cross-posted from: https://infosec.pub/post/42164102
Researchers demo weaknesses affecting some of the most popular options Academics say they found a series of flaws affecting three popular password managers, all of which claim to protect user credentials in the event that their servers are compromised.…



I’ll be honest, password managers are like the holy grail of desirable to breech. If you’re using one it will be constantly under attack. It being breeched or vulnerable shouldn’t be a surprise. There isn’t really a secure way to store large amounts of passwords that doesn’t have some vulnerability issues.
That’s why I liked password store, no servers, just my encrypted password files on my own computer, that I sync over to my other devices.
Apparently it’s dying soon through, so I need an alternative.
i use keepassxc for the offline database part, and syncthing to sync it (among other things) between all my devices