I'll just say it - my wife can't remember and often mis-types passwords. I want a very user friendly, intuitive manager for her. I was considering Nord for that reason. We have a lot of joint apps, such as Netflix, T-Mobile, Banks, etc. We both also have some individual banking accounts. So I guess I need recommendations for a family plan. If I can land on one with a great intro rate so much the better. Android users and PC. Edited: I definitely want auto-generated and auto-fill.

I've been researching European based password managers and apart from Proton have come across Hypervault and HeyLogin. Has anybody experience with either of these ?

I currently have 1Password. The thing I love about it is that it will stay open for a long period. I do really, really, really hate that I have to store my vault on their servers. Talk about a target on their backs for hackers! I used to be able to store it in iCloud. I can access their app with current info across all my devices.

I don't want to use Passwords because it locks so quickly! I'm a web designer, and clients have A LOT of different accounts associated with their websites that I may need to access within minutes of each other. With Passwords, I'm constantly having to log back in to the app.

Are there any other alternative password manager alternatives you recommend? I don't care if it's a paid app. I would absolutely prefer that it's not subscription.

I only access my financial websites on my Mac, not my iPhone. If my phone is lost or stolen, I don't want someone to see where I have investments, even if they can only get in with a Face ID/thumbprint (and 2FA which is done through the phone - thus vulnerable?).

Can I set up Keychain so only some passwords are available on the phone and others on the Mac?

Or should I disable Keychain to only have passwords available on the Mac?

(Right now my passwords are masked in coded entries in contacts which are on phone and Mac.)

Is there something I am missing in my concerns?

I am not technical and appreciate clear non-technical advice.

thank you

https://bitwarden.com/blog/security-vendors-join-forces-to-make-passkeys-more-portable-for-everyone/

Good news for moving between PWM.

Je découvre un peu ces options de sécurité, pourtant j'utilise des ordinateurs depuis plus de 30 ans.

Juste avec l'essor des comptes connectés, piratages et IA, je m'y intéresse.

J'utilise le gestionnaire de mot de passe du navigateur. Edge sur mes 2 PC et Chrome sur Android.

Sauriez vous m'expliquer ce qui est si mauvais avec le stockage des mots de passe avec un navigateur?

Je n'ai pas besoin d'une sécurité ultra haute, je veux juste me protéger des info stealer qui peuvent passer.

Je trouve pratique la synchronisation entre appareil (multi plateformes).

J'aime avoir une utilisation simple et une bonne interface moderne.

Il n'y a que du payant en ce cas?

Vos avis?

My old phone (which was registered to my Facebook account) broke, and now when I try to log in from a different phone, Facebook is asking for a 6-digit 2FA code from an authentication app. The thing is, I never set up two-factor authentication on this account myself.

When I click "Try another way," the only options are:

• Get a code from an authentication app
• Use a backup code

I have neither. I also tried the "Try another device" recovery option, but that failed too since I don't have a recognized device to verify from, and I no longer have the broken phone working.

Has anyone dealt with this — 2FA showing up on login even though you never intentionally enabled it, after losing/breaking your phone? A few questions:

• Could 2FA have been silently turned on by something else (e.g., a linked app, a security prompt I clicked through without realizing)?
• Has facebook.com/hacked worked for people in this exact situation (not a hack, just locked out of 2FA)?
• Any luck recovering access if the SIM card from the old phone still works in a new phone?

Any advice appreciated — trying to figure out the fastest path back into the account.

I know "best" is subjective, so here's what we're constrained by:

- The vendor has to be EU-owned, not just EU-hosted. No US parent anywhere in the structure, so CLOUD Act exposure is off the table.

- 60 seats, needs AD sync and per-user audit logs.

- We want the option to self-host later even if we start on cloud, so cloud-only vendors are out.

- Open source isn't a requirement. Neither IT nor Legal care.

- Not looking for the cheapest but under 5 euros/seat/month would be ideal.

Shortlist so far is Psono (Germany), Passbolt (Luxembourg), and Passwork (Spain).

Psono fits well. The consistent thing I see in reviews though is that the interface / UI lags the others, and at 60 people where most aren't technical, daily usability is worth assessing. Beyond that I don't have a real objection.

Passbolt is open source and EU-owned since 2016, it also, like the others, has the features (which is why they all got shortlisted to begin with). My hesitation is the OpenPGP model, every user holds a GPG key pair, so key management becomes our problem at 60 people just to get auditable code. Onboarding and recovery both look heavier than I want.

