Pre-Deployment Diagnostic Memo: Password Vault Behavior Across Overlapping Detroits

Timestamp: 2025-09-07T06:14:11/-12:03:17
Coordinates: 42.3314°N, 83.0458°W ± 23 m; echoes from East Riverfront/Brush Park overlay
Electromagnetic readout: 13.56 MHz chatter from handheld authenticators; 2.4 GHz peaks during autofill capture; faint 32 kHz device-key heartbeat on cold boot
Dimensional calibration: first-boot keys ping 12:03:17 ahead of the wall clock; morning sync at Cass/Warren lands half a beat early

Lead detail, caught before sunrise

• Near the riverfront kiosks, the 13.56 MHz near-field readers wake before the prompt, like a door swinging open before the hand reaches the knob. The first boot after a full power cut hums a 32 kHz device-key pulse that insists midnight already happened. At the Detroit Public Library’s Tech Center, 2.4 GHz spikes sketch an autofill shape seconds before the login box appears. Systems behave as if they remember the routine a little too early.

Lead anomaly

• Street kiosks still accept “123456” and “password.” Field mics in open air hear two out of five attempts speak those strings before anything smarter is tried. The grid reacts, line noise settles when the tools in use show their steps, wait for a tap, and keep secret material on the device until it is actually needed.

Observed families and how they treat residents

• Bitwarden

Mood: transparent chassis; schematics on the table. Facts: Open code; independent reviews in 2023 and 2024 passed. Runs on common phones, computers, and browsers. Can be hosted on city servers. Works with Windows Hello and Touch ID. Handles passkeys end to end and can unlock its own vault with a passkey. Extras: Send for safe file/note handoff, built-in two-step code maker for paid users, form fill that waits for consent. Cost pulse: $10 per year adds 1 GB encrypted storage, hardware key support (YubiKey, FIDO U2F), and vault health checks. Human impact: Fewer clipboard jumps for permits or water bills. Lower help-desk load after phone loss; recovery is predictable.

• Proton Pass

Mood: free tier arrives stocked. Facts: No-cost plan includes unlimited logins, browser add-ons, mobile apps, passkeys, and device sync. Paid plan adds 10 GB encrypted storage via its drive, email aliases, and close links with sister tools. Keeps a two-week memory of created passwords if a clipboard clears early. Flags weak sign-ins and sites with unused two-step sign-in. Human impact: Residents can secure benefit portals without paying. Fewer re-enroll calls after resets.

• 1Password

Mood: double-locked. Facts: Uses a second secret tied to the account alongside the main phrase; without it, nothing opens. Travel Mode removes sensitive items before checkpoints and restores them later. Stores passkeys and creates one-time codes. Deep app links reduce copy-paste, especially on iPhones. Human impact: Safer movement for case workers crossing buildings and borders. Fewer credential re-issues after inspections.

• Dashlane

Mood: lives in the browser now. Facts: No desktop app. Strong encryption with decryption on the device. Watches breach news, scans public dumps for exposed emails, blocks look-alike sites. Bundled network tunnel offered, but earlier speed tests elsewhere were slow. Thirty-day trial. Human impact: Faster notice when a library card email shows up in a leak. Fewer fake-site lockouts during tax season.

• NordPass

Mood: favors a different cipher (XChaCha20). Facts: Encrypts locally. Offers emergency access for a named contact, strength checks, and breach alerts. Often paired with a network tunnel and storage. Free plan is one device only; paid plan leans annual. Human impact: Families can pass access during hospital stays. City staff can standardize on one paid tier for steadier budgeting.

Local custody options

• Enpass

Mood: you hold the keys; you pick the road. Facts: No central storage. Sync via Dropbox, Google Drive, OneDrive, iCloud, Box, Nextcloud, WebDAV, or local Wi-Fi. Has a generator, breach checks, biometrics, autofill, tags, and now passkeys. Desktop is free. Phones sync up to 25 items before payment. Human impact: Fits buildings with strict networks. Good for departments with their own storage rules.

• KeePassXC

Mood: a single file you carry. Facts: One vault file under user control; sync with any file service. Desktop apps for major systems; community apps cover phones. Unlock with a phrase, a key file, or both. Human impact: No subscription strain for seniors at rec centers. Steady access during outages when cloud links fail.

Passkeys: current layer alignment

• Devices create matched keys and unlock with face, finger, or PIN; the private half stays on the device. Bitwarden and 1Password can create, store, and sync these keys; Bitwarden can also unlock its own vault with one. On return visits, managers quietly present the right key. Human impact: Fewer resets at kiosks. Faster 311 follow-ups because sign-ins don’t stall.

Operational controls, tied to field observations

• Require a tap before filling. Justification: 2.4 GHz autofill spikes showed up before prompts; manual confirm stops fake pages from catching a fill.
• Block common passwords at the edge. Justification: Two out of five open-air attempts tried “123456” or “password”; kiosks should reject them outright.
• Prefer managers that support passkeys end to end. Justification: Early device-key pulses at 32 kHz align with smoother returns when keys live on devices.
• Keep vaults encrypted in the cloud, secrets local. Justification: When servers leak, scrambled data reads as noise; on-device unlock reduces damage.
• Use one long passphrase plus a hardware key for staff. Justification: Field readers (13.56 MHz) wake early; a physical key adds a check the overlay can’t guess.
• Turn off auto-submit citywide. Justification: Morning syncs stepping ahead showed premature actions; a required tap restores timing.

Deployment picks (clear lanes)

• Public kiosks and libraries: Bitwarden or Proton Pass. Reason: Low cost, passkey support, predictable recovery, and self-hosting option for Bitwarden.
• Mobile staff and inspectors: 1Password. Reason: Account-tied second secret and Travel Mode reduce exposure during building transfers.
• Strict-network departments: Enpass. Reason: No central server requirement; supports local sync rules.
• Offline fallback: KeePassXC. Reason: One file continues working during outages.
• Phishing-exposed services (tax season, permits): Dashlane or Proton Pass. Reason: Site impersonation blocks and breach alerts.

Closing signal

• When logins arrive long, unique, and freshly made, city circuits relax. Managers that wait for consent, show their workings, and hold private keys on-device draw a steadier pulse. Tonight the kiosks quit guessing and began listening; along Woodward, the lamps blinked once, like metal remembering to be careful.

Technical note for residents and staff

• Browser-built password tools are fine for single devices, but skip stronger checks and support; if a device is taken, those built-ins open more easily. A dedicated manager (Bitwarden, Proton Pass, 1Password, Dashlane, NordPass) encrypts before anything leaves the device, flags weak logins, and guides toward passkeys. One long passphrase plus a hardware key (for admins) and a tap-to-fill setting cut phishing and speed up service without adding friction.