I've been using the password manager that built into Eset anti virus, but they are discontinuing it so I need to find a different one.

Are any of you using one now that you like and would recommend? If it uses a local database instead of cloud based that would be a big plus.

I've been using the free version of KeePass for years. It uses a local file that you can backup however you see fit. Just simple and effective.

https://keepass.info/

18 minutes ago, hangar said:

Are any of you using one now that you like and would recommend? If it uses a local database instead of cloud based that would be a big plus.

Roboform, but they've become very greedy. Cloud storage OR you can keep the file only on your computer. I left Roboform over a year ago because of $$$ and bought Nordpass which I will not recommend. I'll start looking again when my current subscription expires (which was a real good deal.)

+1 for KeePass

I use KeepassXC. https://keepassxc.org It is a fork of keepass that works better in linux. It encrypts its database with a password and I store the database on a cloud service so I can use the same database with multiple installs.

Bitwarden Password Manager Pricing & Plans | Bitwarden

Thanks guys, I'll keep my eye on the thread as others chime in.

The most secure is using Windows PIN and TPM and it’s very easy but is tied to your motherboards hardware … assuming you’re using latest versions of Windows 11. I wouldn’t trust any “hosting” service at all, they’re major targets for hackers because they reveal a goldmine of credentials … LastPass was hacked in 2022, Dashlane, Passwordstate, and a few others have all been compromised.

The ONLY way to hack a TPM 2.0 chip is to physically have access to the chip and very specialized tools such as bus sniffers. TPM isn’t bulletproof, but it’s FAR more difficult to compromise than any hosted password manager service (to be avoided IMHO).

My vote goes to Bitwarden. It works on Linux too, so all my PCs can share access.

I know you mentioned you want to avoid a cloud-based password manager, but I'd argue if you aren't using your password manager properly* for all of your accounts, you are leaving yourself at risk. The issue with local password managers is getting those passwords onto your mobile devices and keeping them in sync. There are hacky solutions such as storing the vault in OneDrive/DropBox/GDrive/etc, but those solutions won't be as seamless as using a cloud service that syncs automatically with all of your devices.

I use 1Password both at home and at work. They used to have a local option, but they are now cloud-only. Their security posture makes them immune to some of the previous password manager hacks like the one that affected LastPass. In the end, I came to the conclusion that hosting my passwords with them was less risk than hosting myself and still reliably getting the passwords to my mobile devices. They also have a pretty slick integration with FastMail that lets you easily create a new email address for every service you sign up for. FastMail is also subscription, unfortunately, but they won't be harvesting your emails like almost every free email service out there.

* Using a password manager properly means a different random, complex password for each and every login. If I can't create a random password on my phone when signing up for a new service and easily sync with all my other devices, I'm less likely to follow that rule, which is why I eventually went the cloud route.

I've used eWallet for ages which also lets you automatically input user/passwords into website fields, and of course has a robust password generator. You do have to run a sync routine periodically from your desktop to other devices using wallets like iPhone etc. Very user-friendly to use.

https://www.iliumsoft.com/ewallet/

6 hours ago, SayAgain said:

The most secure is using Windows PIN and TPM and it’s very easy but is tied to your motherboards hardware … assuming you’re using latest versions of Windows 11. I wouldn’t trust any “hosting” service at all, they’re major targets for hackers because they reveal a goldmine of credentials … LastPass was hacked in 2022, Dashlane, Passwordstate, and a few others have all been compromised.

The ONLY way to hack a TPM 2.0 chip is to physically have access to the chip and very specialized tools such as bus sniffers. TPM isn’t bulletproof, but it’s FAR more difficult to compromise than any hosted password manager service (to be avoided IMHO).

Does this only work on windows 11, or does it also work for 10?

So far I like Keypass for those who prefer to manage their own local database of passwords, and 1password for encrypted cloud based management. Keeper Security also looks good for a higher end business password solution, potentially.

The PIN and TPM method suggested by @SayAgain sounds very interesting as well, but I know nothing yet about how to manage that or how viable it is for me.