There are a lot of great options to choose from, so the worst thing you can do is just NOT use one! (unless you're using LastPass, of course...in which case please stop using it). Which one have you chosen to use and why? Leave a comment.

@azclaimjumper

3 ай бұрын

I've been using BitWarden, which evolved from whatever it's name use to be - Edward Snowden recommended it. I'm a "Premium" subscriber because I can use my YubiKey for my 2FA when logging into BitWarden. I also like that all three of their Data centers are all in Germany which, in my mind, make the info in Bitwarden password manager beyond the reach of any & all Federal Governments. They also have their Data Centers inspected by 3rd party Hacker groups who make every effort to hack into their Data Centers & BitWarden then transmit their Final Report to all Bitwarden Account holders.

@cadelepski5161

3 ай бұрын

Took your advice some time ago and ditched Nordpass for 1Password. Thanks! It's vastly superior!

@EIRE55

3 ай бұрын

Last year, I found a Google extension for Bitwarden Free Password Manager, so I installed it. I haven't yet got around to fully setting it up, but it seems to be very good so far. Happy new year to you and yours, and many thanks for all of your excellent advice. Stay well.

@neuideas

3 ай бұрын

I use KeepassXC on my PC, and KeepassDX on my Android phone. I also have a Bitwarden subscription for the browser. Bitwarden's browser autofill isn't perfect, though. If I want to fill in secret questions, I will need to do some manual copy/paste. Zoho Vault does a better job in this area, so since it's free, I use that in the browser, too. Each vault has its own unique (very long -- 44 characters for Bitwarden, 43 characters for Zoho, and 37 characters for KeepassXC) password, and I have backups and redundancy. I'm very happy with the trio.

@attackhelicopter-up3dh

2 ай бұрын

Vaultwarden, the selfhosted version of bitwarden.

Bitwarden for years 🏆💯

@AllThingsSecured

3 ай бұрын

Awesome!

@hiccups1980

3 ай бұрын

Bitwarden is awesome. 💪

@aragorn8414

2 ай бұрын

I jumped ship to Bitwarden after the LastPass debacle. Been great ever since!

@Xe4809

2 ай бұрын

I also use it , it is great

@CompletelyAverageGameplay

Ай бұрын

Bitwarden is phenomenal - introduced to them professionally and liked it so much I signed up with them for personal use. Been a happy customer for years, and not a single price increase to speak of. I am also in the Proton ecosystem (I had BItwarden before I bought into Proton) and proton pass is cool but not feature-rich enough to pull me away from Bitwarden.

thank you for doing valuable, hard work for us Josh!

@AllThingsSecured

3 ай бұрын

My pleasure, Steve!

@amramhakohen3923

2 ай бұрын

Hear hear!

how awesome are you!! I was looking for an unbiased review which is, apparently, a difficult task. Thanks for this overview :)

Bitwarden can be interfaced with some email alias services. You just need an API code.

@AllThingsSecured

3 ай бұрын

Correct. And you need to pay for those additional services as well. With Proton Pass, it's part of the package. That's my point.

@nicola6323

3 ай бұрын

@@AllThingsSecured Ah, I thought you had to pay at Protion Pass for that.

@Harikesh

3 ай бұрын

@@AllThingsSecured Not necessarily. I am using anondaddy integration without making any payment.

Thanks for an awesome breakdown but a plain english approach to them. I have used different PW managers over the years and was good to hear you talk about just the simple things that an end user wants rather than just the technical backend elements.

@AllThingsSecured

3 ай бұрын

I appreciate that. Thanks!🙏

About 12 yrs ago , Apple associates were recommending One Password and it hasn’t failed me yet. I’d like to pay to have it on my Mac as well , unfortunately I can’t figure out how to do it and their CS via email is w a robot. Which I could not understand. Your channel helps a lot. Thank you

@AllThingsSecured

3 ай бұрын

I'm glad it's helpful! So you're not able to use 1Password on Mac? They have a dedicated app to download on the app store.

@herbsmith1985

3 ай бұрын

CS from 1PW is terrible. I've been using it since about 2008 but sure wish I could find something else. Too big, too bloated for me. I looked at Minimalist Password Manager (Apple only) and like it but the company is so new, I wonder if it can survive

Love your vids Josh

@AllThingsSecured

3 ай бұрын

Thanks so much! I really appreciate that.