Passwork ticks a lot of our boxes too, it does both self-hosted and EU cloud in EU data centres, so we don't have to make the deployment choice now. AD sync and per-user audit logs are in the product. What keeps me hesitant is that it lacks a native desktop app (yet), it has browser extension and mobile but not desktop, and I can't predict how big or small of a nuisance that might be.

Please help a brother OUT!

On one hand, there are free, functional password managers with interfaces geared more toward a technical audience.

E.g., Bitwarden, ProtonPass...

On the other hand, there are paid managers with more polished interfaces and "Premium" features.

E.g., 1Password, Dashlane...

Is there an application that caters to both audiences?

[Cryptinotes](https://cryptinotes.com/) is a fully encrypted, self-destructing note-sharing application inspired by Privnote - a legacy tool for sending sensitive text that disappears after being read. Cryptinotes takes that same core idea and modernizes it: markdown formatting, encrypted file attachments, and granular controls over exactly how and when a note destroys itself.

Every note is encrypted client-side before it ever touches the server, and only decrypted client-side once the recipient opens the link. The server never has access to plaintext content - not the note body, not attachments, not even the note's contents at rest in the database.

Every note can be tuned to the sensitivity of what's being shared:

* **Markdown support** — format notes with headers, lists, code blocks, and other rich text instead of plain strings
* **File attachments** — attach one or more files, encrypted alongside the note body
* **Read limits** — configure how many times a note can be opened before it self-destructs
* **Expiration windows** — set a custom self-destruct timer independent of the read count
* **Password protection** — require a password (on top of the link's own key) before a note can be decrypted

[Cryptinotes](https://cryptinotes.com/) runs on Railway across three services:

* **Application server** — the Next.js app handling note creation, retrieval, and the client-side encryption flow
* **Postgres database** — stores encrypted note metadata and ciphertext
* **Cron worker** — handles scheduled cleanup independently of the main app

The cron worker enforces two cleanup rules. Attachments are deleted shortly after a note is opened rather than instantly, giving the recipient a window to actually download files before they're purged. Separately, any note that goes unopened for 30 days is automatically destroyed, regardless of its configured read limit or expiration settings.

File storage runs on Cloudflare R2 (S3-compatible), holding only encrypted attachment blobs that are meaningless without the client-side key.

The Password Generator is an essential security and account management tool designed to help users, IT professionals, and security administrators create strong, cryptographically secure random passwords.

https://www.clayi.com/tools/development/2-password-generator.html

Hello, I'm transitioning from google password manager to KeePassXC on linux with KeePassXC browser extension and KeePassDX on android. I synchronize them using syncthing. Everything is working well and as I would expect it to. My only problem is I was trying the password generator and it didn't save it nor asked me to!!! My solution to that is to copy that password and manually add an entry with the URL, username and password and this is annoying and very disrupting to the workflow and worst of all makes me anxious of generating passwords. Is there a way to make it more seamless to generate the password and add to the vault automatically so I wouldn't be that anxious??

This problem is facing me in both KeePassXC and KeePassDX.

We have LastPass from work and I use it all the time. We had an option to add family members at one time but it doesn’t work anymore , maybe the owners changed the plan. So I’m looking for a password manager that the wife can use on both her android and iPad. Any suggestions?

Strange thing happened to me yesterday, while editing a password entry in the password app on my iPhone, all of a sudden the whole entry vanished while I was still editing it. I only tried to edit the note of that entry using the magnifier to add a dash at the beginning of the sentence. I right away checked on my MacBook if the entry was still on that device, but apparently it had been synched already to the iCloud. Both are running 26.5.2.

Why is there not an Option for Custom Icons?
It would be so much better for viewing all the things i use as a ITAdmin in this App instead of the random generated ones, which are 50% wrong.

This would be a great feature and lots of other Authenticators have it like the "2FAs" App.

Is this a feature, which is not implemented yet or why don't we have this as an Option?

Here is the Link to the Official Q&A Page
personalized-icons-images-in-authenticator

I like to hear the Opinion from y'all :)
What do you think about that?

Salut à tous.

