Join Nostr
2026-08-31 00:50:02 UTC
in reply to

marcelo on Nostr: Maybe this can help with your passwords? Offline option: Local encrypted password ...

Maybe this can help with your passwords?

Offline option: Local encrypted password database (KeePassXC family)
This gives you the convenience of generation + storage without trusting any company’s servers.
• Use KeePassXC (desktop: Windows/macOS/Linux). It stores everything in an encrypted .kdbx file you fully control.
• Mobile companions: KeePassDX (Android) or Strongbox/KeePassium (iOS).
• Encryption is strong (AES-256 or ChaCha20 + good key derivation like Argon2). The database never leaves your devices unless you copy it.
• Protect the master password extremely well (long passphrase, ideally Diceware-style). Optionally add a key file or hardware key (YubiKey challenge-response) for extra protection.
• Backups: Keep encrypted copies on offline media (USB in a safe) or carefully controlled sync (e.g., Syncthing between your own devices only). Never put the unlocked database online.
• Generate long random passwords (20+ characters) or passphrases for every site. Never reuse.
This is widely regarded by security-conscious users as one of the strongest practical options when you reject cloud managers. The main risks become physical device compromise or losing the file + master password (so backups matter).