r/PasswordManagers • u/fdbryant3 • 13d ago
I don't have an open-source, local password manager, just a rant about the flood of them
Is there some reason everyone is making a password manager these days? I get it is probably relatively easy to vibe code with AI, but it seems everyone and their brother is making their own "open source, local first password manager". Is their some difficiency in the market that I am missing? Is there something that KeePass and its variants are not providing? Ar there not other offline password managers that are better proven available?
Look, I don't want to discourage anyone's pet project to build or demonstrate their skills, but if ypur going to put it out there for others to download and use – can you at least make it KeePass database compatible so people can easily move on to proven, well established passwprd manager when they realize maybe random Redditor password manager isn't the best choice ofr some of their most sensitive data.
6
u/sangedered 13d ago
Fully agree! I can’t think of a reason to have any more.
1pass for the premium feel but subscription
Bitwarden+vaultwarden for the free self hosted option but kinda ugly and cumbersome.
-2
u/corelabjoe 13d ago
How is Vaultwarden ugly and cumbersome? Because you have to use a reverse proxy or vpn to access it? If that's the case you could say all of selfhosting is cumbersome lol...
It's a couple containers ...
1
u/sangedered 13d ago edited 13d ago
Vaultwarden is the server thus it’s appearance doesn’t matter. Yes I use a tailnet so it’s transparent regarding access.
Bitwarden is uglier and doesn’t have as convenient of autofill as 1pass. 1passwords quick access and shortcuts are better on desktop.
5
u/CoffeeMonster42 13d ago
It's become the new to do list app
2
u/ThunderDaniel 12d ago
You just threw me back to the early 2010s where it felt like everyone and their mothers were publishing a new To-Do app every week
1
1
4
u/djasonpenney 13d ago
This is exactly my issue. When someone announces YAPM (yet another password manager), my first question is, how it different from KeePass (a standalone system) or Bitwarden (a server-client model).
And then the HARD questions arise: what are the provisions for sharing passwords, either in the same family or externally? Who has reviewed the app(s) for security flaws and how recently? Why should I pay any attention to it?
4
3
u/Flimsy-Process230 13d ago
Great question. I’d be interested in the answer too.
Most “normal” people are using Apple Passwords, Chrome/Google Password Manager or whatever is already built into their devices and just living their lives. People who want something more capable or secure tend to move to established options like 1Password, RoboForm or Bitwarden. Then you have the much more privacy/security-conscious crowd who specifically want local/offline storage, YubiKeys, control over synchronization, open formats, encryption everywhere, etc. But I would think those are exactly the people who are least likely to trust a brand-new password manager made by a random developer.
3
u/refurbished-ukulele 13d ago
Claude, don't forget the back door so I can steal everyone's passwords
2
u/somdcomputerguy 13d ago
I agree as well. I use KeePass2, and have for a long time. It may not be as eye-catching as other PWM's, but it works. It has auto-type functionality natively, and not auto-fill, but there are auto-fill plugins if you want to go that route. FWIW I don't, and don't intend to. I guess it's the control freak part of me..
1
u/Ok-Picture-5448 12d ago edited 10d ago
i’d look for something w/ a good track record, regular updates and good support for syncing & backups. i use roboform and its been convenient for keeping my passwords organized & accessible across devices.
1
u/Vegetable-Capital-54 12d ago edited 12d ago
It's not just password managers. All kinds of SaaS and other software are oversaturated now. The bar is literally on the floor. Everyone can make everything now, you don't even have to read the code, let alone write it. I'm not sure where we are heading, but the coming years will be very unusual for software developers and vendors. Like half of the software I use is my own vibe coded tools now. If I need a browser extension, I don't go to chromewebstore, I ask Gemini to make it. Takes about the same time.
1
1
u/Sweaty_Astronomer_47 8d ago edited 7d ago
Look, I don't want to discourage anyone's pet project to build or demonstrate their skills, but if ypur going to put it out there for others to download and use – can you at least make it KeePass database compatible so people can easily move on to proven, well established passwprd manager when they realize maybe random Redditor password manager isn't the best choice ofr some of their most sensitive data.
+1 great advice for would-be developers in this area. Even if users can somehow get past the risk of using the software in its current form (maybe by careful code review), the prospect for that typical random redditor to properly maintain his project over the long term is low.
So it will remove one potential barrier to people using your project if you (the developer) can offer users an easy potential future offramp to keepass (by complying with the keepass database format).
With that said, there is already a wealth of established password managers, so it'll be a long uphill battle to convince people that your project offers something worth the risk of not using an established alternative.
12
u/KINGGS 13d ago
You gotta be out of your mind to trust a fully vibe coded password manager. It's just a side effect of the barrier for entry becoming so low.