Thankyou for the unbiased, straight to the point review!

@AllThingsSecured

Күн бұрын

My pleasure👍🏻

Thank you for the video. I would have loved to hear you about the country of data storage. It seems to me that there are more risks in some countries where the law allows the state to have an eye on your data.

@simon6822

2 ай бұрын

In Bitwarden you can choose between US and EU

Super overview! Enjoyed the video! What password manager is your second choice.? Would have been good to also mention Bitwarden's org plan capability to share passwords with those in your group. Not sure if the others had that capability.

@AllThingsSecured

3 ай бұрын

Thanks! My second choice is Proton Pass because of the email alias solituon.

@mike80808

3 ай бұрын

The org plan is only for the paid product (annual subscription). I highly recommend it because of the 2-factor (one time codes, aka "authenticator" code) support. They are working on passkey portability. It also supports an email alias service.

@CyberMedics

3 ай бұрын

​@@mike80808Agree. Well worth the costs.

@DeltaSierra426

Ай бұрын

1Password has that ability.

Thanks for the useful review.

@AllThingsSecured

3 ай бұрын

Glad it was helpful!

Another excellent video Josh. i really enjoyed this one!

@AllThingsSecured

3 ай бұрын

Glad you enjoyed it!

Not telling a bunch of strangers on the internet which manager I use, but as a real cheapskate in general I'm more than happy to subscribe to their premium service even though they have a great free option. Using a password manager has literally been life changing and the few dollars a month is honestly nothing compared to the value I get.

Thoughts on keeper?

Thanks for the great videos. My question is when you go from Lastpass to 1password and do the export of your passwords from Lastpass, are they in fact downloaded in an unsecured way to your desktop or is that done locally? What is the safest way to download the csv file of your passwords to import them. The csv file is not encrypted in any way when it downloads. This is something no one seems to cover off in their videos.

@AllThingsSecured

27 күн бұрын

Any password manager export is going to be unsecured, so it’s best to import it as soon as you can and make sure the csv file is properly deleted.

@RobSnow-ui4sz

27 күн бұрын

@@AllThingsSecured Thanks for answering- Yes I realize that , but my question is , is it downloaded from the web unsecured or is it locally created. .

Hi Josh. Have you made a video yet about self-hosting Bitwarden? Benefits and detriments? I have the time (and am willing) to learn the process - but only if it’s worth it.

@AllThingsSecured

3 ай бұрын

Hey Caleb, I haven't. Honestly, I'm happy with my password manager setup and don't have the desire to self-host at this point. Perhaps there's another creator who has a tutorial about this?

@calebmccool

3 ай бұрын

Sounds good, thank you Josh. @@AllThingsSecured

@praetorxyn

2 ай бұрын

I have been self-hosting vaultwarden (a Rust implementation of the Bitwarden server) for years. If you have a Linux device like a NAS or a mini PC that you can setup Docker on, it's extremely easy to setup either the official Bitwarden server (which uses 2 GB of RAM because it uses Microsoft SQL Server for its database) or vaultwarden (which uses less than 500 MB of RAM because it uses SQL Lite, or optionally mariadb for its database like I'm doing). Vaultwarden is not fully featured, but it's not really missing anything I miss. No subscription fee necessary, but I'm not having it plug in 2FA codes for me as I would consider that a security vulnerability anyway, I just use Authy to keep track of my tokens and put them in manually.

Do any of them allow to authenticate from a different device? Example I’m working on my Laptop 💻 that doesn’t have biometrics but can easily authenticate if it prompted my iPhone

@CharlesWilliams-fv8fx

2 ай бұрын

Bitwarden does.

I jumped into 1password some time ago and I'll never go back. Had no trouble at all! Next step would be to transfer 2fa from authy to 1password

@AllThingsSecured

3 ай бұрын

Great!

@lonewolf-T-

3 ай бұрын

Is it a good idea to keep passwords and 2FA in the same app? Serious question.

@mr.octopus-plag

2 ай бұрын

@@lonewolf-T-good question. I think so, but because I really trust in the security of my password manager - also I change my master pw periodically. I may be putting some level of risk here, but honestly I don’t think it’s that big deal, comparing with the convenience of having pw and 2FA in the same app.

