KeePassXC Responds to ProtonMail's Encryption Claims for Password Manager
twitter.comI've used KeepassXC + Syncthing for about 8 years now, and it works fantastically. Syncthing provides redundancy, syncing, and versioned backups. There's a merge function with conflict resolution in KeepassXC on the off chance two copies get out of sync with each other after a long period without connectivity. I have full control over where my data resides, and the source code of the entire stack.
The only other stack I've used is on-premises Bitwarden for small businesses, because it provides a more flexible multi-user permissions model. That can be made fully self-hosted and open source by using Vaultwarden for the server.
I don't see any advantages to using Proton Pass over those, frankly.
I mean, Its just marketing. Everyone knows how BS marketing always is, be it whatever company or product. I feel we should just take statements by marketing teams of companies with a grain of salt and just move on. Bringing the issue to light is not a wrong thing to do but I personally felt keepass's tweet felt quite confronting to me. Maybe it's because I'm not familiar with twitter culture. Who knows... Just my 2cents
I don't know. The company that provides my password manager is probably one of those companies that I'd like to know has an intellectually honest approach to communication.
They are in the business of trust.
Their specific claims designed to be misleading but barely vague enough to not be an outright lie go farther than just marketing imho. For example: "weak PBKDF2 implementations have made other password managers vulnerable". This isn't marketing a la "we make an industry-leading product", it's insinuating that a significant portion of competitors are using insecure tech.
I'd actually prefer if marketing stuck to the facts. Sugarcoating too much doesn't help the consumers.
The marketing of any online synchronized password managed can NEVER be even close to safety of keepass. We've seen their 13 foot walls break so why present you've invented the next best thing. Just stick to keepass and don't worry.