The Slant team built an AI & it’s awesome

Find the best product instantly

4.7 star rating

What are the best tools for managing secrets (tokens, keys, passwords)?

15

Options
Considered

62

User
Recs.

Feb 21, 2022

Last
Updated

Here’s the Deal

15 Options Considered

Best tools for managing secrets (tokens, keys, passwords)	Price	Browser integration	TOTP codes
-- KeePassXC	Free	Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave	Yes
-- KeePassX	-	-	-
-- pass	-	Chrome, Firefox, Qutebrowser	-
-- Bitwarden	Free	Chrome, Firefox, Safari, Opera, Edge, Vivaldi, Brave	-
-- LastPass	Free/Paid	Chrome, Internet Explorer, Safari, Opera, Maxthon, Dolphin	-

KeePassXC

Add Video or Image

Top Pro

YubiKey challenge-response support

CompetentBaalat's Experience

Easy to use. 100% secure app for managing passwords and secrets. See More

Specs

Browser integration:Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave

Platforms:Windows, Linux, Mac, BSD

Top Pro

Support for adding/removing SSH keys in system key agent

Top Pro

Database reports (password health, HIBP, and statistics)

Top Pro

New secure browser integration plugins

Official Browser plugins for Chrome, Firefox, Edge, Brave, Opera, Vivaldi and all other Chromium or Gecko based browsers. See More

Top Pro

Passphrase generator

Top Pro

Easy to use

It has a really clean looking design, unlike Keepass. Makes it really friendly to get into. See More

Top Pro

Good UI

User-friendly and straightforward. Easy to use. See More

Top Pro

Better than KeePassX

KeepassX discontinued in 2017. See More

Top Pro

It is free and open source

Free. No hidden tracking. 100% Open Source. See More

Top Pro

KeeShare shared databases (import, export, and synchronize)

Top Pro

Support for time-based one-time passwords (TOTP)

Top Pro

File attachments and custom attributes

Top Pro

Available web browser extension (keepassxc-browser)

Top Pro

Stores passwords locally instead of in the cloud

Don't trust anyone. See More

Top Pro

Cross platform autotype

Autotype available for all apps. See More

Top Pro

Strong end-to-end Encryption

Zero-knowledge. Military-grade AES-256 & Argon 2 unbreakable encryption algorithms. See More

Top Pro

Active development

KeePassX

Add Video or Image

Top Con

Discontinued

KeepassX was discontinued in 2017. KeepassXC is a fork of KeepassX that is still actively developed. See here. See More

Top Pro

Multiplatform (Linux, OS X, Windows)

Top Con

No plugins / does not autofill login information

For example, the Keyorm plugin for the official Keepass client has the ability to open a website, and autofill username & passphrase info. This is an important and expected feature for a password manager, which is not available in KeePassX See More

Top Pro

Can have browser intergration

With this fork. It's compatible with PassIFox and chromeIPass. See More

Top Pro

Free and open-source

Thus auditable. Not requiring to blindly trust the developers. See More

Top Pro

the best

pass

Add Video or Image

Top Pro

Multi platform support (Linux/Mac/Windows/Android/iOS/Firefox/Emacs/etc)

Specs

Browser integration:Chrome, Firefox, Qutebrowser

Supported platforms:Linux,, OSX, Android, iOS, SailfishOS

Encryption methods:GnuPG

Top Pro

Works in terminal

Top Pro

Free and open source

Top Pro

Works in command line

And is basically just a bunch of GPG-encrypted files stored in a folder. See More

Top Pro

Ultra portable

As it has both Git support and encrypts passwords to GPG-encrypted text files, it is really simple to access everywhere. You can either use a self-hosted or a personal cloud hosted Git repository. It is automatically being kept up-to-date. Clients for pretty much everything and a really active community. Even if you can't run a client you will still be able to access the password by decrypting them from the Git store. See More

