Strongbox Blog

I followed a similar path as you did about a year ago. Having tried a bunch of options, I can recommend strongly Strongbox - fantastic native apps for iOS and macOS, with your choice of sync mechanism (local-only is also a first class citizen), and it uses the KeePass file format so you can use your client of choice on other operating systems/no worries about lock-in. Good system integration and autofill extensions. I also appreciated that there was an option for a one-time purchase. https://strongboxsafe.com

Strongbox is a fantastic KeePass client on iOS and macOS. - fully native apps - open source - fully offline option (Strongbox Zero) - one time purchase - solid browser extensions for Chrome and Firefox - native keychain autofill for Safari and Orion - compatible with other KeePass apps on other platforms - multiple sync options iCloud, G Drive, Dropbox, OneDrive, SFTP, WebDav, Syncthing - support for offline vaults - biometrics, Apple Watch unlock, and Yubikey support - TOTP codes, attachments, and markdown notes can be stored - supports password auditing with Have I Been Pwned - supports importing 1PW vaults Most importantly, Strongbox is made by a small and transparent company. Unlike Bitwarden or 1Password, they are solely focused on making high quality macOS and iOS apps. https://strongboxsafe.com

I recommend https://strongboxsafe.com/ as a better open source alternative Works with touchID on my MacBook, uses KeePass so it's easy to migrate if needed, and the killer feature for me was being able to sync it to iCloud so you can use it across devices. Even better if you enable E2E encryption on your iCloud https://support.apple.com/en-au/HT212520

> on their phones? Strongbox for iPhone/iPad: https://strongboxsafe.com/ There are plenty Android Keepass apps too, i don't have any experience with these though. >And how do people choose FWIW, KeePassXC is the best (most widely adopted) one for Desktop.

+1 for KeypassXC. For those looking for an iOS app, I recommend Strongbox[1]. It’s open-source and it’s the most feature complete solution I’ve found. (Not affiliated, just a happy user) https://strongboxsafe.com/

There are a few keepass clients for iOS, but most of them are pretty serious abandonware and don’t support newer features like autofill integration. https://keepassium.com/ is supposed to come out soonish, and will probably take the crown when it does. For now, your best option is probably https://strongboxsafe.com/. No affiliation or experience with either, but strongbox seems to be the favorite for now and keepassium looks like it’ll be better when it’s out.

Unfortunately KeyPass is pretty fragmented on mobile devices, but there is https://strongboxsafe.com and https://keepassium.com for IOS with passkey support, but I don't know what options there are for Android, but I suspect there are somewhere.

The same company Applause recently bought out Strongbox [0], which has been discussed a few times on HN a few times[1]. They have a pretty reliable history of destroy applications / extracting maximum value. [0] https://strongboxsafe.com [1] https://kagi.com/search?q=strongbox+site%3Anews.ycombinator.com&r=…

For macOS/iOS, you could give Strongbox a try: https://strongboxsafe.com/ I haven't really looked into it myself, but it seems to be using the same database format as KeePass, and it hooks into macOS's "FIDO provider" API, which makes it accessible to not only Safari but all browsers that use it (which includes Firefox and Chrome on macOS, and probably everything on iOS), without requiring any browser-side extension.

I've been wanting to spend more time trying out Strongbox[1], personally. It's only available for Apple (macOS, iOS, and iPadOS) devices, which rules out the 1% of the time I use an oddball Linux or Windows desktop, but it's a bit more reminiscent of old 1Password UIs with less of the dismissive attitude that I've gotten from 1Password's support team over the last couple years. [1] https://strongboxsafe.com/

I'm a very happy user of strongbox: https://strongboxsafe.com/ I currently sync my vault via WebDAV and they even support storing the local keyfile.

There are two: Strongbox[1] and KeePassium[2]. [1]: https://strongboxsafe.com/ [2]: https://keepassium.com/

If you’re on an Apple product, Strongbox might fit your requirements. https://strongboxsafe.com/

I'm evaluating StrongBox right now. https://strongboxsafe.com/ Features for MacOS are being actively developed to bring it up to parity with the iOS apps.

I've had a very good experience with Strongbox. I personally haven't used the Nextcloud integration yet so I can't vouch for that specifically, but I've used it with multiple cloud services and it's been seamless every time. It also caches your database locally, which should solve the problems you were having with BoxCryptor. It is freemium, and the really useful features will cost $1 per month, but there is also an option to purchase a perpetual license. Quality indie apps are hard to come by iOS these days, and I'm glad to pay for a service that's so integral to my daily life. https://strongboxsafe.com/

Strongbox https://strongboxsafe.com/

They address that here: https://strongboxsafe.com/support/#reamaze#0#/kb/security-and-privacy/… Is Keepassium audited?

macOS has native password autofill which opens the Keychain experience to 3rd party password managers. Unfortunately browser support is limited to Safari (even though the API itself is open), while Strongbox [1] seems to be the only option on password manager side. Maybe this will improve with the adoption of passkeys, where browsers are actually trying to integrate with the system passkeys API (a neighbor to autofill). [1]: https://strongboxsafe.com/updates/macos-big-sur-autofill/

HashiCorp Vault - is big in Secrets management but its not the Terraform of Secrets management it's just too easy to make another product. AWS Secrets Manager AWS Systems Manager Parameter Store AWS KMS Google Cloud KMS - Cloud Key Management System Azure Key Vault confidant - https://lyft.github.io/confidant keywhiz - https://github.com/square/keywhiz knox - https://github.com/pinterest/knox strongboxsafe - https://strongboxsafe.com conjur - https://www.conjur.org + many more Ansible Vault - probably not competing directly I am pretty sure companies like netflix, facebook, uber, tesla and others are probably using their own in house creations.

If you're looking for something that's offline first go for pass [0], gopass [1], or any keepass-compatible [2][3][4] password manager and sync the database yourself. [0]: https://www.passwordstore.org/ [1]: https://www.gopass.pw/ [2]: https://keepassxc.org/ [3]: https://www.keepassdx.com/ [4]: https://strongboxsafe.com/