<story><title>On Password Managers</title><url>https://www.tbray.org/ongoing/When/201x/2017/07/16/On-Password-Managers</url></story><parent_chain><item><author>pixelmonkey</author><text>I use Enpass on Linux, Windows, OS X, Android, and iOS. I also use the Chrome extension. It has a similar user experience to 1Password, but is actually serverless (you sync your encrypted blob to a cloud service of your choice, or not at all). I wish Enpass were open source, but I can understand their decision not to make it so -- its desktop application is free and its mobile apps include a small perpetual license fee ($10 per user, one-time). The format of the encrypted blob is a simple SQLCipher database that uses your (memorized) master password as the secret key, so even though the application is closed source, the data seems to be stored in an open format. Overall, it&amp;#x27;s probably the best option on the market in a very bad category of software. After evaluating them &lt;i&gt;all&lt;/i&gt;, IMO, you should run away from 1Password, Dashlane, Lastpass, etc and use Enpass instead. Even better if the place you sync your encrypted blob is protected by strict 2FA and has good (enforceable) privacy policies.</text></item></parent_chain><comment><author>joekrill</author><text>I&amp;#x27;m using Enpass, too. Your sentiments mirror mine exactly. In general I&amp;#x27;m surprised they are not getting more press. Perhaps if they were more explicit and open about their underlying data format (the SQLite+SQLCipher database)?</text></comment>
<story><title>On Password Managers</title><url>https://www.tbray.org/ongoing/When/201x/2017/07/16/On-Password-Managers</url></story><parent_chain><item><author>pixelmonkey</author><text>I use Enpass on Linux, Windows, OS X, Android, and iOS. I also use the Chrome extension. It has a similar user experience to 1Password, but is actually serverless (you sync your encrypted blob to a cloud service of your choice, or not at all). I wish Enpass were open source, but I can understand their decision not to make it so -- its desktop application is free and its mobile apps include a small perpetual license fee ($10 per user, one-time). The format of the encrypted blob is a simple SQLCipher database that uses your (memorized) master password as the secret key, so even though the application is closed source, the data seems to be stored in an open format. Overall, it&amp;#x27;s probably the best option on the market in a very bad category of software. After evaluating them &lt;i&gt;all&lt;/i&gt;, IMO, you should run away from 1Password, Dashlane, Lastpass, etc and use Enpass instead. Even better if the place you sync your encrypted blob is protected by strict 2FA and has good (enforceable) privacy policies.</text></item></parent_chain><comment><author>purvis</author><text>I&amp;#x27;ve recently installed Enpass and I&amp;#x27;m currently in the process of evaluating it. I really like the idea so far. My main concern is that they&amp;#x27;re not charging enough and wonder if the business model is sustainable.</text></comment>