Top Pro

Support for extra functionality via plugins

For example the plugin "pass-extension-tail" makes it possible to only display the non-password parts of a password file, like the username or the name of the service the password is needed for, and without showing the password. See More

Top Pro

Full control

You are not forced to rely on any other service provider than yourself. Like saving them on a remote server as in the case of LastPass. You don't have to extend your trust (to LastPass or any other provider). See More

Top Pro

Not using a database

It doesn't use a database like, for example, KeePass and thus doesn't open all passwords at once. Just one at a time. See More

Top Pro

Uses standard components

As GPG and Git are widely used, it relies on thoroughly tested and secure functionality. See More

Top Pro

Allows storing password history

You can version-control the encrypted files using Git, which allows you to track all changes done. See More

Top Pro

Multi user suppport

You and your team can share a repo and different subtrees can be encrypted for different sets of GPG ids. See More

Top Pro

Scripts for importing passwords from different services

Top Pro

Has cross platform GUI clients

It has a Qt-based GUI, an Android and iOS app, a Firefox plugin, a Golang GUI app, an interactive CUI, a dmenu script, OS X integration, and also an Emacs package. See More

Top Pro

Scripts for importing passwords from many password managers

Bitwarden

Add Video or Image

Top Pro

Open source

Bitwarden is open source and can therefore easily be reviewed and checked for security. See More

Top Con

Unable to remove duplicates

If you import more than one times, it will store its duplicates and there is no duplicate remover on these apps. See More

Specs

Browser integration:Chrome, Firefox, Safari, Opera, Edge, Vivaldi, Brave

Supported platforms:Windows, macOS, Linux, iOS, Android, Firefox, Chrome, Opera, Edge, Brave, Safari

Encryption methods:256-bit AES, RSA, and PBKDF2

Top Pro

Extremely strong encryption algorithm

End-to-end AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256. See More

Top Pro

Native mobile apps for iOS and Android

Top Pro

Strong, easy to use built-in password genarator

No need to think of individual passwords. This can be easily accomplished with an easy to use built-in password manager. See More

Top Pro

Clean interface with no ads

Top Pro

Free

It is easy to start as the majority of features are on the free version. See More

Top Pro

Cross-platform syncronisation

Automatically synchronises across various devices and platforms. Passwords get fully encrypted locally before leaving the computer. See More

Top Pro

Dark theme

Top Pro

Self-host your own server

Host your own server via Docker for small installations or by package for multiple servers. See More

Top Pro

Command line interface

You are able to retrieve passwords via the command line or in scripts. See More

Top Pro

Supports multi-logins on one site

You can store multiple logins on the same website. See More

Top Pro

Web vault

Possibility to manage passwords without installing the app or the browser plugin. See More

Top Pro

Two-step authentication

Offers 2FA with Authy, Google Authenticator or via email. Additionally, the Pro Version has Duo Security with Duo Push, SMS, phone call, and U2F security keys: YubiKey (any 4 series device or YubiKey NEO) and FIDO U2F (any FIDO U2F certified key). See More

Top Pro

Many browser plugins

There are plugins for Firefox, Chrome, Safari, Opera, Edge, Vivaldi and Tor Browser. See More

LastPass

Add Video or Image

Top Con

Has been hacked before

And becomes extra bad as you are forced to have everything at one central cloud place. See More

Top Pro

Autofills credentials and forms

Even in Android apps and Android browser. See More

Specs

Browser integration:Chrome, Internet Explorer, Safari, Opera, Maxthon, Dolphin

Supported platforms:Windows, OSX, Android, iOS, Windows Phone

Encryption methods:256-bit AES and rounds of PBKDF2-SHA256

Top Con

Doesn't Encrypt URL

Lastpass doesn't encrypt the links stored in the vault, which can be accessed by hackers. Encryption ONLY applies to Password and Username. See More

Top Pro

Cross-platform

Works pretty much everywhere. See More

Top Con

Not free/libre

This application is proprietary, and thus cannot be modified, freely distributed, or trusted to be secure. See More