@lonewolf-T-

2 ай бұрын

@@mr.octopus-plag thanks 👍

@nickelsey9864

2 ай бұрын

@@lonewolf-T- I’d say no, it’s not. I use Authy with PIN and FaceID to unlock the app. I feel safer having my 2FA store seperate from my password vault.

Love your video’s, You forgot an important one: Keeper

@AllThingsSecured

3 ай бұрын

Thanks. I forgot a lot of them. Too many to fit in one video!

@jwphoto64

2 ай бұрын

I have used Keeper for years and nobody talks about it! That may be a good thing!

hey great - what about KEEPASS - a self hosted password DB. Using it since 2005.

@AllThingsSecured

3 ай бұрын

Yea, it's definitely a good option. I couldn't include all of them in one video.

I use iOS devices and a windows PC. The icloud password functionality works great for me, even on windows 11 with the relatively new browser extension for edge and chrome. Why would I need anything else?

@mistymu8154

2 ай бұрын

I agree iCloud works well, with 2FA and PassKey support, plus it includes Hide My Email, similar to what NordPass offers. The only time it doesn't work is if you use Android. I would definitely recommend iCloud to iPhone and iPad users who are not willing to pay extra for a third party service.

@SweatyFeetGirl

Ай бұрын

because icloud had security breachs aswell already

@redaboucetta4693

24 күн бұрын

@@SweatyFeetGirl really

Hi Josh! I would like you test Kaspersky Password Manager (that include 2FA suport).

I'll be interested in ProtonPass when it ca be self hosted. Good effort in the right direction though :)

thanks for this video and others, you are truly a proffesional [binged your channel for some time]

@AllThingsSecured

3 ай бұрын

Awesome! Thank you!

Great video! What are your thoughts on Express VPN Keys as a password manager?

@AllThingsSecured

3 ай бұрын

I didn't even know they offered a password manager, if that says anything ;)

@Kashifboi1

3 ай бұрын

What about Kapersky password Manager?@@AllThingsSecured

Why pay all of these while you can use foss stuff like keepass or keepassxc even?

@AllThingsSecured

3 ай бұрын

Because while FOSS works well for a certain type of person, you have to understand that the average internet user finds the websites uninviting and would prefer to have a native mobile app. I'm not saying KeePass isn't good, I'm just saying that people pay for a great user experience and convenience. And honestly...$1-$2/mo is worth it if I'm trying to get my mom to use a password manager.

@flaminbutt

3 ай бұрын

Keepass is an awesome project, but then you have to either self host your database or trust someone else. With how prices are for electricity, the cost of running even a rpi for 365 days a year cuts pretty close to the sub price. Also, the mobile apps suck so bad.

@be_pie_today

2 ай бұрын

same thoughts. I'm running it with syncthing (p2p alternative for dropbox/g drive etc) so there is no need for a server (with some limitations due to p2p nature) but one can use any file sharing platform already used. KeepassDX on android works great, plugins for chrome/ff are also great. And no passwords on 3-rd party machine is a plus for me.

@bobloblaw3191

2 ай бұрын

@@flaminbutt The KeePass DB is encrypted, so it doesn't matter which cloud storage you use. The apps like keepassdx for android are perfectly fine

If you want an inexpensive family plan, Synology C2 password is a great choice. $5 per year for six accounts is ridiculously good.

@AllThingsSecured

3 ай бұрын

Interesting. I've never used them before.

Can one import entries from Lastpass into Bitwarden rather than do that manually and one by one?

@spoils8179

2 ай бұрын

Yeah bitwarden has a dedicated import option

I used *Myki* Password Manager before the swine sold out and closed down. As a 68 year old who has issues remembering new things it was dead easy to use. Ended up with NordPass which was the best of the worst but still don't like them storing the Vault in the Cloud. I had Myki make scheduled backups every 7 days. No idea what I'm supposed to do with NordPass and likely wouldn't remember even if I read about backups.

Thanks for the vídeo!

Great tips, thanks

@AllThingsSecured

14 күн бұрын

Glad it was helpful!

I'd love to see what you think about Cloaked

@AllThingsSecured

3 ай бұрын

I've been using a lot of Cloaked features, but not the password manager yet.

