This is not something I typically use, but I figured some here might have some suggestions. I'm looking for suggestions of apps that would run on iOS and help with security, like saving passwords, generating unique random passwords, etc. I looked around and a lot of it looks to be paid or big tech. I'd really prefer something that's open source and works well.
Needs to be beginner friendly. I'm trying to help a kid grow up a bit and learn to be more diligent about security and not getting accounts compromised all the time like he currently does. Encrypted files backed up on own hardware, etc, etc, etc. like I do is just way over his head.
I use KeepassXC because:
I absolutely hate the idea of trusting cloud services.
I might end up trying one like that myself for simplicity sake. I have a NAS and while I do a cloud backup, it's BackBlaze enterprise services and it's totally encrypted on my end with a key that isn't shared with the cloud. So I should be good there until high level encryption is broken.
I'm with you, the generic cloud stuff has proven to be not secure at all.
Does it have an ios app?
And is there any way you can trust the app is keeping your passwords safe?
Website says no:
I have used https://keepass.info (or forks of it on various non-windows platforms) for over 10 years. I have no complaints and it has met my needs. The database is an encrypted file that is local, you move it around in the ways you want to move it around (I use a file-share). It will do version-synchronization in client (download new database you changed on another device, and merge it with your local file into one file that you share from then on). It will do auto-typing (username TAB password ENTER) but most websites these days deliberately design to make that annoying or impossible, which is unfortunate.
Nah dad, someone else downloaded juicy bottoms banging cars 420 somehow. Yeah....
Haha he's family, but not my kid at least. He has good parents just they are extremely normie when it comes to PC stuff. So while I'll constantly call out his dirty mind, we have a pretty clear understanding that if the only people he would get in trouble with is his parents, I'm not saying anything. Police, hospitals, pregnancy doctors, etc. I will text his mom so fast. I probably was just as bad at that age, except well my 28.8kbps modem stood in the way.
Yes. You want to get Bitwarden.
I used to use brave's encrypted chain. Idk how secure that is but I think it's P2P with the clients with no server having access to your key.
I bought Nordpass though. I need to start using it
Keepass does what you want and is a pretty simple interface, as far as these things go.
I use the one built into the browser I'm using. A malicious browser could be stealing your passwords if it wants anyways so there's not a lot of reason to use 3rd party anyways.
Then turn on 2 factor authentication so someone having your password has to do 1 more step to actually get into your account.
I use Vaultwarden for 2 reasons:
i have one, but i don't really "use" it. it's more like a password backup for me.
I just need to memorize a book's title, and two numbers - page number and line. I don't need a password manager.
If he's a kid, it's probably best to stick with generic branded software like Norton. It's easier to use and he probably doesn't have any data worth spying on anyway.
Yeah nothing useful for spying. Like look up any dumb teenager it's the same info. Microsoft, Steam, Epic, stuff like that. I got him into more secure browsers and ad blockers and stuff a few months ago. Some money was just spent on his Microsoft account by someone else and while I'm not sure it was directly a result of his stupidity, I just told him it's time to learn to take that stuff seriously and use two factor, better passwords, etc. It blows my mind how willing they are to share logins and stuff.
Yeah, I would suggest using normie apps in that case because it's more important to protect the passwords than privacy.
I think a lot of people here overthink things sometimes. Unless you're speaking out against the regime, you don't need a huge amount of privacy based software and you should just use what's simplest.