Ask
264
@adjunct_ora ·

Open-source password manager that a non-technical partner will actually use? Password Managers

I want the vault format to be something I can inspect and export, my partner wants it to work on an iPhone without her having to think about it once. Budget is up to about USD 40 a year for both of us and we need a shared folder for the household logins plus separate personal ones. I have already tried getting her onto a self-hosted setup and it lasted nine days before she went back to saving passwords in Notes. What actually survives contact with a household?

8 answers Share
Report

Answering anonymously — a moderator will review it first.

  • @blue_team_bex · 3mo ago

    Whatever you pick, write the recovery story down before you need it. Where is the master password if you are hit by a bus, who can get at the shared folder, and does the emergency access feature you are relying on require a paid tier. I have watched two families lock themselves out permanently and in both cases the software was fine and the plan was missing.

    158
    Share
    Reply

    Answering anonymously — a moderator will review it first.

    Report
  • @passphrase_perry · 3mo ago · 3 replies

    Bitwarden is the boring correct answer for exactly this pairing, because the clients are open source and the free tier is genuinely usable rather than crippled: unlimited passwords, unlimited devices, apps everywhere. If you want the extras, note that Premium went from USD 10 to USD 19.80 a year in January, and that the free tier lost integrated TOTP and file attachments in the same change, so check whether you were relying on those before you plan around the old numbers. For a household the family plan with a shared collection is the part that solves your actual problem.

    298
    Share
    Reply

    Answering anonymously — a moderator will review it first.

    Report
    • @parquet_pile · 3mo ago

      Keep the codes in a separate app anyway. Putting the password and the second factor in the same vault means one compromise gets both, which is not a disaster for most threat models but it is not two factors either.

      152
      Share
      Reply

      Answering anonymously — a moderator will review it first.

      Report
    • @indent_error_ivy · 3mo ago

      The free-tier TOTP removal caught me out too. Still cheap for two people, but a lot of the older guides on the internet describe a free tier that no longer exists.

      97
      Share
      Reply

      Answering anonymously — a moderator will review it first.

      Report
  • @openkey_owen · 3mo ago

    KeePassXC on the desktop with a compatible iOS client and the database file synced by whatever cloud drive you already pay for. Fully open, no subscription, and the file is yours. I will be honest that this is the option your partner will abandon, because conflict resolution when two people edit the vault on two devices is a bad afternoon and there is no way to make it not be.

    176
    Share
    Reply

    Answering anonymously — a moderator will review it first.

    Report
  • @quiet_stacker · 3mo ago · 2 replies

    The thing that made it stick in my house was not the software, it was doing the migration for her in one sitting. I sat down with her laptop, imported the browser passwords, deleted the browser copies so autofill stopped competing, set up Face ID unlock, and walked through adding one new login together. Nine days is exactly how long it lasts if you hand someone an app and a good intention.

    201
    Share
    Reply

    Answering anonymously — a moderator will review it first.

    Report
    • @coworking_cass · 3mo ago

      Deleting the browser copies is the step everyone skips and it is the reason people say the password manager "stopped working". Two things fighting over the same field feels broken and they blame the new one.

      94
      Share
      Reply

      Answering anonymously — a moderator will review it first.

      Report
  • @quiet_stacker · 3mo ago

    Open source matters less than exportability, in my experience. What you actually want is the ability to get a plain CSV or JSON of everything out at any time without asking anyone. Check that on the free tier of any candidate before you commit, because a couple of them make export deliberately awkward.

    129
    Share
    Reply

    Answering anonymously — a moderator will review it first.

    Report