• Telodzrum@lemmy.world
    link
    fedilink
    English
    arrow-up
    50
    ·
    8 hours ago

    Because most people need a cloud solution for synchronization across devices. Unless you’re spinning up your own service like Nextcloud or similar for this, relying on a commercial cloud storage service for storing the file is just as dangerous (perhaps more so, as your attack surface is now across two third party services) as relying on someone like Bitwarden or Lastpass.

    • net00@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      12
      ·
      7 hours ago

      There’s a big difference. You trust entities like bitwarden/lastpass/etc to properly encrypt the data, protect your master key, and trust their entire architecture behind the scenes.

      When you encrypt the keepass DB that’s all done by you locally with a open source client. No one knows your master key, and you get a simple encrypted file. You can hand that file to hackers if you want, will be useless without the key.

      I put one of the copies of my keepass on onedrive, and syncs perfectly across all devices.

      Companies can enshiffity at a moments notice.

      • Dark ArcA
        link
        fedilink
        English
        arrow-up
        15
        ·
        edit-2
        6 hours ago

        I do not trust bitwarden to encrypt my data anymore than anyone trusts keypass to encrypt my data.

        They’re both open source and they both do the encryption locally; you’re plainly mistaken.