Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apparently, Bitwarden can be self-hosted if you don't want your encrypted passwords to be stored on their servers (MS Azure). I say "apparently" as it's not something I've looked into.
 
  • Like
Reactions: mick2
Always have a backup manager program.

Amen.

mSecure, Keychain, and a bi-weekly CSV export from mSecure and import into a password protected spreadsheet (which gets copied and another level of encryption before copying to three different cloud accounts).
 
  • Like
Reactions: Apple_Robert
I did not like the idea that if someone stole my MBP and somehow hacked into it, they would have access to all of my keychain too. Now is that a warranted feeling? Maybe not.
The way I see it, someone would have to steal the laptop, then somehow hack past the login, then hack again into the password manager. I haven’t heard of that happening, but I think if it’s doable, people that skilled would be much more likely to target a company with a large database of accounts, rather than one random person.
Of course, if they somehow got access to your login credentials, it would be easy to see all your saved passwords, but in that case it wouldn’t matter which password service you went with.
Plus if a device is ever stolen, there’s always the option to change all your passwords for peace of mind, which is technically supposed to be regularly done anyway.
[automerge]1586039814[/automerge]
I use Bitwarden and 1Password. Both have worked well for me. Always have a backup manager program.
Amen.

mSecure, Keychain, and a bi-weekly CSV export from mSecure and import into a password protected spreadsheet (which gets copied and another level of encryption before copying to three different cloud accounts).
I memorize one algorithm (that changes every so often) that gives me the password for every site. Does that count as a backup?
 
Last edited:
  • Like
Reactions: LinusR
Keepass stores everything in it's own file. You can keep it on your PC (or Mac, I guess) or in DropBox and you just point the application to where the file is to open it.

  • KeePass is portable: it can be carried on an USB stick and runs on Windows systems without being installed.
  • Installer packages are available, too, for the ones who like to have shortcuts in their Windows start menu and on the desktop.
  • KeePass doesn't store anything on your system. The program doesn't create any new registry keys and it doesn't create any initialization files (INI) in your Windows directory. Deleting the KeePass directory (in case you downloaded the binary ZIP package) or using the uninstaller (in case you downloaded the installer package) leaves no trace of KeePass on your system.
  • Ports for other systems like Android, iOS, etc. are available. See the downloads page.
  • [2.x] Accessibility: KeePass 2.x features an advanced option that explicitly optimizes the user interface for screen readers.

Mac users should be looking at KeePassXC, which, unlike 2.x or KeePassX, is being actively maintained.

Local, cross--platform, standard data format, open-source, multiple clients, and free.
 
  • Like
Reactions: alex0002
The way I see it, someone would have to steal the laptop, then somehow hack past the login, then hack again into the password manager. I haven’t heard of that happening, but I think if it’s doable, people that skilled would be much more likely to target a company with a large database of accounts, rather than one random person.
Of course, if they somehow got access to your login credentials, it would be easy to see all your saved passwords, but in that case it wouldn’t matter which password service you went with.
Plus if a device is ever stolen, there’s always the option to change all your passwords for peace of mind, which is technically supposed to be regularly done anyway.
[automerge]1586039814[/automerge]


I memorize one algorithm (that changes every so often) that gives me the password for every site. Does that count as a backup?
If they got passed the login, wouldn’t the keychain be open?
 
Although I can make up my own passwords and keep a file handy to access them, it is a convenience to have a extension on your browser to quickly pull up passwords. I was using 1 Password until they went to a subscription model.

I've been using Enpass for the last year without issue, but all of a sudden it broke, kinda. I'm having issues getting it to contact the vault I keep in Dropbox. This company is located in India and customer support is by email.

What I'm seeing more and more of is software where the developers instead of selling their product are trying to get customers to subscribe to their product. I will fight this for as long as I can. I found this article and am working my way down the list, but so far the top 2 are subscriptions.

What Password manager do you use and is it subscription based?
Note: I've talked about this before either here or in the iOS App forum, but was unable to located the thread where the discussion took place.

You should go back to 1password, I am extremely happy customer and they still do sell stand alone version. If people like me and you continue to buy the non-subscription model we can convince them to keep offering it.

I forgot how to do it, but I think if you download it from the Mac App Store after installation there is an option to buy a license.
 
You should go back to 1password, I am extremely happy customer and they still do sell stand alone version. If people like me and you continue to buy the non-subscription model we can convince them to keep offering it.

I forgot how to do it, but I think if you download it from the Mac App Store after installation there is an option to buy a license.
I will consider this. At the time I switched from 1 Password, it would have been due to Catalina if I remember correctly. I wanted the upgrade price, but no subscription. I would not have switched if I could have figured a way to accomplish this. Any ideas, anyone?
 
Native keychain does it for me. Literally all the features from 3rd party password managers are available by default.

1. Automatic strong password suggestions.
2. Synced via iCloud.
3. Available on all Apple devices.
4. Security on point.

If one is in the Apple ecosystem there’s no need to use any other service unless they use windows / android devices as well.
 
I forgot how to do it, but I think if you download it from the Mac App Store after installation there is an option to buy a license.

The Mac App Store version doesn't support buying a license but the one from their website does.

 
If one is in the Apple ecosystem there’s no need to use any other service unless they use windows / android devices as well.

If Mac only, sure, since Keychain has secure notes (and yes, can use Notes as well for something like that).

