keepass2android

> KeePass2Android It doesn't support passkeys yet so I'm surprised you mention it because this is what I wait for a full cross-device (for me) support, to start using passkeys https://github.com/PhilippC/keepass2android/issues/2099

On Android, Keepass2Android developer is working on supporting passkeys in the near future (https://github.com/PhilippC/keepass2android/issues/2099) but I'll be honest, I haven't dedicated enough time learning about passkeys to be sure the app will be able to support all implementations of passkeys and avoid vendor locking completely.

iOS application doesn't: https://github.com/keepassium/KeePassium/issues/297 Neither does the Android app: https://github.com/PhilippC/keepass2android/issues/2099

I can save you some of that research. The KeePass family of password managers are open source and based around a shared file format. They save your passwords in an encrypted file on your computer or phone’s local drive. An ecosystem of apps by different people can parse that file format (after you enter your master password), and at least one app can export as CSV or HTML, so migration is not a problem. Since your passwords are in a local file, there is no online password manager that can be hacked. If you worry that your local password manager software will have malicious updates posted, you only have to read news at the time you download an update, which can be as infrequent as you like. If you need to share passwords among your devices, you can store the encrypted file in a generic file syncing service such as Google Drive or Dropbox.

Keepass2Android has been working great for me for almost a decade now https://github.com/PhilippC/keepass2android

On Android, I use Keepass2Android [1]. It is open source, is updated frequently enough, and it's compatible with my Yubikey-backed databases. Yubikey Challenge-Response for KeePassXC needs its own setting though, as KeePassXC made some design decision that is incompatible with KeePass, IIRC. [1] https://github.com/PhilippC/keepass2android/

I use KeepassXC password manager[1], it keeps my TOTP information and makes it available to use on all my devices. It syncs between my devices using Dropbox. Kepassium[2] makes it available on iOS, and Keepass2Android[3] makes it available on Android. It also manages my SSH keys and adds them to the ssh-agent, even on Windows. It houses a backup of my GPG keys. I even found that it can manage my credentials for use in scripts and git using git-credential-keepassxc[4]. Similar functionality can be had from 1Password[5], if you're into the more fancy experience. As a bonus this approach makes it very easy to store all those backup codes that totp services often give you. Won't help your current predicament but will prevent it from happening again :) 1: https://keepassxc.org/ 2: https://keepassium.com/ 3: https://github.com/PhilippC/keepass

For anyone that does challenge-response with a Yubikey like I do, I'd suggest Keepass2Android Password Safe[1] if you're on Android. I've been using it for years and it's well maintained in terms of updates and features, and it supports the KeePassXC challenge-response method. Edited to add: And it's open source[2]. [1] https://play.google.com/store/apps/details?id=keepass2androi... [2] https://github.com/PhilippC/keepass2android

I've never contributed to it, but my understanding is KeepassXC is both a library and desktop client (and cli client, which I've never used) and that the app uses the library to manipulate the database. This piece of documentation seems to confirm this. https://github.com/PhilippC/keepass2android/blob/master/docs...

I've been using Keepass2Android [0] for a few years now (synced with the desktop client) and haven't had any issues. I'm not aware if any audits on it, but I'm not sure the risk of a developer pushing malicious binaries is that much higher on the play store than the arch/debian/snap/brew repositories. [0] https://github.com/PhilippC/keepass2android

> KeepassCX + FF extension: Works decently for password management. Though there's no solution for FF mobile as far as I know. Not sure what mobile platform you use, but on Android I have been very happy with Keepass2Android (https://github.com/PhilippC/keepass2android). It uses the android password-manager API so you get autofill (or at least a quick-access button) on login fields in both apps and websites. Edit: It also supports a lot of methods for syncing the keepass database between devices, I point it to a directory that's managed by Syncthing and it works pretty flawlessly.

Keepass with passhole in terminal, Keepass2Android on Android and Tusk extension in Chrome. Keepass comunity solutions are strong and open source. And free. https://github.com/PhilippC/keepass2android https://subdavis.com/Tusk/ https://github.com/Evidlo/passhole

Keepass. At the moment I am using passhole in terminal, Tusk extension in Chrome and Keepass2Android on Android. All synced via Google Drive. The apps I use have changed over time but it is still the same database and all apps I use have open source code published on Github. [1] https://github.com/subdavis/Tusk https://chrome.google.com/webstore/detail/keepass-tusk-passw... [2] https://github.com/PhilippC/keepass2android [3] https://github.com/Evidlo/passhole