Top Pro

Securely in the cloud

Synchronizes across any number of devices/browsers. Your data is encrypted on your device and LastPass do not have your decryption passphrase. See More

Top Con

History of bad support for the company behind LastPass

You never know how much you will pay for it because LogMeIn did the same with Hamachi product. Support will be bad. See More

Top Pro

Security check

Analyzes your credentials (locally) and informs you of weak amf duplicate passwords. See More

Top Con

Poor Email Support

Email support is slow and just offers canned responses that are not anymore helpful then their documentation. See More

Top Pro

In mobile device, fingerprint can be used to unlock credentials

It just saves a lot of time. See More

Top Con

During login, application loads for a very long time

Top Pro

Yubikey Support

LastPass offers multifactor authentication via Yubikey. See More

Top Con

Proprietary, US based company, no expectation of confidentialy of the secrets

It requires blindly trusting the software to use cryptography the right way. And hopping that this US based company will never be asked anything by the NSA. For which there is evidence that they do ask for data or introduction of security weaknesses. It would not be reasonable to assume that it would not happen to LastPass given it's popularity. See More

Top Pro

Multifactor authentication

LastPass offers multiple multifactor authentication options, including Google Authenticator, Grid Multifactor Authentication, Microsoft Authenticator App, Toopher Authentication, Duo Security Authentication, Transakt Authentication, Sesame Multifactor Authentication, Smart Card Authentication and Yubikey Multifactor Authentication. See More

Top Con

Doesn't always log out when idle

This issue is especially common with the mobile app. See More

Top Pro

Security alerts

Informs you if your email is found amongst aa publicly known data compromise incident. See More

Top Con

Recently doubled annual subscription rates

This applies even if you're a re-subscribing customer. See More

Top Con

Awful Enterprise Software™ UI

• Does not work correctly on all sites • Finding passwords and managing share settings is difficult • Requires several clicks to get to any of your data See More

1Password

Add Video or Image

Top Pro

Safari, Firefox, and Chrome extensions

Top Con

Android App UI/UX needs help

Unlike desktop browser extensions, you have to open the 1Password app, let it sync with dropbox, search for the password you need, click the right search result, then hold your finger down to copy the password you need to the phone's clipboard, then switch back to the app that is asking for the password, hold your finger down and select Paste. See More

Specs

Browser integration:Chrome, Safari, Edge, Firefox, Brave, Vivaldi

Supported platforms:Windows, MacOS, GNU/Linux, Android, iOS

Encryption methods:AES-256

Storage:Configurable

Top Pro

Password generator built-in

Top Pro

iOS and Android apps

Top Pro

Dropbox syncing of passwords

ID Guard Offline

Top Pro

Offline

It doesn't have Internet permission, you can save your secrets safely. See More

Specs

Browser integration:Chrome, Edge, Firefox, Safari. Send passwords from mobile app to browser extension over end-to-end encryption transport.

Supported platforms:iOS, Android, Windows, Linux, Mac OS

Encryption methods:Security Chip. AES-256.

Storage:Local only. True offline.

Top Pro

Account templates are terrific

The account templates are so powerful that you can save all your account security information in one record. For your google account, besides the password, you can save OTP, recovery code and email addresses. For Facebook, you can save emergency contacts as well. For Apple ID, the security questions can also be saved. See More

SafeInCloud

Add Video or Image

Top Pro

Simple UI

Very simple and intuitive UI on every plattform See More

Top Con

Desktop app's display is not stable

Sometimes, it's wiped off. See More

Top Pro

Able to share with family/other

Using GoogleDrive, the database can be shared to other user(s). See More

Top Con

No Linux client

Currently, there is no Linux client available. See More

Top Pro

Fully free desktop app

Windows and Mac Apps are fully free. For mobile apps, you have automatically 2 weeks pro version to test cloud synchronization and other pro features. Mobile pro version costs about 3$. See More

