I use https://www.enpass.io/ (free version).
Not open source but very good and very convenient.
(I see they changed. There may not be a free version anymore, not sure)
Bitwarden: Free, open-source password manager
21–30 of 306 posts
Re: Bitwarden: Free, open-source password manager
#22I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.
The difference is that Bitwarden is webapp, thus serves you code in real time. The server could serve bad JavaScript to a particular user. You have to trust the server.
Also, there is a chance of data breach. The 2FA and hardware keys are bypassed in this case. It’s all your master password.
Re: Bitwarden: Free, open-source password manager
#23I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.
Bitwarden encrypts the data locally, so it's not readable on the server. Shouldn't be any less secure than syncing your KeePass DB to the cloud
Re: Bitwarden: Free, open-source password manager
#24I am a KeepassXC user, yet this sounds interesting. What does Bitwarden offer to make me want to switch?
Same boat. I'm also curious how does device sync happen with bitwarden - from a cursory glance it seems to rely on their cloud. Can you manually manage the database file, like with keepass?
You can use their cloud, but if you're technical you can also self-host a server instance. In that case, it's usually recommend to stay way from the complicated official implementation and instead pick vaultwarden, like another commenter said.
Re: Bitwarden: Free, open-source password manager
#25Earlier quoted context omitted.
Nothing. Adding 2FA codes to logins costs money, and self-hosting is deliberately difficult so you’ll be using the cloud. Also you can’t edit while offline.
Self hosting is incredibly easy with vaultwarden ( https://github.com/dani-garcia/vaultwarden )
That's a different implementation though
Re: Bitwarden: Free, open-source password manager
#26FYI - Bitwarden took $100M in VC money last year. At some point, the pressure to aggressively monetize will unfortunately happen. https://techcrunch.com/2022/09/06/open-source-password-manag...
My take in life: whenever VC or PE investors take over, start moving away from that product and pronto.
Re: Bitwarden: Free, open-source password manager
#27Open source and easy to use
https://www.passwordstore.org/
Re: Bitwarden: Free, open-source password manager
#28FYI - Bitwarden took $100M in VC money last year. At some point, the pressure to aggressively monetize will unfortunately happen. https://techcrunch.com/2022/09/06/open-source-password-manag...
Wow, thanks for the info. This is indeed quite a huge sum of money for such a cheap service from which you can easily migrate.
That’s a bit worrying.
Re: Bitwarden: Free, open-source password manager
#29I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.
If your data is valuable enough, or you personally have the skills for something better, then yes it’s not the greatest solution.
For the average user, it is infinitely better to use a password manager than to use hunter42 on all their accounts.