Thanks

I thought I had one too many beers at 5:04 seeing Bitwawarden :)

which is better for Linux? I own an iPhone but use linux in PC, I need a password manager to syncronization between iOS and Linux

@moonphoenix9324

2 ай бұрын

I've always used BitWarden. It integrates flawlessly with iOS, they have a Linux app, and browser extensions. The browser extension is a lot more useful tbh, since most of the time you'll be auto filling in the browser, but I digress.

@Swemil

2 ай бұрын

Would probably guess Bitwarden, works good on most platforms👍🏻

Que opinas de enpass password y awallet cloud?

Great data

@AllThingsSecured

3 ай бұрын

Thanks so much!

Thank you.

It's a good security habbit to NOT store your 2FA / TOTP on the same device as your password manager, ie it's NOT advised to let your password manager generate your 2FA.

@AllThingsSecured

2 ай бұрын

For some accounts, sure. For others, I honestly don’t care. Here’s my strategy for how I treat 2FA and password managers: kzread.info/dash/bejne/ioOqw9Kxncq2msY.htmlsi=fjtzjoLEr-239g3R

Thanks so much! ❤ My question is what happens if 1) I need to access a site from a computer/browser that's not mine, and where the password manager is not downloaded? 2) the password manager company becomes unavailable? 😬🤔🙏

1Password is all I need

@AllThingsSecured

3 ай бұрын

👍

Keepassxc ?

@AllThingsSecured

3 ай бұрын

Yea, I'm sure they're good, but I ended up not testing them (along with plenty of others).

@simons854

3 ай бұрын

I would also appreciate keepassxc being tested 😊

@bwsct

3 ай бұрын

@@AllThingsSecured Please test KeePassXC

@danfg7215

3 ай бұрын

I think keepass is the only one where the setup = hard, but wins at other categories: open source, self hosted, free, mobile app

@iescobarjr

3 ай бұрын

I think Keepass is another kind of password manager, like Password Safe, designed to be just local in a device with optional cloud sync (under user's responsability)

it would be cool if you mentioned how easy it is to export passwords out of the manager, not just into the manager

@AllThingsSecured

3 ай бұрын

Honestly, they're all pretty much the same. They all easily export to a CSV file without any issue.

Bitwarden FTW

@AllThingsSecured

3 ай бұрын

Those who use it love it, that's for sure.

GREAT! 👍

@AllThingsSecured

3 ай бұрын

👍🏻👍🏻

What about KeePass XC?

@AllThingsSecured

3 ай бұрын

It’s another option, yes.

Josh: "I'm just gonna remove Last Pass from this list" Me: Staring at the Last Pass browser extension in my Firefox 😭 Bitwarden, here I come. Great channel and presentation I subbed!

@AllThingsSecured

21 күн бұрын

Thanks!

What about Keeper?

Is ProtonPass safe?

All of them seem cloud-based. What about local password managers such as Keepass? I'm trying to see if Buttercup is the same. Local

@bani_niba

3 ай бұрын

You can self-host Bitwarden.

@DayzGone

2 ай бұрын

@@Eternal_Mission316 Buttercup by default isn't very secure. Copied passwords are still saved in the clipboard even after the program is closed!

What do you think about Enpass?

@AllThingsSecured

3 ай бұрын

I have a good friend who uses and highly recommends them, I’ve just never tested it.

@ikepigott

5 күн бұрын

⁠@@AllThingsSecuredDo give it a shot. I’ve been using it for a few years now, and I love that *I* get to decide where my vault lives. There is no central vector for attack.

Why does no one talk about Enpass they allow you to store your vault with whom you choose.

@The_Dark_Knight_Forever

3 ай бұрын

I wonder the same thing. I've been using Enpass for many years & like it. Just don't ever forget your password vault's password or you're shit out of luck!

@pmjeterjr

3 ай бұрын

@@The_Dark_Knight_Forever lol Right!

@nicola6323

3 ай бұрын

You’re right. It’s like 1Password before they switched to the subscription model.

@AllThingsSecured

3 ай бұрын

Honestly? Because I’ve never heard of them or used them. There are plenty others.

@pmjeterjr

3 ай бұрын

@@AllThingsSecured Thank you for the Reply and Honesty! Check them Out I think they seem pretty secure I have been using them for a few years now.

Why no heylogin?

Very happy with Bitwarden 😃

@AllThingsSecured

21 күн бұрын

Great!

