Brain-based management is getting too exhausting, and isn’t even fully possible with a larger quantity of online accounts.
With gnupg, git, and a hardware security token. Also known as “pass”.
Keepass2
1Password
Seconding Bitwarden, have been with it since my previous one (Lastpass? I forget, it was red) moved most of the good functionality behind a paywall many years ago. 11/10 I usually pay for the subscription, I like their product and want them to have a little walkin’ around money. But currently on the free tier which is perfectly fine (2 devices when I used pro for 3, but I hardly use my laptop.
Vaultwarden - self hosted bitwarden server that any bitwarden clients can connect to.
Selfhosted Aliasvault
Vaultwarden
keepassxc
1Password, but planning to move to VaultWarden.
I’m an old man yelling at clouds but I don’t trust any of the password storing technologies. I have a system of making/writing passwords and a save a short form of them on my pc. Without knowing a specific segment you’d never be able to guess what they were so the segment is the only thing I need to remember. Having to access accounts when not at home is a massive pain in the ass though lol
Basically the same. But not stored in a computer
I write down a password hint on a physical piece of paper.
Since the primary threat vector is remote access and not physical access, I’d argue that is fine.
Additionally the password hint has to pass through several thought chains in order to provide the actual password.
I do wish sites would up front tell you what the password requirements were when you logged in though.
Firefox remembers my passwords. For other things, text documents stored in a Veracrypt container
1Password family account with spouse, kids, and my parents. Vault management, ease of sharing, and remote management for my parents is nice, along with multiplatform for everything important, and the price feels quite reasonable at $1/user/month. No major security incidents ever, and I was pleased by their core service design whitepaper that I read many years ago. But as they’ve become increasingly corporate over the past several years I’ve felt like they care less and less about individual users, and the CEO’s recent pledge to Omarchy really pissed me off. So it’s been a great service for me but I don’t recommend it for new users unless they like nazis. I pay for a year at a time so I haven’t scrambled to migrate my family to a new solution quickly, but it sounds like Vaultwarden is most likely the way to go next.
Idk if this is the right choice but I write them down on a piece of paper and store that paper in my locked fireproof safe.
Not very user friendly, but not wrong either
Definitely the most secure!
Bruteforcing a safe might be easier than a password manager.
Once physical access is achieved you have already lost. They can just brute force your brain. A safe is perfectly fine for the usual remote attacker.
