The Slant team built an AI & it’s awesome

Find the best product instantly

Add to Chrome Try it now

4.7 star rating

What are the best tools for managing secrets (tokens, keys, passwords)?

11

Options
Considered

39

User
Recs.

May 11, 2020

Last
Updated

Here’s the Deal

11 Options Considered

Best tools for managing secrets (tokens, keys, passwords)	Price	Supported platforms	Browser integration
-- KeePassX	-	-	-
-- pass	-	Linux, Windows, OSX, Android, iOS, SailfishOS	Chrome, Firefox, Qutebrowser
-- Bitwarden	Free	Windows, macOS, Linux, iOS, Android, Firefox, Chrome, Opera, Edge, Brave, Safari	Chrome, Firefox, Safari, Opera, Edge, Vivaldi, Brave
-- LastPass	-	Windows, OSX, Android, iOS, Windows Phone	Chrome, Internet Explorer, Safari, Opera, Maxthon, Dolphin
-- 1Password	-	OSX, Windows, iOS, Android	Safari, Firefox, Chrome, Opera

Built by Slant

Find the best product
instantly.

Stop wasting time searching endlessly. Lustre recommends the best products at their lowest prices – right on Amazon.

4.7 star rating

Add to Chrome - It's Free Try now - it's free

pass

Add Video or Image

Top Pro

Multi platform support (Linux/Mac/Windows/Android/iOS/Firefox/Emacs/etc)

Specs

Supported platforms:Linux, Windows, OSX, Android, iOS, SailfishOS

Browser integration:Chrome, Firefox, Qutebrowser

Encryption methods:GnuPG

Top Pro

Works in terminal

Top Pro

Ultra portable

As it has both Git support and encrypts passwords to GPG-encrypted text files, it is really simple to access everywhere. You can either use a self-hosted or a personal cloud hosted Git repository. It is automatically being kept up-to-date. Clients for pretty much everything and a really active community. Even if you can't run a client you will still be able to access the password by decrypting them from the Git store. See More

Top Pro

Works in command line

And is basically just a bunch of GPG-encrypted files stored in a folder. See More

Top Pro

Free and open source

Top Pro

Full control

You are not forced to rely on any other service provider than yourself. Like saving them on a remote server as in the case of LastPass. You don't have to extend your trust (to LastPass or any other provider). See More

Top Pro

Not using a database

It doesn't use a database like, for example, KeePass and thus doesn't open all passwords at once. Just one at a time. See More

Top Pro

Uses standard components

As GPG and Git are widely used, it relies on thoroughly tested and secure functionality. See More

Top Pro

Allows storing password history

You can version-control the encrypted files using Git, which allows you to track all changes done. See More

Top Pro

Support for extra functionality via plugins

For example the plugin "pass-extension-tail" makes it possible to only display the non-password parts of a password file, like the username or the name of the service the password is needed for, and without showing the password. See More

Top Pro

Multi user suppport

You and your team can share a repo and different subtrees can be encrypted for different sets of GPG ids. See More

Top Pro

Scripts for importing passwords from different services

Top Pro

Has cross platform GUI clients

It has a Qt-based GUI, an Android and iOS app, a Firefox plugin, a Golang GUI app, an interactive CUI, a dmenu script, OS X integration, and also an Emacs package. See More

Top Pro

Scripts for importing passwords from many password managers

Bitwarden

Add Video or Image

Top Pro

Open source

Bitwarden is open source and can therefore easily be reviewed and checked for security. See More

Specs

Supported platforms:Windows, macOS, Linux, iOS, Android, Firefox, Chrome, Opera, Edge, Brave, Safari

Browser integration:Chrome, Firefox, Safari, Opera, Edge, Vivaldi, Brave

Encryption methods:256-bit AES, RSA, and PBKDF2

Multifactor:Yes

Top Pro

Cross-platform syncronisation

Automatically synchronises across various devices and platforms. Passwords get fully encrypted locally before leaving the computer. See More

Top Pro

Extremely strong encryption algorithm

End-to-end AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256. See More

Top Pro

Native mobile apps for iOS and Android

Top Pro

Strong, easy to use built-in password genarator

No need to think of individual passwords. This can be easily accomplished with an easy to use built-in password manager. See More

Top Pro

Clean interface with no ads

Top Pro

Many browser plugins

There are plugins for Firefox, Chrome, Safari, Opera, Edge, Vivaldi and Tor Browser. See More

Top Pro

Free

It is easy to start as the majority of features are on the free version. See More

LastPass

Add Video or Image

Top Pro

Autofills credentials and forms

Even in Android apps and Android browser. See More

Top Con

Not free/libre

This application is proprietary, and thus cannot be modified, freely distributed, or trusted to be secure. See More

Specs

Supported platforms:Windows, OSX, Android, iOS, Windows Phone

Browser integration:Chrome, Internet Explorer, Safari, Opera, Maxthon, Dolphin

Encryption methods:256-bit AES and rounds of PBKDF2-SHA256

Multifactor:Yes

Top Pro

Cross-platform

Works pretty much everywhere. See More

Top Con

Proprietary, US based company, no expectation of confidentialy of the secrets

It requires blindly trusting the software to use cryptography the right way. And hopping that this US based company will never be asked anything by the NSA. For which there is evidence that they do ask for data or introduction of security weaknesses. It would not be reasonable to assume that it would not happen to LastPass given it's popularity. See More

