Hacker News new | past | comments | ask | show | jobs | submit login

It can work quite well.

I use Strongbox, a standalone database password manager. My wife and I share a database in iCloud. The database supports concurrent access/syncing and works quite well to share passwords between us.

I trust in crypto to keep me safe. My key is derived from a pass phrase + HMAC-SHA1 digest of a shared secret stored in write only memory (Yubikey, Secure Enclave). My wife’s phone has the same. Our shared mac also has the same.

I could probably host my database on a public AWS bucket and still be safe (120 bits of entropy in the password).




What about limiting password access to SOME shared folders, for those with children?


You need a separate database for that. But on those SaaS services those separate folders are also not necessarily safe of encrypted with the same master key.

Also, happy and safe 2023!


You could use separate databases, but then how's the experience in moving from one database to the other?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: