Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passbolt: Self hostable, open source, password manager for teams

passbolt.com

Post reply on HN
Print view View original

21–30 of 101 posts

Re: Passbolt: Self hostable, open source, password manager for teams

#21

Post by thayne »

elric wrote: post #20
smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

More like "fauxpensource". All the useful features are part of the expensive looking Business plan. I don't mind people charging money for software, but I really wish they wouldn't pretend to be open source when they're not.

So many "open core" projects are really crippleware. The open core business model just makes too much of an incentive to make core functionality proprietary. I guess one nice thing is you could fork the open-source version and add the "business/enterprise" features to it yourself. I'm sure that would earn you the ire of the company that makes said software though. I'd love to see the pull request to add such features to the open source version. Would you get a response like "The PR looks great, but it doesn't align with our business model, so we'll have to reject it."?

Re: Passbolt: Self hostable, open source, password manager for teams

#23

Post by smartbit »

thayne wrote: post #21
elric wrote: post #20

Earlier quoted context omitted.

More like "fauxpensource". All the useful features are part of the expensive looking Business plan. I don't mind people charging money for software, but I really wish they wouldn't pretend to be open source when they're not.

So many "open core" projects are really crippleware. The open core business model just makes too much of an incentive to make core functionality proprietary. I guess one nice thing is you could fork the open-source version and add the "business/enterprise" features to it yourself. I'm sure that would earn you the ire of the company that makes said software though. I'd love to see the pull request to add such features…

Gitlab regularly considers moving features to Open Source version.

Re: Passbolt: Self hostable, open source, password manager for teams

#24

Post by chickahoona »

smartbit wrote: post #18

Pros - free open source - group management can be delegated - works fine with mac, linux & windows browsers - maintenance free self hosted on k8s for 2 years - lack of mobile apps has not been issue - UX is ok, no complaints - requires little end-user support Cons - only password field is encrypted - no warning that Notes are not encrypted - promises ‘Secure files & notes (Coming soon)’ for more than year - password…

If you want secure files and notes too then have you ever tried out Psono? The free version supports those and solves most of the Cons (e.g. Psono has no offical helm yet either). (Full disclosure, I am the main developer behind Psono)

Re: Passbolt: Self hostable, open source, password manager for teams

#25

Post by dmacedo »

verandaguy wrote: post #16

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition: - It's still OSS, so you can self-host, which is a big selling point for me - There's a managed/hosted option, which is a big selling point for probably most users - It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password…

Likewise, and I'm loving Bitwarden so far!

Although I'm using the dockerized rust API (1) for self-hosting it, and so far it's been working great for months! I am keeping a close eye on the container, and backing up the data hourly to ensure I don't need to worry about loosing anything.

(1): https://github.com/dani-garcia/bitwarden_rs

Re: Passbolt: Self hostable, open source, password manager for teams

#26

Post by mrmonkeyman »

smartbit wrote: post #23
thayne wrote: post #21

Earlier quoted context omitted.

So many "open core" projects are really crippleware. The open core business model just makes too much of an incentive to make core functionality proprietary. I guess one nice thing is you could fork the open-source version and add the "business/enterprise" features to it yourself. I'm sure that would earn you the ire of the company that makes said software though. I'd love to see the pull request to add such features…

Gitlab regularly considers moving features to Open Source version.

They "consider" it?

Re: Passbolt: Self hostable, open source, password manager for teams

#27

Post by senectus1 »

edoceo wrote: post #10
senectus1 wrote: post #7

heh, i know a guy that will be having rage-fits of the use of "on-Premise" on their web site... Premise: noun /ˈprɛmɪs/ LOGIC a previous statement or proposition from which another is inferred or follows as a conclusion. "if the premise is true, then the conclusion must be true" verb /prɪˈmʌɪz/ base an argument, theory, or undertaking on. "the reforms were premised on our findings" Premises: noun a house or building,…

Hope you let the site operator know, or filed a bug on their github

That's possibly the first time I've ever done a bug report :-P Lets see where it goes #358

Re: Passbolt: Self hostable, open source, password manager for teams

#28

Post by fraktl »

verandaguy wrote: post #16

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition: - It's still OSS, so you can self-host, which is a big selling point for me - There's a managed/hosted option, which is a big selling point for probably most users - It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password…

Another happy Bitwarden user here. I reviewed several different solutions for use within our company, and Bitwarden wins. We didn't go with Passbolt because its Chrome extension didn't work for us - there was no way to set the Passbolt URL so I never got the chance to check its autofill functionality. Bitwarden provides mobile apps, desktop apps for all operating systems and working browser extensions. Pricing is reasonable and not over the top and installation for self-hosted version is trivial. I'm glad competition exists, but they're falling short.

Re: Passbolt: Self hostable, open source, password manager for teams

#29

Post by politelemon »

thaumaturgy wrote: post #6
zelly wrote: post #5

Earlier quoted context omitted.

> As far as I know that same company still keeps their passwords in a spreadsheet. They've had several costly security incidents over the years. Because of the password spreadsheet?

Not directly, nah.

It wouldn't be directly but it wouldn't be surprising either - storing credentials in a spreadsheet can be indicative of the company's attitude towards security.

Re: Passbolt: Self hostable, open source, password manager for teams

#30

Post by chrismorgan »

dmacedo wrote: post #25
verandaguy wrote: post #16

I like this a lot. I've been a Bitwarden user for the past few months and I'm not looking back, but I'm so happy there's reasonable competition: - It's still OSS, so you can self-host, which is a big selling point for me - There's a managed/hosted option, which is a big selling point for probably most users - It's got a browser plugin à la BitWarden/1Password, which is a crucial feature for any well-polished password…

Likewise, and I'm loving Bitwarden so far! Although I'm using the dockerized rust API (1) for self-hosting it, and so far it's been working great for months! I am keeping a close eye on the container, and backing up the data hourly to ensure I don't need to worry about loosing anything. (1): https://github.com/dani-garcia/bitwarden_rs

bitwarden_rs is definitely the way to go. I’ve been hosting it for my own use only for a couple of years now; never had any problems, and it’s a negligible drain on resources. It uses less than 20MB of disk space (15MB of the package, 2.3MB of icon cache, 408KB of sqlite database), about 24MB of RAM (admittedly it used to be about 13MB, but it’s still insignificant drain) and has an average CPU usage of less than 0.002% over 54 days of uptime (1:22.55).

Meanwhile the standard Bitwarden backend needs SQL Server and demands to have 2GB of RAM. No idea how little you could actually get away with, but I’m confident won’t be 25MB.

Post reply on HN