You're viewing a single thread.
- Bitwarden (audit results)
- KeePassXC (audit results)
Neither is better as they offer different things. Both are audited by third parties.
I use Bitwarden and recommended it to all my friends and family. It's e2ee and you can have them on all your devices, it has autofill, password generators, and username generators. It's pretty neat.
I also have some friends who use keepassxc. There are mobile clients out there for it as well but it's meant as a completely offline password storage.
Keepass files can be synced via Cloud Storage. I keep mine in my Nextcloud account.
How do companies like Bitwarden make money? Its a free service, but as we all know nothing in this life is free.
Mostly business customers https://bitwarden.com/products/business/
I pay for premium and it’s nice to be able to use TOTP.
It's a freemium model.
There is a feature limited free version. Then a full featured version people pay for.
In this case, there's also a business version with per-user billing.
KeePassXC
Why specifically KeePassXC instead of KeePass?
Lack of 3rd party audit. Only KeePass 1.x was audited independently.
Less support for KP on Linux. Needs Mono to run. More importantly, AFAIK, it won't interface with a browser extension (on Linux). So KP is more Windows oriented.
I use Bitwarden for passwords, but I think Proton Pass is an honorable mention. It's possibly more secure, but still new.
Bitwarden just added support for Argon2id which makes brute forcing (which is impossible at the moment) even harder compared to PBKDF2.
Harder than impossible. Now that's a feature!
Harder in a sense that it costs even more resources per try, but current tech is not capable of brute forcing either.
1000% bitwarden. LastPass gets breached too often and have bait and switched users that were using the free version. Jump ship if you're using them, export them and import into bitwarden.