Comment on Bitwarden Switches to Commercial License
grillme@lemmy.zip 7 hours ago
Does anyone have a handy guide to switching to selfhosted version? I was considering doing that but I let my plan renew out of laziness.
Zachariah@lemmy.world 7 hours ago Here it explains some self host options with links to “Get Started” for each:
bitwarden.com/help/self-host-bitwarden/
For example, here’s the link to “Linux standard deployment”
bitwarden.com/help/install-on-premise-linux/
You may also want to consider not making your server available to the open internet, and instead access it only on your LAN via VPN.
That or jump to Vaultwarden github.com/dani-garcia/vaultwarden
Is there another client we can use with vaultwarden though? (In the scenario wgere that gets locked down)
There is an iOS app for Vaultwarden. Under that name.
apps.apple.com/za/app/…/id6799711599
Don’t see one for Android. And for the rest I just online.
The web interface is hosted directly by your vaultwarden interface so it’s not lockdown-able. The only things that are would be the browser extension and phone apps. Both of which are formally unnecessary because you can always just use the web interface. I’m sure if they ever locked down there’d be community versions in no time as they’re basically just web wrappers anyway.
Can I simply migrate content from Bitwarden to Vaultwarden?
I couldn’t tell from looking at the faq or wiki.
awelo@tuiter.rocks 3 hours ago @grillme @TrippyHippyDan
I would say yes. I use vaultwarden with bitwarden clients, but I don't know for sure, the best way to know is try it.....xdddd
Vaultwarden still depends on upstream bitwarden
Zachariah@lemmy.world 6 hours ago great suggestion
unexposedhazard@discuss.tchncs.de 7 hours ago
Idk how it compares feature wise, but i have been running keepassxc/keepassdx combined with syncthing (or any file synchronization/cloud system) for many years without issues. The entire password manager database sits in one encrypted .kdbx file that you keep synced between your devices. Syncthing is nice because its p2p, so no self-/hosting required.
keepassxc.org github.com/keepassxreboot/keepassxc
f-droid.org/…/com.kunzisoft.keepass.libre/
syncthing.net github.com/syncthing/syncthing
4am@lemmy.zip 3 hours ago
Every single time Bitwarden is mentioned on the internet, someone comes in here and proudly recites the anthem “I have been using Keep ass with sink things”
It sucks compared to a dedicated extension.
No autofill No TOTP or 2FA support Doesn’t do passkeys Doesn’t have organizational sharing Doesn’t sync to mobile devices Doesn’t integrate with mobile browsers without trusting some compatible 3rd party app Requires selfhosting your passwords (don’t fuck it up!)
It’s actually pretty sad that the open source world doesn’t have a better solution for this. I mean I guess BitWarden was it but that’s been stolen by venture capital so
defaultusername@lemmy.dbzer0.com 2 hours ago
Both KeepassXC on desktop and KeepassDX on mobile support autofill, passkeys, and TOTP. Syncing to mobile devices is handled by Syncthing (I use BasicSync on Android) and is quite seamless after setup.
Integration with mobile browsers and other applications is handled by the OS-level autofill service (at least on Android). Trusting a third party app that is completely open source and has a ton of eyes on it? I don’t see a problem with that.
Selfhosting is literally the entire point, since who more can you trust with your most sensitive information than yourself? And even if you don’t trust yourself with being able to keep good backups and following the 3-2-1 rule, you’re more than welcome to sync with a third party cloud provider of your choosing since the password file is fully encrypted.
uzay@infosec.pub 2 hours ago
I had done that for a long time. It worked until it didn’t and I lost passwords. I tried again with keepass2android and it’s built-in sync. It again worked fine until at some point it wasn’t able to sync anymore for no discernible reason. I’d love for this to be a reliable setup, but it just isn’t in my experience, at least when there are 3+ devices involved with different clients and no proper awareness of the password manager and the sync sides of each other.
WuxinGoat@lemmy.ml 5 hours ago
I used keepass but switched to vaultwarden, i might consider switching back, but is there a good self hostable web front end for a keepass database? (I need to access it on my work laptop and can’t install stuff there)
unexposedhazard@discuss.tchncs.de 5 hours ago
I dont think there is. Keepass is trying to be as offline as possible. Just makes for a piece of software with much less attack surface.
e8d79@discuss.tchncs.de 5 hours ago
There is KeeWeb but I am not sure how well maintained it is. This issue is still open. It might be worth contacting your employers IT department instead. Asking for a well known password manager like KeePass shouldn’t raise any eyebrows.
lemmyvore@feddit.nl 5 hours ago
I just wish Syncthing didn’t have such a convoluted port usage, and also that its Android usage didn’t revolve around an unofficial app.
So I’ll stick to apps that do sync over SSH (using FolderSync atm).
hummingbird@lemmy.world 5 hours ago
Yup great combo. It baffles me why anyone one would favour to depend oneself on an online service instead
brave_lemmywinks@lemmy.world 5 hours ago
That’s my stack, except swap keepassdx for keepass2android, and add the Firefox plugin.
magnue@lemmy.world 5 hours ago
I’ve been using that for a while. I like the control I have in that I understand where everything is stored and encrypted. I miss the way that Google password manager had the autofill for seemingly every page nailed though.