But if going iOS as well, and since current iCloud Keychain does not support notes, only websites, things like wifi passwords, credit card info, driver's license, key codes, etc are basically a no-go with Keychain. Add in what @BasicGreatGuy said about having a backup, well worth the effort/spend to have a password manager, imo.
 
I hate subscription too but I keep going back to 1password because it’s really very easy to use on my apple devices and can sync with Windows too although their windows app is not as good. Also there seems to be more apps that can login with 1password than Enpass when I tried it last yr. This was when I was looking for other password apps.

I bought a gift card of $125 for $99 for 1password at their site last yr and hopefully it will last at least 4 yrs of subscription for personal use. After that, maybe there will be a better non subscription app for passwords. Or a keychain app from Apple would be great! For now, sticking to 1password

You can also buy a 1password stand-alone app. Maybe email their support team for a link coz it’s hard to find in their site.
 
If they got passed the login, wouldn’t the keychain be open?
Accessing the keychain requires entering your computer login password a second time (not sure if you can change the keychain password to something different). So if they somehow get your actual password, sure, they have complete unfettered access. But hacking is what people do when they don’t have the password, which is what someone who steals your laptop would have to do. I’m no computer security expert, but I think it’s like having a house and a safe inside your house. Even if they both use the same key, a normal burglar (hacker) breaks into the house through a vulnerable door or window, not by stealing your key (that would be called phishing). So the burglar will have a whole new challenge when they arrive at your safe.
Could someone break into both? Sure, anything is possible, but Apple houses and safes are very secure, and are constantly updating. No normal thief is going to be able to do this, and no super-skilled thief is going to want to for a lone random victim.
 
  • Like
Reactions: LinusR and Huntn
Are you using Dropbox free? Because if so you are limited to just three connections. It might thus not be Enpass acting up, it might be Dropbox limiting access to your password safe because you've exceeded the number of devices allowed to connect to your Dropbox.
 
Went? You mean added. You can still get the stand alone.

Can you, actually? I just downloaded 7.4.3 ("1Password-7.4.3.pkg") from their website and installed it. When I go to "Account > Manage Subscription" it only allows "Monthly, $2.99 billed annually" or "Monthly, $3.99 billed monthly". I don't see anywhere else in the app to buy a license, only that one spot. If I go to "Preferences - Accounts - Your 1Password account is in Trial mode" and click on that, it again directs me only to the monthly purchase.

I have absolutely zero interest in buying a crazy expensive subscription, but my old license is no longer valid since I'm on Catalina now and haven't updated in years. My once-per-5-years update would make 1Password cost like... $200 for a password manager, which is way more than the utility I personally get out of it. I'd love to keep using 1Password and not switch to one of the others suggested here, but I cannot figure out a way to buy a standalone license, and the instructions from their website from more than a year ago don't seem to be valid anymore.
 
Can you, actually? I just downloaded 7.4.3 ("1Password-7.4.3.pkg") from their website and installed it. When I go to "Account > Manage Subscription" it only allows "Monthly, $2.99 billed annually" or "Monthly, $3.99 billed monthly". I don't see anywhere else in the app to buy a license, only that one spot. If I go to "Preferences - Accounts - Your 1Password account is in Trial mode" and click on that, it again directs me only to the monthly purchase.

I have absolutely zero interest in buying a crazy expensive subscription, but my old license is no longer valid since I'm on Catalina now and haven't updated in years. My once-per-5-years update would make 1Password cost like... $200 for a password manager, which is way more than the utility I personally get out of it. I'd love to keep using 1Password and not switch to one of the others suggested here, but I cannot figure out a way to buy a standalone license, and the instructions from their website from more than a year ago don't seem to be valid anymore.

There was a link to the license option under the link for trial options. See here for details. Not sure if they removed it or not.

I'm running 7.4.3 on Catalina with a standalone license.
 
Can you, actually? I just downloaded 7.4.3 ("1Password-7.4.3.pkg") from their website and installed it. When I go to "Account > Manage Subscription" it only allows "Monthly, $2.99 billed annually" or "Monthly, $3.99 billed monthly". I don't see anywhere else in the app to buy a license, only that one spot. If I go to "Preferences - Accounts - Your 1Password account is in Trial mode" and click on that, it again directs me only to the monthly purchase.

I have absolutely zero interest in buying a crazy expensive subscription, but my old license is no longer valid since I'm on Catalina now and haven't updated in years. My once-per-5-years update would make 1Password cost like... $200 for a password manager, which is way more than the utility I personally get out of it. I'd love to keep using 1Password and not switch to one of the others suggested here, but I cannot figure out a way to buy a standalone license, and the instructions from their website from more than a year ago don't seem to be valid anymore.

The option to buy the standalone version is still there. They don't make it easy to find, but on the screen where it seems like you need to subscribe, you should see text that says, "Need a license? We have those too..." Click on the appropriate spot, and you'll get the screen to fill in your info.
 
  • Like
Reactions: MisterSavage
Not sure I'm weighing in too late but I've used Dashlane, Enpass, 1Password, and most recently LastPass (as well as Keychain, obviously) over the years.

While Keychain is great and I'd stick with that exclusively if I could, the seamless experience breaks down once you use anything but Safari, which is way to limited for my needs. LastPass is now my main password manager, with Keychain as a backup. Unlike Enpass, 1Password, and others, it doesn't require any payment to sync across devices (at least if it's just my iPhone and Mac), and unlike Keychain it appears to work pretty flawlessly across all my software. It gets my full recommendation.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.