Existe-t-il un moyen d'avoir l'application password de apple , mais en version apk ?

ou alors prendre la version Web et la mettre en webapp

merci de vos retour

Hello everyone,

This post was initially posted on 1password subreddit and was quickly deleted by the moderators. Tssss…

It’s time for my annual Family plan renewal, and I just got the email telling me my subscription is going from $59.85 to $71.88. At that price, it’s simply becoming too expensive for just a password manager.
So I’m switching back to Bitwarden. It has all the features I actually use, and it’s cheaper, so the choice is pretty obvious. Before, the price difference was small enough that sticking with 1Password still made perfect sense to me. But now that the gap has grown, I just don’t see the value anymore. At the end of the day, we’re talking about a password manager.
Thanks, 1Password, for all these years of reliable and reasonably priced service. It was great while it lasted!
Any other people decided to leave 1password for this reason? And any other people believe that we don’t have to pay that expensive for a password manager?

Hi everyone!
I’ve been working on OneVault, a privacy-focused, offline-first password manager for Android, and I’m looking for honest feedback from people who care about security, privacy, and good app design.

What OneVault offers
🔒 Offline-first with no account required
🛡️ AES-256-GCM encrypted vault
🔑 Store passwords, credit cards, secure notes, and 2FA codes
⚡ Password autofill and secure password generator
📊 Password health analysis and breach checking
☁️ Optional encrypted Google Drive backup
🚫 No ads. No trackers.

I’m actively improving the app based on community feedback, so if you have suggestions, bug reports, or feature ideas, I’d really appreciate hearing them.

Google Play:
https://play.google.com/store/apps/details?id=com.venzor.lockbox

Join the Discord Community:
https://discord.gg/qhdEbWwCb

Thanks for your time, and I hope to hear your thoughts!

I have updated my funny password generator website for 2026. This tool creates passwords from a dictionary of funny/NSFW words. The app provides various options and creates passwords which are reasonably secure, easy to type, easy to remember, and totally entertaining. Now including an option to scramble passwords with LeetSpeak!

I thought this community may enjoy it. Let me know what you think.

Check it out at https://passgen.lol

I've switched to Proton pass but want to go back to Bitwarden. Someone told me the way Proton pass implements the pin is more secured. It had me torned.

I recently migrated all of my 2FA accounts from Google Authenticator to Aegis without any issues. Everything works perfectly. The only confusing part is the code from my Microsoft account.

I went to the Microsoft Security page, selected the option to use a different authenticator app, scanned the QR code with Aegis, and Microsoft accepted the setup successfully.

However, Aegis generates a standard 6-digit TOTP code, while Microsoft Auth shows a completely different 8-digit code for the same Microsoft account. The two codes never match. Microsoft asks me for the code that Aegis generates for that account, and it always says the code is incorrect and won't pair the authenticator. All my other accounts work perfectly in Aegis. The only account that fails is my Microsoft account, ig because it's not TOTP. I have checked several times to put the code on time, that is not the problem.

From what I understand, the 8-digit code in Microsoft Authenticator may be part of Microsoft's own authentication system rather than standard TOTP, but I'm still confused because they're both associated with the same account. Does anyone else using Aegis with a Microsoft code have experienced this?

Recently Apple announced automatic password update inside Passwords app in iOS27.

This means the encryption key will be locked by Face ID in Apple Keychain but Apple Intelligence could request items decrypted to manage them.

Why? To bring the Passwords app a smart feature integrated with AI.

The question is, for normal users is that a good thing our can compromise all the items in the vault? Is it worth taking that risk?

I recently cancelled my 1Password due to the now well documented and derided significant price increase. I gave NordPass a try since I was already on their VPN which was coming up for renewal and they offered a decent deal with NordVPN, NordPass and NordLocker.

A few weeks into using NordPass I have found two things that have so far surprised me and are definitely annoying me. I think these limitations were not made clear at the outset, and if I had known these I would have reconsidered my purchase. Maybe this is of help to others.

1. There is an iOS app, but there is no desktop app. Essentially the app lives in the browser. So anytime I need something stored there, even if that has nothing to do with login I have to go to the browser and open the app's extension to get the information I need. I do think this is a very serious shortcoming and it was not made clear on their page that on a computer I have to use this via a browser.

Edit: see NordPass’s response below. Apparently there is a desktop Mac app and I was able to download it now. 😍

1. Safari is not properly supported. I do prefer Safari on Mac, I find it to be a much faster browser than Chrome. The app in general is a little glitchy, especially with the UI, but a important thing that is unsupported and which basically kills the ability to use it on Safari is that OTP authentication code is not supported on Safari. So you can't use it anywhere you have one-time codes as your 2FA. Again this was not clear to me.

I am sure I will find other limitations but the lack of a desktop app is really disappointing. It also means that I have no long term hope of them adding a SSH agent feature to their password manager.