Other softwareAI models and assistantsLibraries and frameworksOperating systems and desktopMedia and creativeAI coding toolsInfrastructure and DevOpsTerminal and shellBrowsers and extensionsEmail and chatSelf-hosted and home serverNetworking and VPNEditors and IDEsSecurity and passwordsProductivityDatabasesFiles, sync and backupGit and code hostingNotes and knowledgeMonitoring and analyticsSearchFinance
Security and passwords
What HN commenters recommend, ranked by distinct recommenders. Under each: what people praise most and the most common caveat, or the strongest quote where there is no summary yet.
- 1.Loved for Passkey support, Self-hosting · Caveat Price and ownership
- 2.Loved for Passkey support, Cross-platform sync · Caveat Subscription pricing
- 3.Loved for Sandboxing AI agents, Fine-grained isolation · Caveat Tedious setup
- 4.Loved for Local, user-owned data, Flexible file sync · Caveat DIY syncing
- 5.Loved for Bring-your-own sync, Just a file · Caveat DIY sync
- 6.Loved for Easy self-hosting, Bitwarden client compatibility · Caveat Self-hosting risk
- 7.Loved for Family sharing, Built-in simplicity · Caveat Feature gap
- 8.Loved for Automated renewal, DNS validation, wildcards · Caveat Single-provider reliance
- 9.Loved for Agent sandboxing, Kernel attack surface · Caveat Weaker than VMs
- 10.Loved for Open-source alternative, Feature breadth · Caveat Code quality
- 11.Loved for KeePassXC compatibility, Open source · Caveat No built-in sync
- 12.Loved for Simpler than GPG, Works with SOPS · Caveat No signing
- 13.Loved for Stops scrapers, Proof-of-work design · Caveat Requires JavaScript
- 14.Loved for Passkey support, Cross-device use · Caveat Passkey migration
- 15.Loved for Git-based sync, Hardware keys · Caveat GPG dependency
- 16.Loved for Works out of box, MicroVM isolation · Caveat Closed source
- 17.Loved for Web log banning, Layered defense · Caveat Tuning effort
- 18.Loved for Cross-platform, Authy/Aegis alternative · Caveat Confusing branding
- 19.Loved for Safe YOLO mode, Action blocking · Caveat Policy upkeep
- 20.Loved for Agent containment, OS-level enforcement · Caveat Blocks dev tooling
- 21.Loved for Long-term use, Key-use visibility · Caveat Native alternative
- 22.For the start menu I replace it with Open Shell, which seems to find apps much more reliably.
- 23.in less than a week it has now become essential to all of us. I was shocked how accurate it is
- 24.For boxes.dev we use E2B - they had everything we needed at the time.
- 25.I've been using jai [1] for sandboxing on linux (although I use opencode and local models and not claude code) and I'm pretty satisfied with it.
- 26.All of the following products and services are fantastic in 2026:
- 27.I switched to a product called StrongBox which is an Apple-specific app (iOS and Mac clients) that uses standard KeePass vaults.
- 28.Otherwise it was a great project to work with that has tons of knobs to customize.
- 29.It's evident that Mandatory Access Control has become, ahem, mandatory.
- 30.sshguard is exactly this - single C binary, no interpreter needed.
- 31.Selinux does the rest and we encourage devs to write policies for their applications.
- 32.this is the most up to date, consolidated utility to check for infection
- 33.
- 34.Free BSD Jails are great! I use them on https://www.nearlyfreespeech.net/ and they work well.
- 35.I love the idea of this tool and will for sure be using it
- 36.Or just stick with KeyCloak that offers a full self hosted product...
- 37.I never encountered any significant difficulties and could successfully exchange messages with my peers
- 38.when you are prompted to create a passphrase it will ask you to put it in your iCloud Keychain. Boom, now it is available across all of those
- 39.I use GnuPG daily and mandate that everyone in our organization do the same.