I keep seeing people highly recommend them, but I’ve always thought it wasn’t very secure.
Bitwarden and keepass are. Don’t use lastpass or the other bullshit youtube sponsors.
Yupp, just away from Lastpass. 🤮
I like to keep all my eggs in one basket, that way you can really keep an eye on them.
Remember to think about your backup strategy if you use locally managed password software. I’ve helped (and been unable to help) some non-technical folks who relied on popular magazine/new site articles for software selection without good knowledge of how to properly backup their data.
What makes you think they aren’t secure?
Most will tell you how the password is stored and assuming they implemented the encryption algorithm correctly it should be rather difficult to break the vault open.
I won’t say which manager I use, but I used a ‘tool’ on it which cracked my access password in very little time revealing all my passwords. - a bit worrying.
Do I still use that manager? Yes, it’s convenient and fits my risk profile.
Have I upgraded my master password? Yes. Less convenient, but is all a trade off.
If I was a higher profile target, my assessment may be different.
I don’t trust the online one, I only use https://pwsafe.org/
Keepass is as secure as you make it to be, you can use derivatives like keepassXC but some have had insecure bugs (they still need access to your password db file)