Top Pro

Huge import options from other password managers

You can import your passwords from 1Password, LastPass, Dashlane, mSecure, Keepass, and many others. See More

Top Pro

Cloud synchronization

You can choose Dropdox, Google Drive, or OneDrive as Cloud Storage. See More

Top Pro

Cross-platform support

It has cross-platform support for apps for desktop (Win, Mac) and mobile (Android, iOS) platforms. See More

Vault

Add Video or Image

KeyWhiz

Add Video or Image

Top Pro

Free and open-source

Thus auditable. Not requiring to blindly trust the developers. See More

KWallet

Add Video or Image

Top Pro

Free and open-source

Thus auditable. Not requiring to blindly trust the developers. See More

GateKeeper Enterprise

Top Pro

Audit reports

No more wondering which employee logged into which workstation when. See More

ChattyShulpae's Experience

Saves passwords and otp for pc, mac, websites, and applications. No internet required. See More

Specs

Dimensions:3.25" L x 1.5" W x 0.5" H

OS:Windows 7, 8, 10, mac 10.13.x, 10.14

Required Android Version:7.0 and up

API:Proximity engine API available.

Top Pro

RDP and Thin Clients

When you login to an RDP session, the Gatekeeper key pushes your passwords through so you can use them with thin clients. See More

Top Pro

Automatic authentication

Doesn't rely on the user typing a password or an OTP code - works with presence. See More

Top Pro

Best customer service!

There's always something that we need help with and gatekeeper is always there to save us. Best customer service, ever. They dont treat you different for being a smaller client. See More

Top Pro

Faster EHR login!

No complicated 2fa or extra steps. I login to my workstation and the passwords all auto-fill on websites and available for on-premise EHR. See More

Top Pro

No passwords to type

Typing passwords sucks and this device makes it so you don't have to remember any passwords. See More

Top Pro

Continuous authentication

Rather than traditional 2FA that only authenticates at one point in time, GateKeeper continues to authenticate even after the user is logged in. This way, there is truly 100% security 24/7. See More

Top Pro

Password manager for computers and applications

Not just for websites, but get into your computer and software applications too! See More

Top Pro

Automatic lock

GateKeeper automatically locks the computer as soon as the user leaves the proximity. See More

Top Pro

Touch to login

Using a key to touch the computer to login is so much easier than memorizing different passwords. See More

Dashlane

Add Video or Image

Top Con

Not Open source

Code is closed source. See More

Top Pro

Free on single device

Dashlane is available as a free product. The paid option ($29.99/yr) adds syncronization across multiple devices and ability to create an encrypted backup. See More

Specs

Browser integration:Chrome, Firefox, Safari, Internet Explorer, Edge, Opera

Supported platforms:Windows, Linux, MacOSX, Android, iOS

Multifactor:Yes

Top Con

Free limit to 50 accounts

Quickly used by most users. See More

Top Pro

Multifactor authentication support

Two-factor authentication is available through mobile apps. Dashlane supports Authy, Google Authenticator and FreeOTP. See More

Top Con

No Linux support

There is no native desktop app for Linux, though it is possible to use a Chrome or Firefox extension. See More

Top Pro

Store password securely

Passwords are stored in encrypted fashion and are only decrypted locally on each device. See More

Top Con

Proprietary, US based company, no expectation of confidentialy of the secrets

It requires blindly trusting the software to use cryptography the right way. And hopping that this US based company will never be asked anything by the NSA. For which there is evidence that they do ask for data or introduction of security weaknesses. It would not be reasonable to assume that it would not happen to dashlane if it becomes popular. See More

Top Pro

Sync between devices

Top Pro

Password generator

Top Pro

Password changer

Top Pro

Auto form fillup

GateKeeper Enterprise

Built By the Slant team

Find the best product instantly.

Lustre recommends the best products at their lowest prices – right on Amazon.

4.7 star rating

Try it now - it's free

Lustre.ai illustration