Password Managers

KeePass is our long time favorite and recommendation for experienced users.

It's easy to use as a password storage on a single computer. If you want to integrate it with your browser, you need to find and install a fitting browser plugin manually. The KeePass website will help you find such plugins.

Storage

KeePass stores its password archive where you want. This means you are not forced to use the password managers cloud, like most services do. If you want to share it across devices, you can pick the cloud service of your choice.

Platforms

KeePass itself is a Windows application. There are many variants for other platforms listed on its website. We recommend MacPass for macOS users and MiniKeePass for iOS users.

Security

KeePass supports Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithms, and SHA-256 for hashing master keys. It allows to set up archives that require multiple factors to unlock, including passwords, key files or Windows accounts.

DashLane comes with a free version that runs on one device and manages up to 50 passwords. It has been editors choice in the Apple App Store, and Best App on Google Play. Due to the issues below, we cannot recommend the use of DashLane.

Storage

DashLane allows syncing using DashLanes own servers, or keeping the data just on your device. It does not allow you to synchronize your data using your own preferred cloud service.

Platforms

DashLane is available for Windows, macOS, Android, iOS and Linux.

Security

DashLane has published an updated Privacy Policy on March 15th, 2019. This one still contains inconsistencies:

We do not and cannot know your Master Password and, because of that, we do not and cannot know what Secured Data you store on the Services. We use technology, including cookies, to collect anonymous data that we use to provide and improve the Services.

Automated Decision Making and Profiling. We do not use your Personal Data for automated decision-making. However, we may do so in the future to comply with applicable law, in which case we will inform you of any such processing and provide you with an opportunity to object.

Once installed, Dashlane contacts gate.hockeyapp.net. HockeyApp is, quoting the service itself:

HockeyApp is a service for app developers to support them in various aspects of their development process, including the management and recruitment of testers, the distribution of apps and the collection of crash reports.

.
That this is automated profiling is made clearer by the use of the term "analytics" in various places on the HockeyApp website:

Because HockeyApp’s distribution, crash reporting, and analytics services are now available in App Center, HockeyApp will be retired on November 16, 2019.

This privacy policy no longer allows the sharing of sensitive data, but is incorrect about the profiling, keeping it hard to be fully trusted.

Security (pre May 15th, 2019)

There was an inconsistency in DashLanes Privacy Policy:

In order to use the password manager and secure digital wallet elements of the Services you will enter certain information into the App, including highly sensitive information like names, addresses, phone numbers, identity information, credit card information, passwords, receipts for online transactions and secure notes (“Encrypted Sensitive Information”). The Encrypted Sensitive Information is encrypted locally on your device using strong encryption and is backed up on the Dashlane cloud. None of it is viewable to Dashlane because it is encrypted with the Master Password. If you choose to synchronize your Encrypted Sensitive Information with more than one device (each an “Authorized Device” via the Services, the “Sync Function”), the Services are designed to transmit and store the Encrypted Sensitive Information through the Dashlane cloud to the Authorized Device(s) using strong encryption and in a manner that Dashlane will not be able to read.

At the same time, DashLane requests the right to share this Encrypted Sensitive Information that they say they have no access to with third party:

In order to make it less likely that someone will perpetrate a fraud on you, we may provide some portion of the Information, including some Encrypted Sensitive Information, to the financial institution that issued your credit card or other payment information that operates your credit card or payment network (collectively, “Payment Providers”).

Having lost faith that Encrypted Sensitive Information is out of reach for DashLane, the next part lowers the trust even further:

Affiliates. We may share some or all of your Information with our parent company, subsidiaries, joint ventures, or other companies under a common control (“Affiliates”), in which case we will require our Affiliates to honor this Privacy Policy.

Sticky Password is our general recommendation for all users who do not have their own cloud infrastructure or need the complex features of KeePass. Plus, we love that they support manatees!

Storage

Sticky Password can store your passwords locally, or in their cloud (hosted by Amazon) if you want to share them between devices. For enhanced security and privacy, it also offers a WiFi only synchronization that allows you to have your passwords on all your devices without using an external cloud not under your control.

Platforms

Sticky Password is available for Windows, macOS, plus Android and iOS smartphones.

Security

Sticky Password uses AES-256 encryption and optionally enforces two-factor authentication. Our favourite feature is the local synchronization where your encrypted data does not even leave your network. Access to your database for new devices can be blocked as an additional method of protection. Read their Security Whitepaper for more details.

Privacy

Contrary to some other password managers, Sticky Password does not use third party tracking or spyware modules.

Discount

As a Safer-Networking customer, you're entitled to a 50% discount if you buy it by following our product link. Please note that while we will get a share of this price, this description is written independently and our recommendation stands even without.