Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Vaultwarden: Unofficial Bitwarden compatible server written in Rust

github.com

Post reply on HN
Print view View original

11–20 of 124 posts

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#11

Post by cogman10 »

cloogshicer wrote: post #5

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

> Genuine question, in what scenario is the self hosting setup and maintenance worth it?

Personal use. Using this avoids the potential of a bitwarden hack (see: LastPass) leaking out all your passwords. You are much less likely a target than a central server like bitwarden.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#12

Post by tjoff »

cdman wrote: post #7
cloogshicer wrote: post #5

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

Another reason for NOT self hosting: I want the passwords for my family to be available in the event something happens to me. The probability of Bitwarden being more resilient (at least mid-term) is much higher than any self hosting solution I would come up with.

The passwords are still stored client side, they won't disappear.

Your family won't be able to add new passwords, but they can export them at their leisure.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#13

Post by andix »

tssge wrote: post #10
cloogshicer wrote: post #5

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

>Genuine question, in what scenario is the self hosting setup and maintenance worth it? Maybe if you're a huge org with a dedicated security team and so on, which could easily handle managing such service. I guess at a certain point it would bring cost savings at a scale in comparison to using Bitwarden, where it costs per team member or seat. Inhouse team has fixed costs in comparison. Of course for smaller orgs or…

The official Bitwarden server is also available for self hosting. For larger orgs this is probably the way to go instead of Vaultwarden.

The official server needs a lot of different services and resources, so it’s not suitable for smaller deployments.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#14

Post by csomar »

stavros wrote: post #3
tryfinally wrote: post #2

I've been self-hosting this for years now, works flawlessly.

Same, although in the end I figured I'll give BitWarden my money, as it's more than cheap enough.

I subscribed for two reasons: 1. To support their efforts and 2. They accept Bitcoin (and of course I paid with Bitcoin although the whole payment processing was garbage).

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#15

Post by worble »

cloogshicer wrote: post #5

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

>in what scenario is the self hosting setup and maintenance worth it?

For me more than anything else, it means that even if Bitwarden goes under then there always be a version I can run myself, at least until the situation becomes untenable and I find a new password manager.

A form of disaster mitigation, if you want to think of it that way.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#16

Post by ChocolateGod »

cloogshicer wrote: post #5

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

The container image is self-sufficient so you can deploy on a cloud container platform relatively easy.

I did this with Scaleway, took 2-3 minutes to setup.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#18

Post by lcof »

tryfinally wrote: post #2

I've been self-hosting this for years now, works flawlessly.

Same here too for personal/family vaults. Have been using the bitwarden cloud offering in professional context too.

vaultwarden, or bitwarden-rs as it used to be called, have been working flawlessly for years on my side, updates always work just as expected, and it supports a lot of organizational features too.

But I felt like it was better to trust bitwarden’s cloud for professional stuff, just for the reliability.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#19

Post by HeatrayEnjoyer »

csomar wrote: post #14
stavros wrote: post #3

Earlier quoted context omitted.

Same, although in the end I figured I'll give BitWarden my money, as it's more than cheap enough.

I subscribed for two reasons: 1. To support their efforts and 2. They accept Bitcoin (and of course I paid with Bitcoin although the whole payment processing was garbage).

Bitcoin really isn't that anonymous

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#20

Post by HeatrayEnjoyer »

tjoff wrote: post #12
cdman wrote: post #7

Earlier quoted context omitted.

Another reason for NOT self hosting: I want the passwords for my family to be available in the event something happens to me. The probability of Bitwarden being more resilient (at least mid-term) is much higher than any self hosting solution I would come up with.

The passwords are still stored client side, they won't disappear. Your family won't be able to add new passwords, but they can export them at their leisure.

It's often not possible to open a vault until internet access is restored
Post reply on HN