81–90 of 150 posts
Just use vaultwarden https://github.com/dani-garcia/vaultwarden
I've paid for Bitwarden for years, but I can come to no other conclusion from all this (CEO all about private equity, severe price hike, scrubbing of core values, hiding the free tier) that it will be sold soon. Time to jump ship!
Yup. But, where to?
Earlier quoted context omitted.
This feels like deja-vu with Lastpass. LogMeIn buys Lastpass, multiple massive breaches occur[, people move to Bitwarden].
Did Lastpass have a project like Vaultwarden behind it at the time? I'm hoping against hope that that will keep us with an open vault.
if bitwarden is acquired and the new owner decides an open source version of their product is not a business necessity, without someone actively supporting the salaries of engineers it’s unlikely to continue to be secure for much longer.
Earlier quoted context omitted.
You're right, though the friends and family that I would feel the need to recommend a password manager to aren't the type that would self-host their own servers.
So what would you recommend to your friends and family that need a password manager? Genuinely curious. I pay for a service for my family because I need reliable and easy for my wife and daughter to use it.
Unhackable. Yours forever.
Use words based passwords to make entry easier.
Suffers from physical presence security hacks. I argue those are far less frequent than online hacks.
Wouldn’t recommend for people who are comfortable with Password managers.
It is super easy to explain to people how to use it. And some security is better than none.
Earlier quoted context omitted.
Yup. But, where to?
I know it's not open-source, but I've been happy with Protonpass.
I'm already paying for the Protonmail suite so reading this was my cue to finally switch over to Proton Pass. Thanks for the heads up.
I wasn’t paying for the code tbh, I could always self-host (VaultWarden) at home behind Tailscale, it was all about the management, uptime, and most importantly, supporting a good software I used and loved for years.
Sad, really.
I’ll either move to self-hosting it at home behind TS, or going back to keepass tbh, anyway, I’m not staying on a sinking ship.
P.S: VaultWarden had a few bad CVEs this year (like an Auth Bypass), but when I looked deeper, it wouldn’t have much of a negative effect on me as a self-hosted home user that shares everything with family.
Just use vaultwarden https://github.com/dani-garcia/vaultwarden
Do you have to self host it? I'm moderately decent at self hosting. I'm fairly confident in my backups and security. But also, I am not a system backup nor security expert, and I don't want to become either. The one last thing that I really want to leave to the experts is my secrets management.
However, I'm extremely reluctant to give my password database hosting to ANYONE. I feel like this is something I need to "own" myself. Perhaps on Coolify, Dokploy, or on a Raspberry Pi with regular backups hosted at my home or office. This is extra work that I'm not eager to do; and frankly, it goes against my philosophy of outsourcing "commodity" work to which I'm ill-equipped to add substantial value.
On the other hand, password managers are the most sensitive software I can imagine.
Lastly, Sharing passwords with my wife, coworkers, etc is genuinely very valuable. Either of us can update, maintain etc our shared set of passwords. Last I looked, Keepass and its ilk cannot replace that functionality
Great heads up! I will work on self-hosting this month.
Separately, I don't know if there is a self-hostable password manager which allows easy family sharing. (KeepassXC won't work, I believe, because the whole vault is a single file.)