password manager

OpenBao is an open-source tool written in Go for managing, storing, and distributing sensitive data such as passwords and API secrets, encryption keys, and digital certificates. It emerged as a community-maintained alternative to HashiCorp Vault after licensing changes. On GitHub's trending list this week it has picked up new stars and attention, with developers discussing it as a free, open option for handling secrets securely in their infrastructure.

A German technology journalist describes moving all saved passwords to a new open source password manager. The article argues that cleaning up scattered, reused passwords can feel overwhelming, and that password managers bring order across operating systems, with the option of choosing an open source tool. The piece doubles as practical guidance for readers considering the same switch amid ongoing concern about password security.

The German technology magazine c't has published an article describing its move to a new open-source password manager. The piece walks through the migration and the reasoning behind choosing an open-source alternative. Readers are engaging heavily with the topic, reflecting ongoing interest in password security and self-hosted or open tools following repeated discussions about trust in proprietary password managers.

The German tech magazine c't is drawing attention to password chaos - the mess of forgotten, reused or outdated login credentials many people put off dealing with. The piece urges viewers to finally sort out their password management, a long-running topic in IT security as data leaks and weak or recycled passwords keep putting accounts at risk.

A guide is circulating explaining how iPhone and Android users can check whether their saved passwords have been compromised in data breaches. On iPhone, users can access password security recommendations in Settings, while Android offers a password checkup tool through Google settings or the Password Manager. The advice comes amid ongoing concern about account security and repeated large-scale data leaks.

Apple has released version 3.4.0 of its iCloud Passwords extension for Google Chrome, bringing improvements to the PIN entry and verification process used when autofilling saved passwords. The update was highlighted by German tech blog Caschys Blog, which covers Apple and software news. The extension lets Chrome users on Windows access passwords stored in their iCloud Keychain.

A security practitioner is asking the infosec community for an authoritative checklist covering every way an attacker can maintain access to a Google account after a phishing incident. The account owner fell for a Google phishing attack; passwords have been changed and moved to a non-Google password manager, and other access methods invalidated. The request highlights how many persistence routes, such as app passwords, sessions and recovery options, need checking after a compromise.

A high-severity vulnerability, EUVD-2026-76738, has been published for Malcolm, the open-source network traffic analysis toolkit distributed by CISA. The flaw, scored 9.2 out of 10 on the CVSS v3.1 scale, stems from an example environment-configuration file for a bundled inventory-management component that ships with a fixed, publicly known administrative password. The advisory was published on 11 September 2026 and updated on 2 October 2026.

Apple has released version 3.4.0 of its iCloud Passwords extension for Google Chrome, bringing improvements to PIN handling. The update refines how users verify their identity when accessing saved passwords from the browser, part of Apple's effort to make its password manager usable outside its own ecosystem. German tech readers are picking up the news from the report on the release.

A comparison of three major password managers argues that NordPass, Bitwarden and Proton Pass each reflect a different philosophy: commercial convenience, open-source transparency, and privacy-first design. The piece claims there is no universal best choice, only a clear winner depending on each user's needs, weighing security, pricing and trust in 2026.