Over the years, I’ve tested more password managers than I can remember. I’ve used far less, starting with text files, then web browsers and then LastPass. Today, I use KeeWeb, available here. KeeWeb can connect to a database on a local file system, Dropbox, Google Drive, One Drive or a WebDAV share.
Relying on a third-party service to manage passwords is a recipe for disaster. Just think of all the data breaches that have occurred over the last several years. If someone gets your master password, that someone gets all the passwords in your vault.
I want to keep my password database online, so I can use it with my Android phone as well as my laptop computer. I tested alternatives, including every KeePass variation. I settled on KeeWeb for various reasons but mainly because it easily connects to the database on my WebDAV share.
The web browser extension I’m using to go with it is ChromeKeePass, which works on every Chromium based web browser (I use the Brave web browser). The extension doesn’t connect directly to the WebDAV password database. It has to connect to the KeeWeb application while it’s up and running on my laptop computer. It’s only a minor drawback.
There is a version of KeeWeb for Windows, Mac and Linux (which is what I’m using). If I switch to another platform, I can use the correct version and connect to the WebDAV share once again. Using my database with Android is easy as well.
I examined a few apps before settling on Keepass2Android Password Safe. The matching keyboard makes it easy to fill in the blanks for the login forms. Unlike the web browser extension, I can add and edit entries with this app. The security settings are easier for me to understand than those that I was using with the LastPass app.
There are other Android apps that work with compatible databases, but I like this one the best.
There are plenty of security options to make it as secure as you need it to be. The Android app is the same way. The web browser extension is only as secure as the desktop application. Unlike LastPass (which has changed hands at least once), I feel pretty safe using KeeWeb.
What makes it more secure than a third-party password manager is the two access methods (and a third may show up later on) by one person only. First, the WebDAV share is password protected. Second, the database is encrypted with a master password. Finally, no one, other than me, knows where the database resides or what I named it.
I like the fact that the web browser extension lets me choose from multiple logins for each site. I can choose one of two Facebook accounts, for example, without using two web browser profiles. The Android app probably works the same way.