Password Managers

They're botnet

My disk is encrypted as well, encrypting the passwords means I could upload them here if I wanted to. I can afford waiting a few seconds to decrypt the passwords, if I couldn't I'd have to commit them to memory anyway.
You'd have to be retarded to waste time reinventing the wheel.

Just make up your own passwords, I have a mental algorithm I use to generate 30+ alphanumberic passphrases I use on any site I care about the credentials of... And there aren't many sites that I care about.

What if you need to change the password for some site?

Can anyone explain why there are like 500 versions of keepass?

KeepassX
KeepassXC
Keepass2X
Keepass2XYZ

Like what the fuck?

botnet. they had password leaks before
why the fuck would you entrust your stuff on a joke of a company that's under constant target?

It's easy to make passwords, but I probably have over 50 kinds of accounts on different websites all non-interconnected.

because a bunch of retard nigger skids just poo them out

Meme? They're required, given how fucked is webdev. No, using a formulaic password is not enough. Neither is some variation of "correct horse battery staple".
If you're really paranoid, even storing your passwords in an encrypted text file locally would be preferable to password reuse. Then at least it's up to you to fuck up, not to some intern that believes storing your data in plain text in some unsecured S3 bucket is completely acceptable.

1Password is OK if you like convenience and HSM integration.
KeepassXC if you don't trust your passwords to the *cloud*.
pass if you like something even simpler.

IIRC the original Keepass was a Windows only .NET program. There was a fork to make it runnable in Linux under Mono, and yet another fork of that to port it to something else other than .NET. Use KeepassXC.

You're confusing KeepAss with LastPass. I think the leak was they had browser integration, which is retarded since browsers are a nightmare.
Again, that's LastPass. Closed source, keeps your passwords "safely" in the cloud. keepass isn't a company.

yes it is you stupid fuck, as long as it has enough entropy.
No, that's the correct way to do it
no, using passwords for authentication is unnaceptable. only nigtards reuse passwords and even then they have 0 entropy and the hashes get cracked in 5 seconds, so all your jerking off about password hashes was for nothing

It doesn't matter how much entropy it has, if you use it in many different sites and any of those sites gets compromised. That was the point.
Given that the only kind of SSO supported by most sites is either botnet Google or botnet Facebook, you're bound to make dozens of different accounts, each with its own password.
Storing them in an ad-hoc manner is just inconveniencing yourself. As I listed, there are options for even the most autistic CLI only user.

Are you that intern that I was ranting about?
You clearly don't know shit if you're arguing against proper password hashing (PBKDF2, argon2, etc.) + salting. Even cracking a single password would take WAY longer than 5 seconds.

i use bitwarden. its open source and you can host it yourself.

Passwordmanagers store your passwords in a centralized or easy to find location.
The entire point of passwords is that only the user in front of the PC knows them.
The concept of storing them on the machine is completely retarded and against the entire point of having a password.
It's like sticking the key on the door or writing the code on the safe.

keepassxc.org/docs/#faq-keepassx

If your passwords are properly encrypted it is safe. If they are not, then of course all security is gone.

One thing worth adding is that getting your data out of pass is really simple, since it's all just text files anyway. If the passwords are stored in some sort of database you first have to go figure out that database format. If pass were to go tits up at some point it would be dead simple to get your passwords into something else.

and entirely pointless

Btfo

pwsafe
I use the CLI utility.

use them. If you're not retarded, you should be able to roll your own with gpg.
If you don't use them, you will inevitably reuse passwords or password patterns across sites, and one of those sites will inevitably leak your password, and then some twat will try youremail:yourleakedpass against every login page in the entire world and eventually find your other accounts.

You are every Russian hacker's wet dream, duptards.

Argon2 or bust

A little more bloated than KeePassXC though despite being audited recently