Top Pro

Securely in the cloud

Synchronizes across any number of devices/browsers. Your data is encrypted on your device and LastPass do not have your decryption passphrase. See More

Top Con

During login, application loads for a very long time

Top Pro

Security check

Analyzes your credentials (locally) and informs you of weak amf duplicate passwords. See More

Top Con

Recently doubled annual subscription rates

This applies even if you're a re-subscribing customer. See More

Top Pro

In mobile device, fingerprint can be used to unlock credentials

It just saves a lot of time. See More

Top Con

History of bad support for the company behind LastPass

You never know how much you will pay for it because LogMeIn did the same with Hamachi product. Support will be bad. See More

Top Pro

Yubikey Support

LastPass offers multifactor authentication via Yubikey. See More

Top Con

Has been hacked before

And becomes extra bad as you are forced to have everything at one central cloud place. See More

Top Pro

Multifactor authentication

LastPass offers multiple multifactor authentication options, including Google Authenticator, Grid Multifactor Authentication, Microsoft Authenticator App, Toopher Authentication, Duo Security Authentication, Transakt Authentication, Sesame Multifactor Authentication, Smart Card Authentication and Yubikey Multifactor Authentication. See More

Top Con

Awful Enterprise Software™ UI

• Does not work correctly on all sites • Finding passwords and managing share settings is difficult • Requires several clicks to get to any of your data See More

Top Pro

Security alerts

Informs you if your email is found amongst aa publicly known data compromise incident. See More

1Password

Add Video or Image

Top Pro

Safari, Firefox, and Chrome extensions

Top Con

Android App UI/UX needs help

Unlike desktop browser extensions, you have to open the 1Password app, let it sync with dropbox, search for the password you need, click the right search result, then hold your finger down to copy the password you need to the phone's clipboard, then switch back to the app that is asking for the password, hold your finger down and select Paste. See More

Specs

Supported platforms:OSX, Windows, iOS, Android

Browser integration:Safari, Firefox, Chrome, Opera

Encryption methods:AES-256

Multifactor:Yes

Top Pro

Password generator built-in

Top Pro

iOS and Android apps

Top Pro

Dropbox syncing of passwords

Vault

Add Video or Image

SafeInCloud

Add Video or Image

Top Pro

Simple UI

Very simple and intuitive UI on every plattform See More

Top Con

Desktop app's display is not stable

Sometimes, it's wiped off. See More

Top Pro

Able to share with family/other

Using GoogleDrive, the database can be shared to other user(s). See More

Top Con

No Linux client

Currently, there is no Linux client available. See More

Top Pro

Fully free desktop app

Windows and Mac Apps are fully free. For mobile apps, you have automatically 2 weeks pro version to test cloud synchronization and other pro features. Mobile pro version costs about 3$. See More

Top Pro

Huge import options from other password managers

You can import your passwords from 1Password, LastPass, Dashlane, mSecure, Keepass, and many others. See More

Top Pro

Cloud synchronization

You can choose Dropdox, Google Drive, or OneDrive as Cloud Storage. See More

Top Pro

Cross-platform support

It has cross-platform support for apps for desktop (Win, Mac) and mobile (Android, iOS) platforms. See More

KWallet

Add Video or Image

Top Pro

Free and open-source

Thus auditable. Not requiring to blindly trust the developers. See More

KeyWhiz

Add Video or Image

Top Pro

Free and open-source

Thus auditable. Not requiring to blindly trust the developers. See More

Dashlane

Add Video or Image

Top Con

No Linux support

There is no native desktop app for Linux, though it is possible to use a Chrome or Firefox extension. See More

Top Pro

Free on single device

Dashlane is available as a free product. The paid option ($29.99/yr) adds syncronization across multiple devices and ability to create an encrypted backup. See More

Specs

Supported platforms:Windows, Linux, MacOSX, Android, iOS

Browser integration:Chrome, Firefox, Safari, Internet Explorer, Edge, Opera

Multifactor:Yes

Top Con

Proprietary, US based company, no expectation of confidentialy of the secrets

It requires blindly trusting the software to use cryptography the right way. And hopping that this US based company will never be asked anything by the NSA. For which there is evidence that they do ask for data or introduction of security weaknesses. It would not be reasonable to assume that it would not happen to dashlane if it becomes popular. See More

Top Pro

Multifactor authentication support

Two-factor authentication is available through mobile apps. Dashlane supports Authy, Google Authenticator and FreeOTP. See More

Top Pro

Store password securely

Passwords are stored in encrypted fashion and are only decrypted locally on each device. See More

Top Pro

Sync between devices

Top Pro

Password generator

Top Pro

Password changer

Top Pro

Auto form fillup

Explore our new Product Comparison Pages

Built By the Slant team

Find the best product instantly.

Lustre recommends the best products at their lowest prices – right on Amazon.

4.7 star rating

Try it now - it's free

Lustre.ai illustration