Hacker News Reader

Comment by popotamonga | Hacker News Reader

I go with Keepass + Onedrive for my personal stuff

Keepass and Syncthing. The laptop is where I update the database. Every other device is read only.

Sometimes I also copy the db to my phone over gvfs (kdeconnect / gsconnect) from the command line so I don't have to start Syncthing.

I do this, but other devices are configured as sources too, so I can add entries from my smart phone or wherever.

KeepassDX on Android sets a AndroidApp attribute when an entry is used to autofill, because sometimes there isn't a website to match, so the com.X.Y format of the Android app's name will be used from the attribute next time.

As a bonus, KeepassX on desktop reloads the DB automatically once syncthing syncs the changes, so you don't have to reload the DB manually after adding/changing an entry from your other devices.

Risk of bidirectional synching, apart from conflicts when you edit from both sides, is that if something catastrophic happens, like you mistakenly delete half of your passwords, it gets synchronized to the other instances.

Syncthing can store histories, so you can retrieve your database from before the conflicts, if it happens. Personally, it hasn't happened to me. I keep my eye on syncthing's notification anyway, so it's not a problem to me.

And to be absolutely sure I have a cronjob that backs up the DB at regular times :-)

Yeah I’ve been using Keepass with a synced db for about as long as it’s been around and never had a complaint. Got most of my family doing the same and they like it too... and no longer use petname1234 for every single website.

username checks out

I am doing the same. With security, I feel that there is value in simplicity and even a little inconvenience.

Reply on news.ycombinator.com