Live data from Hacker News

Show HN: Bramble – Local-first password manager

github.com

31–40 of 64 posts

Re: Show HN: Bramble – Local-first password manager

#32

What does this offer over other local-first password managers? For example, there are a fair few Android/iOS apps based on KeePass (I currently use https://www.keepassdx.com on my Android phone).

How this solves sync seems useful. If you use Google Drive and KeePass clients you will probably run into conflicts between keepass "safe save" and how google drive does file versioning, resulting in runaway duplication of your kdbx files. I started using Syncthing and KeePass. File version conflicts are rare but still happen. Including sync in the app seems like a good idea.

It would be good to see screenshots of Bramble. The "sprawl of plugins and forks" in KeePass is why I use it. Many of the KeePass clients have modern UI's. I'll think about switching to Bramble when the sprawl begins.

Re: Show HN: Bramble – Local-first password manager

#33
post #28

It’s nice to always have more options but I don’t want it to be local, I lose the centralized system and having multiple devices syncing the pass database, or a turned off device, or an attack/ransom that took all your files including your passowrds, or your lost your device while traveling.. It’s better to have them secured somewhere safe and only accessible remotely, and there are plenty of self hosting options out…

[dead]

Re: Show HN: Bramble – Local-first password manager

#34
post #23

Earlier quoted context omitted.

if you mean why I didn't choose a lib like automerge, yjs and instead handrolled it - that's because these libs are geared towards plaintext. Bramble's sync is built around its own encrypted vault instead. When two devices conflict it just compares timestamps on the encrypted entries and keeps the newer one as-is, without ever unwrapping your per-entry keys to merge. Nothing off the shelf did that against my vault fo…

This deserves a bit more explanation (sorry, on the phone, can't look at the code in the next couple of days). So, if I change the password and update it on the phone, then add a web site on the desktop, when they sync, the desktop entry will overwrite the new password? Hope it's not that simple.

[dead]

Re: Show HN: Bramble – Local-first password manager

#35

Earlier quoted context omitted.

if you mean why I didn't choose a lib like automerge, yjs and instead handrolled it - that's because these libs are geared towards plaintext. Bramble's sync is built around its own encrypted vault instead. When two devices conflict it just compares timestamps on the encrypted entries and keeps the newer one as-is, without ever unwrapping your per-entry keys to merge. Nothing off the shelf did that against my vault fo…

Last writer wins may be sufficient for some folks but for me, any potential data loss in an app like this is a deal breaker. I hope you'll consider some kind of merge conflict detection and surfacing that to the user. Even keeping a list of deleted items and showing that can be a good start.

[dead]

Re: Show HN: Bramble – Local-first password manager

#39
post #9

Congrats! How’s it compare vs self-hosted vaultwarden?

Thanks! Way less overhead than hosting your own vaultwarden instance, so way more user friendly with basically the same effect. The big difference is there's no server at all. With vaultwarden you're running a box that holds your whole vault and you have to keep it patched, backed up and secured (sysadmin skills basically). Bramble just syncs your devices directly so there's nothing to host or maintain = no single po…

What if I have multiple devices and some aren't currently online. Will they catch up when they do come back online?
Post reply on HN