You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
44 lines
5.4 KiB
HTML
44 lines
5.4 KiB
HTML
1 year ago
|
<!DOCTYPE html>
|
||
|
|
<html lang="en">
|
||
|
|
|
||
|
|
<head>
|
||
|
|
<title>(POST) KeePass + Syncthing</title>
|
||
|
|
<link rel="icon" type="image/x-icon" href="../../images/favicon.webp">
|
||
|
|
<link rel='stylesheet' type='text/css' href="../../style.css">
|
||
|
|
<link rel='stylesheet' href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css" media="all">
|
||
|
|
<meta charset="utf-8"/>
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<body>
|
||
|
|
<a href="../../"><div style="text-align:center"><img src="../../images/sufyaan.webp"></div></a>
|
||
|
|
<hr/><p><a href="../../">sf.cu</a> > <a style="color:#bd93f9" href="../">Blog</a> > <a style="color:#bd93f9" href=".">KeePass + Syncthing</a></p>
|
||
|
|
<h1><i class="fa fa-key" aria-hidden="true"></i>KeePass + Syncthing</h1>
|
||
|
|
<p style="font-size:110%"><strong>Posted on 23 June 2023</strong></p><p><strong>Categories: </strong><a style="color:#ff79c6" href="../software/"><i class="fa fa-laptop" aria-hidden="true"></i>Software</a></p>
|
||
|
|
<p>I have decided to switch from a self-hosted Vaultwarden (Bitwarden) instance to using KeePass along with Syncthing to sync it to all my devices. There are numerous reasons why I decided to make this change.</p>
|
||
|
|
<h2><i class="fa fa-lock" aria-hidden="true"></i>Security</h2>
|
||
|
|
<p>The offline nature of KeePass makes it so that it is nearly impossible to crack. Connecting things to the internet makes it trivial for a script kiddie thousands of kilometers away from you to attempt to crack your passwords. A password manager is a place where all of your passwords are stored. Due to this very reason, I decided to upgrade my security by moving to a reputed piece of software.</p>
|
||
|
|
<p>It has a plethora of security features. Firstly, it has the ability to generate passwords of any length. It allows you to choose what characters are allowed. Its generation is so complex and liberating that even foreign characters like <code>Æ</code>, <code>É</code>, or even mathematics symbols and arbitrary symbols that no one would care about can be used. For example, the division sign (÷) or the copyright symbol (©) are included in password generation. Since most hackers try alphanumeric character cracking, KeePass password generation can make your passwords practically impossible to crack.</p>
|
||
|
|
<p>The encryption algorithm used for your password database is AES-256, commonly known as 256-bit encryption. It is a form of encryption that is so difficult to crack that the only way you can actually hope to obtain someone's password is by phishing them or using external methods. For more information, please <a href="https://yewtu.be/watch?v=S9JGmA5_unY">watch this video by 3Blue1Brown.</a> It is extremely interesting.</p>
|
||
|
|
<p>In fact, KeePass is so secure that even the passwords that are stored in your memory while you are viewing your database is encrypted. That way, even a <a href='../../definitions/management-engine' style='color:#50fa7b'>management engine</a> attack will not work. If you want to try viewing the cleared memory sectors to find remnants of your passwords, good luck. The passwords which are stored in your memory are first overwritten to the point of unrecoverability before being cleared.</p>
|
||
|
|
<p>You can even setup a keyfile (a file you need to use to login), a <a href='../../definitions/security-key/' style='color:#50fa7b'>security key</a>, or both.</p>
|
||
|
|
<h2><i class="fa fa-code" aria-hidden="true"></i>View. The. Code.</h2>
|
||
|
|
<p>KeePass is open-source under the GPLv2 license, which is the best open-source license for people's freedom. That makes it <a href='../../definitions/free-software/' style='color:#50fa7b'>free software</a>.</p>
|
||
|
|
<h2><i class="fa fa-user" aria-hidden="true"></i>The Encryption Never Stops</h2>
|
||
|
|
<p>Along with KeePass, I use Syncthing to sync my database. Syncthing also uses cryptographic encryption. This makes it so that anyone who wants to brute-force my database needs access to both my Syncthing password and my KeePass password.</p>
|
||
|
|
<h2><i class="fa fa-book" aria-hidden="true"></i>To Conclude...</h2>
|
||
|
|
<p>I use KeePass along with Syncthing for three reasons.</p>
|
||
|
|
<ol>
|
||
|
|
<li>KeePass is extremely secure. It has industry-standard protection methods and algorithms and its offline nature makes it practically uncrackable.</li>
|
||
|
|
<li>It is fully <a href='../../definitions/free-software/' style='color:#50fa7b'>free software</a> under the GPLv2 license</li>
|
||
|
|
<li>Syncthing is also encrypted, which means that an attacker who wants to attack me using the internet needs to crack both my Syncthing password and KeePass password which would take billions of years.</li>
|
||
|
|
</ol>
|
||
|
|
<p>I am probably never going to switch back because this system works extremely well. Syncthing is very fast at staying up-to-date.</p>
|
||
|
|
<p><a href="mailto:sufyaan@counterhawks.com?subject=Switching%20To%20FFmpeg">>>> Reply To Me</a></p>
|
||
|
|
<p style="text-align:center;"><a href="../keepass-syncthing/" style="color:#bd93f9"><i class="fa fa-angle-double-left" aria-hidden="true"></i>Previous Post</a></p>
|
||
|
|
<hr/>
|
||
|
|
<footer>
|
||
|
|
<p class="footer-text"><a style="color:#bd93f9" href="../../blog">blog</a> - <a style="color:#ffb86c" href="../../about">about</a> - <a style="color:#f1fa8c" href="../../portfolio">portfolio</a> - <a style="color:#ff5555" href="../../links">links</a></p>
|
||
|
|
<p class="footer-text" style="font-size:80%"><a href="../../">sufyaan.cyou</a></p><p class="footer-text" style="font-size:65%"><a style="color:#aaaaaa" href="../../sitemap">Site Map</a></p>
|
||
|
|
</footer>
|