Hacker News Reader

Comment by mapgrep | Hacker News Reader

How do you sync to iOS? Sync issue caused me to switch from keypassxc on Linux to browser based 1Password there. Not thrilled to use browser crypto but sending passwords to myself via Signal was getting old.

View on HN

Not OP, but I use Resilio Sync (aka Bittorent Sync) and it has been working great for sometime now. Just open the app and the latest kdb file gets pulled down. I use the Strongbox app on iOS which supports kdb.

How do you sync kdb to Strongbox. IIRC iOS Resilio requires files to be exported manually

With the later versions of iOS supporting "Files" now, Strongbox points to the file that is stored within the "Sync" (Resilio) location. What this means is that Strongbox is actively reading/writing to that file within the "Sync" location on iOS. Whenever I open the Resilio Sync app it will either push the changes I made on mobile to the server or pull down the file from the server and overwrite the file on iOS, depending on which is the newer file.

Also, I don't use Resilio's proxy servers either, so all of this is 100% running on my own infra. I have Wireguard setup on my home network, so if I am away from home, I can "VPN" in on my phone and then open the Resilio Sync app to sync up remotely.

I tried Files, but after some sort of timeout the File disappeared and I don't know what that was about, so I went back to Share.

I haven't run into that before, but I'll describe how I bootstrapped my setup in case that might help resolve your issue.

  (1) Setup Resilio sync on my NAS
  (2) Shared the folder holding the kdb file via Resilio Sync
  (3) Entered the code into the Resilio Sync mobile app
  (4) Performed an initial sync of the folder to my phone
  (5) Downloaded Strongbox and pointed it to the kdb file under the "Sync" location in Files on iOS

Thanks, indeed with "Files" it works!

In Resilio I Share > "Copy to Strongbox". I mark it as Read Only to keep from confusing myself and use a separate "Mobile kdbx" for any passwords I create on Mobile and share that the other direction as needed. (I don't have to use two files, I just find it an easier process that makes it less likely for me to forget to sync one direction or the other and "lose" a password.)

(I miss Windows Phone here in that I could directly share my Resilio file and its sync status with a KDBX app as Resilio was a standard file host. iOS really should standardize something like that instead of forcing a unidirectional Share as the only pattern.)

(ETA: I tried Files which is supposed to do something closer, but it didn't seem to work for me.)

I used to be of this mindset as well. (Two different files, so I wouldn't overwrite or lose a password just in case I synced the wrong direction)

I gave this up though as Resilio will detect conflicts and prevent overwriting in case that did happen and I make automated nightly backups of my password file, so I can restore the file if I ever did "lose" a password. I've been running with my current setup and haven't had to restore yet.

Strongbox is great, I use it to pull the kdb from Dropbox.

€45 for a 'lifetime' purchase, ouch!

That's comparable to a year of 1Pass/Lastpass. You can also use it for free, the pro version just adds some nice features/touches.

It is by far the best mobile Keepass-compatible app I've used. Minikeepass was good for a while but seems abandoned.

Thanks for the tip, i didn't notice Strongbox can be used for free. I refuse to buy any subscriptions so i always only buy full versions of apps. For my particular use case €45 is way too much though. Perhaps this will change in the future and i might buy it.

I bought the '1 time purchase' of 1Password on macOS like 6 years ago and have been happily using that on macOS, iPhone and iPad. Still gets updates today (I did pay for 1 major upgrade if i remember correct.) It was way cheaper than all the subscription crap where you don't really realize what you're paying for and how much. I would never buy the current expensive 1Password subscription.

I'm using a native app which uses the same passwords dialog as 1password (or the iCloud keychain for that matter). You can configure which one to open in the settings.

There's even multiple iOS apps available for use with keepass last time I checked. I'm using https://keepassium.com/

NB: I understand what you're saying about still using 1p with Signal. I did that for quite some time, as well(; Using keepassium really works equally well for me as did 1p on iOS. Doesn't look as fancy, but I really just need it to know my passwords or generate a new one^^

Reply on news.ycombinator.com