Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Avoid at all costs (outage issue)

news.ycombinator.com

Post reply on HN
Print view View original

111–120 of 137 posts

Re: Bitwarden: Avoid at all costs (outage issue)

#111

Post by mkishi »

torstenvl wrote: post #5

Enpass - Local-first so you own your data - Open about technical documentation and assisted in providing encryption scheme info to an open-source vault reader (so you own your data...) https://github.com/hazcod/enpass-cli - Works with lots of cloud/sync providers - Cross-platform (Windows, macOS, Linux, iOS, Android) - Browser integration (Safari, Firefox, Chrome, Edge, Opera, Vivaldi) - Lifetime license for $79.99

A feature that deserves its own bullet imo: Wifi sync. I suppose it's akin to Keepass+Syncthing but integrated into all clients.

I used Google Drive/OneDrive in the past but a few times vaults would get into a broken state where they couldn't connect to the provider anymore and I had to manually re-connect. It was always able to smoothly recover and sync, but I had no confidence I was synced at any given moment.

I jumped on Wifi Sync as soon as they launched it and haven't looked back—as long as I'm on the same network once in a while, everything is in sync.

Sometimes I get an itch to try the open-source/Keepass route again, especially since it seems to be much improved, but Enpass is convenient for now.

Re: Bitwarden: Avoid at all costs (outage issue)

#114

Post by Macha »

lake_vincent wrote: post #76
CameronNemo wrote: post #67

Earlier quoted context omitted.

I mean sure... But why go out of my way to use closed source software when the open source options are right there?

For me it's the features I mentioned above - having a CLI on desktop, and both ios and android apps is so huge because I have devices in all three ecosystems! One password manager that works seamlessly across devices is very appealing to me. The Bitwarden mobile experience needs a lot of polish, if Enpass is better I would switch.

Bitwarden has a CLI also, both the official bw-cli and the nicer rbw. Can't speak for iOS but on Android bitwarden plugs into the OS password manager autofill API, same as everyone else, don't see why enpass would have a different experience.

Re: Bitwarden: Avoid at all costs (outage issue)

#115

Post by Schroedingersat »

OJFord wrote: post #109
throw149102 wrote: post #37

Earlier quoted context omitted.

Also re: the comparisons to AWS or Google Cloud - it's still totally different. This is more like your car being unable to start because it can't connect to the cloud. I don't expect that driving my car needs internet access, and I wouldn't expect Bitwarden needs internet access to serve me my passwords that have already been synced.

You have to log in to the extension to unlock passwords every so often though right, more than once per browser session? Presumably that's server-authenticated, and what broke here.

There's no reason for that to involve a remote server.

You have the local encrypted database.

You have the key.

Opening your front door doesn't require a trip down to the hardware store whe$e you brought it.

Re: Bitwarden: Avoid at all costs (outage issue)

#117

Post by dugmartin »

yogenpro wrote: post #13

I've been using Bitwarden's clients (browser extension, mobile apps, desktop apps) with a self-hosted vaultwarden [1] server. It's marginally free if you are already self-hosting other stuff. I'm hosting it on a raspberry pi 4b at home and exposing it to public Internet through Cloudflare zero trust (also free). Had no problems so far. [1] https://github.com/dani-garcia/vaultwarden , note that it's different from Bit…

I have a similar setup but using a $5/month VPS that I also host a few other personal/family apps on. It works really well but I’m wondering how long the api will stay open and accessible given their recent huge VC investment.

Re: Bitwarden: Avoid at all costs (outage issue)

#118

Post by aaasss333 »

doodlesdev wrote: post #30
gremlinsinc wrote: post #16

I think maybe a good alternative type solution would be instead of a 'hosted' thing, I'd just like something like Bitwarden but your data gets pushed to devices it needs to be on, so it's always in a local database, and maybe you back it up to drive/dropbox easily, but the server just tracks when something changes/needs pushed and basically handles syncing stuff, other than that it doesn't keep any password data encr…

That's possible with KeePassXC (desktop) [0], KeePassDX (mobile) [1] and Syncthing [2]. Best thing about it is that the bridge between devices is also end-to-end encrypted, which is a nice bonus if you want to sync something else. I wish there was an easier all-in-one application for this kind of stuff though, would be much easier to maintain and setup for family/friends. [0]: https://keepassxc.org/ [1]: https://www.…

No post body was provided.

Re: Bitwarden: Avoid at all costs (outage issue)

#120

Post by edelhans »

mort96 wrote: post #104
Georgelemental wrote: post #9

KeePassXC ( https://keepassxc.org/ ) - open source, full featured, standard file format, bring your own cloud storage

How do people use KeePassXC? Do people not need access to their passwords when they're on their phones? And how do people choose between all the KeePass derivatives?

I have my password file on google drive. Works seamless between all my devices
Post reply on HN