KeePassium (iOS Password Manager)

[jonah (Jonah Aragon)]

Continuing the discussion from Keepassium used to be listed (I think), should I now prefer alternatives?:

Website

KeePassium - KeePass app for iOS

Short description

KeePassium is a password manager for iOS compatible with KeePass vaults. They also have a macOS client, which I am unsure about the current status of.

Why I think this tool should be added

They adhere to open-source principles (see Remove Strongbox - #14 by anonymous208) and follow iOS design standards.

Section on Privacy Guides

Password Managers

[MMA-block]

Greetings.
I’m pleased to engage in dialogue with the developers of this important product.

@fria

Constructive criticism is welcome for sure. Otherwise how would anyone improve.

I would like to take this opportunity to share my thoughts as a user.

Following your recent audit, which I would like to congratulate you on, one of the main factors that prevents me from trusting your software on my PC is the lack of a macOS version in the App Store.

Consequently, there is a lack of sandboxing and nativeness for my PC on Apple Silicon.

[clockwork]

The version from the app store is sandboxed mostly, except for the “Open and Save Panel Service”. I’ve been using the iOS version on my mac for a while and it’s fine except there are no keybindings for copying usernames or passwords.

[jonah (Jonah Aragon)]

Some other user feedback from prior discussions and internet discussions which I will compile here for consideration:

@retouch

Following the earlier conversation on this thread, I chose Strongbox. Though, I continued collecting data on KeePassium. I found more ongoing positive signals from the KeePassium developer, and eventually swapped out Strongbox for KeePassium.

Hooray for portability, folks.

[Reddit comment:]
I wouldn’t even say Strongbox has “the edge” on functionality right now. I’d say Keepassium’s development has basically stopped. They are adding silly, nonstandard features that I seriously doubt anyone asked for (like “smart groups” which are just saved searches—why would I want to modify my database just to save a search?) while totally ignoring critical and standard KeePass database functionality (like record/differential sync) for years and years.

I trust an app/company that is productively focussing on being the best they can be and selling me updates to a password manager. I don’t know if I trust a dev that sits around badmouthing Strongbox all day long, across multiple threads and forums, while accomplishing little that’s productive on their own app. like this is supposed to impress us how?

@mentalfoss

The only reason [Strongbox is listed] is because of the iOS + macOS support, compared to the real open source iOS password manager KeePassium which is also lately got audited by Cure53 that doesn’t have macOS support.
Though, they both are using the KeePass protocol that it is cross-platform so it makes no sense to list an inferior password manager. (KeePassium with KeePassXC for iOS-macOS combo is more than enough for example)

[GitHub Discussion:]
Strongbox’s pricing is quite disingenuous and shouldn’t really be recommended in my opinion. This is evident in their pricing history and can be viewed at appsliced. Strongbox pricing and Keepassium pricing.

Strongbox imo prioritizes maximizing profits compared to Keepassium’s more transparent pricing. Strongbox initially locked Biometric protection behind their paywall, whereas Keepassium has always provided this. Strongbox Zero is another example of this where they created a completely new app to sell with a focus on removing network connections. Keepassium on the other hand provides an in app option to toggle network connections.

Keepassium also has a rent-to-own model ($14.99/year) with their subscription on top of their lifetime license ($49.99).

Overall, I find Keepassium to be a much better option given their transparent pricing model along with a fully usable complete app for free users.

[Reddit comment:]
Hey, KeePassium user here… It’s one of the best piece of softwares I’ve ever used. It’s polished, it’s modern and it just works.

TBH, I never felt a need of choosing any other client for keepass.

What I would love is a one time payment for the app and get all the features forever.

To the question, yes it matters! We as a community like open sourced and independently audited softwares!

[Reddit comment:]
Of course [being open-source] matters. That’s why I choose Keepass and KeePassium to manage my credentials. Thanks for the contribution to the community.

As a general aside, I think it is unfortunate that many open-source communities see bashing alternative projects as the best way to promote their own work, and I would prefer a discussion solely about the merits and shortcomings of KeePassium instead of the drawbacks of alternatives

[clockwork]

The creation of software is justified by its potential usefulness and the lack of an effective alternative. If an effective alternative exists that achieves the developer’s end goal, it would be redundant to create or maintain a new project. More generally, a product needs to stand out from its competitors to win customers. It can be helpful to criticize competitors in a free market and should not be discouraged unless it’s FUD.