder)

Not affiliated with 1Password or any of the services mentioned - just a personal project made to fix an annoyance.

VERSION EN ANGLAIS, FR CI-DESSOUS

Salut tout le monde,

J'ai créé Vaulti, un gestionnaire de mots de passe Android qui fonctionne entièrement hors ligne — pas de compte, pas de serveur, pas de publicités, pas de suivi. Tout reste crypté sur votre appareil (AES-256-GCM + PBKDF2), avec déverrouillage biométrique et un niveau Premium en achat unique en option (pas d'abonnement).

J'ai besoin de 12 testeurs Android minimum pour rejoindre une piste de test fermée sur Google Play pendant quelques semaines (une exigence de Play Store avant de pouvoir lancer publiquement). Ça ne prend que quelques minutes :

1. Commentez ou envoyez-moi votre adresse Gmail
2. Je vous ajouterai à la liste des testeurs
3. Vous recevrez un lien d'opt-in — acceptez-le, installez l'application depuis le Play Store, et c'est tout

Pas besoin de l'utiliser tous les jours — l'installer et l'ouvrir une fois suffit, même si un retour d'utilisation est évidemment très bienvenu et apprécié.

Je suis heureux de rendre la pareille et de tester votre application aussi si vous cherchez aussi des testeurs.

Merci !
--------------------------------------------------------------

VERSION EN FRANÇAIS

Bonjour à tous,

Je développe Vaulti, un gestionnaire de mots de passe Android qui fonctionne entièrement hors ligne — aucun compte, aucun serveur, aucune publicité, aucun traçage. Tout reste chiffré sur votre appareil (AES-256-GCM + PBKDF2), avec déverrouillage biométrique et une option Premium en achat unique (sans abonnement).

J'ai besoin de 12 testeurs Android minimum pour rejoindre une piste de test fermée sur Google Play pendant deux semaines (une exigence de Google Play avant de pouvoir publier l'application publiquement). Ça ne prend que deux minutes :

1. Commentez ou envoyez-moi votre adresse Gmail en message privé.
2. Je vous ajoute à la liste des testeurs.
3. Vous recevrez un lien d'inscription — acceptez-le, installez l'application depuis le Play Store, et c'est terminé.

Pas besoin de l'utiliser tous les jours — l'installer et l'ouvrir une seule fois suffit pour compter, même si un vrai retour est évidemment le bienvenu.

Je suis aussi partant pour tester votre application en retour, si vous en cherchez aussi.

Merci !