Be nice to see your thoughts Apple keychain.

What do you think of True Key

@AllThingsSecured

2 ай бұрын

Never heard of it

Thks but ??How does YubiKeys compare to them??

@AllThingsSecured

3 ай бұрын

Two different parts of your online security.

@tombouie

3 ай бұрын

@@AllThingsSecured Hmmmm .... Wellllll going-online & getting another damned password kinda defeats the whole purpose (& I would like to KISS ;) 1. ??How many good-old-fashioned PASS words/phrasescodes/PINs/tokerns/etcs can I put on a YubiKey?? 2. ??Can a YubiKey do both Time & Hash OTP stuff instead of using a phone/computer app to run-it?? 3. ??What can I do with a YubiKey that I can't do with a Password Manager?? 4. Computer authenication terminology is driving-me-crazy. ??Is there a divine/sacred website for dummies that lists/explain the terminology in Occam's Razor terms??

How about Keeper Security?

@AllThingsSecured

3 ай бұрын

Lots missing on this list, I’m sure. They just didn’t make the cut.

@MassAwakenin9

3 ай бұрын

@@AllThingsSecured been using them for 15 months, no troubles so far. Plus, their security model makes a lot of sense

@goresunstrider6272

2 ай бұрын

@AllThingsSecured i did an evaluation and Keeper was the best solution in my case (enterprise) i also switched to them from 1password. The documentation and functionalitys are insane

Proton pass has so far been my favorite.

@wildmanofborneo

2 ай бұрын

What makes that one your favorite? Which others did you compare to?

Do you think storing 2fas and passwords in a single area is a good idea?

@AllThingsSecured

3 ай бұрын

I share a full answer to that here: kzread.info/dash/bejne/ioOqw9Kxncq2msY.htmlsi=b_brt9vKhqIfBMSe

5:06 BitWaWarden

1Password fan boy. Best of the best.

@AllThingsSecured

3 ай бұрын

Absolutely!

Keep up 🆙 👍 😅

2FAS ?

Keeper Security?

What about Sticky Password? I have lifetime license =)

@AllThingsSecured

3 ай бұрын

If it works for you, that's great! I have no experience with them.

@Ninja40K

3 ай бұрын

I've been a loyal Sticky Password user for years without any issues. Additionally, it offers affordable dark web scans and a lifetime license.

@NWFWrestling

2 ай бұрын

@@AllThingsSecured I have used Sticky Password for several years with Lifetime license as well, and its been solid. Only issue I have now is it does not support the new hardware keys for 2FA so I am considering switching to 1password as I want that extra layer of security now that I am getting into using these keys.

What about passbolt??

@AllThingsSecured

15 күн бұрын

Never heard of them, so I’d be wary.

Keeper!!

Great job. Another one you can include in your reviews is the Apple password manager, though it's limited to Apple devices.

what about mSecure?

@AllThingsSecured

3 ай бұрын

I’ve never used them so I don’t know.

Proton pass needs native app support on mac & windows

Cool shirt!

@AllThingsSecured

25 күн бұрын

Thanks 🙏

What about the Norton Password Manager?

@AllThingsSecured

3 ай бұрын

I'm sure it's a good piece of software, but I've never been a huge Norton fan so I've never used their password manager. Sorry.

@XionLuis

3 ай бұрын

@@AllThingsSecured it is perfectly fine, would you mind testing and making a video on it one day?

I was waiting to hear security as a measure also but it wasn't there.

Keepass?

Is it really safe and secured? Kind of strange and risky to put all your passwords and even credit cards numbers on the web. At the same time I had to spend time looking at my password list for various sites and accounts.

@hey01e5

3 ай бұрын

i trust online password managers like bitwarden more than i trust myself to manage, but if you are okay with tinkering you can host a password vault yourself on your machine. bitwarden lets you do that

@huckleberry582

3 ай бұрын

If you choose one of these options and use a strong master password with 2FA, then you should not have to worry about it being hosted “on the web”. While it can be a pain in the butt to gather all your passwords if you have to look for them, that is where the ultimate beauty of the password manager comes in. Set it up and have it remember them every time you enter one. You will build the list without much extra effort and then it becomes ridiculously easy to no longer be one of the “low hanging fruit” going forward. When it comes to storing documents, as long as the password manager provider does not hold the key to your vault and have your 2FA token they can’t read it no matter what happens. You documents are as safe there as they are in your house or in your wallet. Unless, of course, you live in Fort Knox and you leave your wallet locked up at home when you go out. I’ll upvote Bitwarden. At $10 a year it is ridiculously cheap for the immense value and peace of mind it gives.

