I've just begun using keepass recently, therefore at least I have a place where my passwords are stored locally, because previously I stored them only in the browsers and synchronized. And now I think I shouldn't synchronize them anymore.
It comes down to what you consider safe, having evaluated the options. Many security professionals have considered this problem though, and generally advise using password safe type software over allowing browsers to remember passwords, simply because browsers used to be terrible at it - they allowed access without a master password, and used poor encryption methods. Some of these issues have been addressed now, but old habits die hard!
KeePass Firefox Addon to Access Passwords without KeePass Application
This extension uses KeePass to read credentials. KeePass is a free, open-source password manager application that helps users securely store and manage their password information. It uses strong encryption to protect the stored data and allows users to easily access their passwords using a master password or a key file. KeePass also offers various features such as password generation, auto-type, and support for multiple user-defined fields for each password entry. It is available for Windows, macOS, Linux, and other operating systems.
LastPass relies mainly on the cloud to store and sync your data between devices. However, you can enable the offline mode to access your passwords without needing to be connected to the LastPass servers via the internet.
KeePassXC is a cross-platform password manager that allows you to store all of your passwords in one location. A password manager is a tool that creates and stores passwords for you, so you can use many different passwords on different sites and services without having to memorize them. You only need to remember one master password that allows you to access the encrypted password manager database of all your passwords.
However, this export process launches in the background without the user being notified or KeePass requesting the master password to be entered as confirmation before exporting, allowing the threat actor to quietly gain access to all of the stored passwords.
Storage improves accessibility and user convenience. Since encrypted passwords are stored on cloud servers, users can access them from any number of devices and sync passwords between devices relatively easily without any required additional steps. These services keep encrypted copies of your vault on their own servers, ensure that all your devices are always synced and encrypt the transmissions between your devices and their servers. Cloud storage also makes passwords recoverable if the user loses the device.
Surprisingly, importing firefox paswwords is not supported. I've found a "password exporter" extension for firefox, it exports passwords in XML or CSV. But either format won't be recognised by enpass. I'm sure I could import these files in Keepass, then export as a keepass file, and then import the keepass file, but it's a bit complicated.
KeePass features an exceptional technical password generator with extensive options for customization and creating complex passwords. Its unique generation method creates random passcodes based on a specific character set as requested by the user. However, users will have to access the system via the application to generate a password, as there are no web browser integrations available to make this process quicker. 2ff7e9595c
Comments