How do you handle your passwords?

keepassxc database synced with syncthing across devices

Bitwarden already stores a local copy on all devices you have it installed. Just make sure you load up those devices from time to time... And guess what, you are probaly already doing that with your phone and laptop (which actually contains generally 2 copies, 1 on your actual client and another for the browser extension. Add a third device for good measure and... Oh, you also have a backup on bitwarden.com, this thing literally backups itself everywhere!

if any one of my Windows or Android units got stolen and somehow cracked into or something.

This shouldn't be a concern if you're using disk encryption and secure passwords, which is generally the default behaviour on most systems these days.

On Android, you don't need to worry about anything as long as you've got a pin/password configured, as disk encryption has been enabled by default for like a decade now.

On Windows, if you're on the Pro/Enterprise edition, you can use Bitlocker, but if you're on Home, you can use "device encryption" (which is like a lightweight Bitlocker) - but that requires a TPM chip and your Windows user account linked to a Microsoft account. If that is not an option, you could use VeraCrypt instead, which is an opensource disk encryption tool. Another option, if you're on a laptop, could be Opal encryption (aka TCG Opal SED), assuming your drive/BIOS supports it.

TL;DR: Encrypt yo' shit, and you don't need to worry about your data if your device gets stolen.

For years I've been using KeepassXC on desktop and Keepass2Android on mobile. Rather than sync the kdbx file between my devices, I have each device access it through the network. Either via sftp, smb, or nfs, but regardless I need to connect to my home's VPN to access it when away from home since I don't directly expose those things to the outside world.

I used to also keep a second copy of the website-tied passwords in Firefox Sync, but recently tried migrating that to Proton Pass because I thought the PIN feature might help, then ultimately decided to move away from that too and start using the KeepassXC-Browser plugin instead. I considered Bitwarden too but haven't tried it out yet, was somewhat deterred by seeing people say its UI seems very outdated.

Im not sure if that’s what you mean but I just export the Bitwarden database in an encrypted json and have it backed up in cloud. I’m not sure why you need the backup synced with all devices tho

Bitwarden. I would like to self host it one day (and keep that backed up) once I learn more about all that junk

I write them on paper just because I'm very old schooled.

Bitwarden has an import tool. You should be able to convert your spreadsheet into the format they like and import relatively easily.

For backups, you can create encrypted backups through bitwarden. So it shouldn't matter if synching itself is a secure process as what your syncing is already encrypted.

Bitwarden keeps a local copy of the data that can exported if something ever happened to bitwarden. If you want to keep an encrypted backup you can export the CSV and store it on an encrypted drive as a backup but not big worry about syncing it to all devices

KeePass on my phone and desktop, with the master file sync'd automatically to the server in my basement.

I prefer another tactic if I may share:

• Database in production: let Bitwarden clients sync the native way Bitwarden offers.
• Database in backup: let a dedicated backup service keep your database save.

I dont know if this could be done automatic (just backup the production database) or if this has to be done by export (by hand once in a while).

Doesnt matter from which device the backup originates because the native sync will keep them all the same usually in seconds.

Reset every time I need to log in

I have encryption enabled on my devices. If they get stolen, a casual thief isn't going to be able to break it. At most they'll wipe it, but they'll probably just fence it as-is or for parts.

Pass on Linux with a private git repo with search extensions for gnome and Firefox, and android password store on my phone.

I was using Bitwarden up until I moved my email service to Proton. Now, I just use all their things, but I didn't have any issues with Bitwarden personal. I do have some issues with their organization accounts though.

I mostly just use Firefox Sync. For critical passwords or non-web passwords and other small keys I store them in pass.

Proton Pass. If you're comfortable with cloud E2EE managers, it's far more worth it than Bitwarden, since you get unlimited email aliases. Better for privacy and even security. Plus, I trust Proton, they have a phenomenal track record in terms of security and encryption.

I've set up Vaultwarden as I used Bitwarden before that and it made switching very easy. Doesn't get easier than that, synced passwords across all your devices/browsers.

I'm using https://pwsafe.org/ in Linux, then https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe in android and this app to sync with google drive https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe.sync&hl=en_US

I'm agnostic about password managers, and I'm agnostic about sync'ing password repositories between devices. I believe there would be grave risks of losing access to my own repositories by misplacing their pass-phrases or bungling other kinds of authentication. I try not to put anything on portable devices that is super confidential. On the other hand, I restrict physical access to my desktop computer. I back it up continually, power it from an uninterruptible power supply, and run only a handful of server-side processes there. ... so I feel safe ... sort of.

I suppose it may seem heretical to members of this community, but I put all my passwords in a plain-text *.csv file on my desktop machine that I maintain with my own python script.

passwords.txt on a full-disk encryption HDD.

I don't really understand why passwords are so hard. Take two words that have meaning to you. Two number sequences that are important. Then lastly decide on two symbols. That's eight different passwords if you use one of each in that order, more if you want to mix the order. Now set rules to each. One word for personal one for business. One number set for fun the other for essential. The symbols are rather arbitrary but I try and stick with one for passwords I'm forced to make the other for passwords and logins I'm wanting to make. Obviously make unique passwords for any important stuff like baking and such but with this method I can log into accounts over ten years old within the first two tries. Usually it's the user name or tag that gives me the real trouble.