Let's expand that specifically generic headline. ""You probably can't trust anything if it's been compromised". More extra non-news at eleven.
this post was submitted on 16 Feb 2026
251 points (90.6% liked)
Technology
83295 readers
5070 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
Anyone got a good suggestion for a self hosted option? Ideally one that has a good iOS app and a web interface.
Web interface and secure are two things.
load more comments
(3 replies)
This is about to go belly up IIRC. openPGP is infighting, splitting into two projects, password-store hasn't been updated in a decade. It'll lose compatibility.
But currently all my passwords are in password store. Looking into alternatives. I like the idea of keepass because it's still local. But I also pay for proton, so might use theirs. They weren't susceptible in the recent attacks
Keepass, upload the database file to random free cloud accounts after making changes to the database.
This is foulproof as long as the end-user device doesn't get hacked, right?
Edit: Did I say something wrong? Why downvotes? Database file are encrypted, even if someone gets it, its encrypted and they don't have your password.
So its basically safe to upload your database. If you think I'm wrong then explain why I can't use free cloud accounts to store an encrypted file?
Yes and no. You can store them in a free cloud account, provided you have local copies; there's a risk your access to the cloud storage could be denied. A security risk is that they could harvest these databases, and decrypt them later.
I think your best bet, if you were to use free services, is to delete old databases from the cloud. Encrypt the new databases with the updated password manager and a new master password.
This is terrible advice, even if I assume you are also using a key-file on a removable usb. An attacker can brute force decrypt your db. There is no rate limiting when you literally have the database file, they could replicate it across thousands of servers each with dozens of cores, each core trying a dozen keyphrases per second. That's assuming a motivated attacker like a government or crypto scammers, but why open yourself to that possibility?
load more comments
(3 replies)