@AllThingsSecured

3 ай бұрын

You don't have to put your credit cards if you don't want to. And if you go with the right software, I do believe that it is incredibly safe and secure.

@suncat9

2 ай бұрын

They're encrypted in such a way that even the hosting company can't access the unencrypted data.

If you only want to use the password manager to access Web apps, the ones mentioned are good. However, if you want to include passwords for Windows apps they are not so good. If you can get them to work at all, you cannot use autofill and will have to cut and paste passwords.

Zoho Vault please

👍🏻

@AllThingsSecured

3 ай бұрын

🙏

Strongbox? 🔐

@AllThingsSecured

3 ай бұрын

Never heard of it.

@MartinIIoT

3 ай бұрын

@@AllThingsSecured Is it iOS (and Mac) client for KeePass database.

Using pen and paper and a.small vault box!😇done. Hack through that!😂

Keepass all the way!

Bitwarden #1 😎

@AllThingsSecured

3 ай бұрын

👍🏻

Passbolt?!!! I’d love to see reviewed

@AllThingsSecured

3 ай бұрын

Never heard of it 🤷‍♂️

@AngelCosta

3 ай бұрын

I kinda liked it but bitwarden is my go to. I cannot remember if it has attachments tho...

why not mozila?

Kaspersky?

@_marblewater

Ай бұрын

sure, as long as you don't mind them being affiliated with russian ss and government

if my phone is stolen and hacked, what is the point of a password manager?

2fa support: PLEASE, do a video on the security of storing them aside usernames and passwords IN THE SAME app... i mean, if someone steals my password manager accounts, he gets users and passwords... if 2fa is there, too, i'm REALLY scr3wed... and you totally ignored the passkeys support of all these apps, why?

@AllThingsSecured

3 ай бұрын

I like that idea and might make that video. The irony of what you said about passkeys, though, is that they are essentially a replacement of 2FA codes/keys. So storing them in a password manager is basically the same problem you’re bemoaning at the beginning of your comment.

@3styFekt

3 ай бұрын

What about the 2nd FA being something like a Yubikey? Are any of them compatible?

@squalazzo

3 ай бұрын

@@AllThingsSecured no, it's not the same... A 2fa is just a number... A passkey without the related PHYSICAL device to do the biometrics or similar, is useless...

Reason I like Josh's video, straight to the point 🙂 Great content once again !

@AllThingsSecured

3 ай бұрын

Thanks!

Bitwarden is the best as you can even host the server yourself.

Hello

@AllThingsSecured

3 ай бұрын

Hi.

Maybe worrh mentioning now, around 2 weeks ago proton pass halved their price for the 1 year plan

@AllThingsSecured

2 ай бұрын

Very true. How often does THAT happen??

You missed a lot of things and services. Maybe next time mention the offline ones that can sync with cloud, attachment, sharing, vault upload to cloud, etc.

@AllThingsSecured

3 ай бұрын

Thanks for the feedback.

Proton is Swiss based. So no sneaking from USA and EU… That’s the extra security…

@AllThingsSecured

3 ай бұрын

👍🏻

The one criteria you forgot (and which I'd consider one of the most important) is EXPORT. The possibility of the company going down and taking all my passwords with them is what keeps me from using ANY password manager. That, and putting all your passwords in one basket being an obviously stupid idea in the first place. Perfect target to attack.

@patrickberkery6388

Ай бұрын

they all have a csv export option.

Maybe a top 10 next time and mention specific features.

@AllThingsSecured

3 ай бұрын

👍

@Yinzzy656

3 ай бұрын

He actually got Very Specific when it comes to features.

please do this for authenticators as well

1:06 No there isn't. Open Source by default. Closed source can always contain backdoors and if anyone wants to attack it, they'll reverse engineer it. At least with Open Source everyone can indepentantly audit it.

Keepass

@AllThingsSecured

3 ай бұрын

Yea, very similar to Bitwarden IMO.