Comment on Bitwarden 100% price increase

• Sunspear@piefed.social ⁨2⁩ ⁨weeks⁩ ago

  Thing is, a large percentage of internet-connected users might have two or more devices. The simplicity offered by a cloud (be it hosted or selfhosted) password manager is a huge benefit.

  And unless you’re already running a syncthing-like service for something else, setting it up just for a password manager when other services provide it out of the box, is not worth the hassle usually.

  source

  • unexposedhazard@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

    Everyone has some kind of cloud service tho no? The database is encrypted so you can even sync it over googles cloud if you dont have nextcloud or syncthing.

    source

    • Passerby6497@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Ok, so I just need to keep track of my encryption keys (or have a second complex and secure password to memorize), manually decrypt my vault to use it, re-encrypt it when I’m done, and ensure I have good backups?

      EZPZ /s

      source

      • unexposedhazard@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

        What? I think you dont know how this works. The database of a password manager is an encrypted file. When you open your password manager and type in the master password it opens that file and decrypts its contents for you and only saves it to memory. It doesnt actually decrypt the file on the drive. When you close the application it doesnt need to be encrypted again. This is exatly the same for all password managers, the only difference is that with web based ones the database sits on bitwardens server instead of on your harddrive.

        source
• BlackEco@lemmy.blackeco.com ⁨2⁩ ⁨weeks⁩ ago

  IMO Keepass and Bitwarden aren’t exactly the same, as the latter has cross-device sync built-in.

  source

  • lagoon8622@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

    I use one for work and the other for personal. They are both great, with slightly different convenience/security tradeoffs imo. Big fan of both, don’t know why it has to be one or the other for an OSS credentials manager

    source
• lastweakness@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  I can’t think of a reason to choose Keepass over Vaultwarden.

  source

  • pulsewidth@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    The person you’re replying to already gave you one: it’s free.

    Second: its not a prime target for attack like centralized, hosted webservices are. See: LastPass being cracked and people’s login data stolen… Twice.

    Yes, it is cryptographically superior to LastPass, and attempts to design around their flaws - but the threat still exists because its a very tasty target on the open internet for cybercrime.

    My little Keepass DB synched over personal VPN by Syncthing? Much harder to find a vector for attack. But it does require more moving parts and maintenance.

    Each have their pros and cons.

    source

    • chris@l.roofo.cc ⁨2⁩ ⁨weeks⁩ ago

      I think you misread. Lastweakness was talking about Vaultwarden which is a 100% FOSS reimplementation of bitwarden that you self host.

      source
    • callmemagnus@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Vaultwarden is open source: github.com/dani-garcia/vaultwarden

      source
    • lastweakness@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Every pro you listed is applicable to Vaultwarden as well. But I assume you misread it as Bitwarden.

      source
    • halcyoncmdr@piefed.social ⁨2⁩ ⁨weeks⁩ ago

      Vaultwarden, self-hosted is free as well. And since it’s not using the Bitwarden infrastructure, you’re only as exposed as your own network anyway.

      But you can still use all the standard Bitwarden apps and extensions on any device, you just need to point it at your server. Easy to set up for friends and family as well. No need to try and teach them about VPNs, setting up syncthing, etc.

      source
  • Mihies@programming.dev ⁨2⁩ ⁨weeks⁩ ago

    I can.

    source

    • lastweakness@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      I realise now that I can think of one too. Which is that you don’t need to host it anywhere if you use something like Syncthing.

      source

      • Mihies@programming.dev ⁨2⁩ ⁨weeks⁩ ago

        Also available offline, all the time in your hands.

        source

        • -> View More Comments
      • lyralycan@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

        I set up a simple sync service with FolderSync (similar to Syncthing) on Android for my family, that preserves their mobile files on a server hosted SMB share. You can’t underestimate a simple yet effective solution, sometimes so simple it flies under the radar.

        source
  • john_t@piefed.ee ⁨2⁩ ⁨weeks⁩ ago

    If you can’t selfhost, then you can have your keepass file in your personal cloud. Many basic cloud services are free and the password file itself is encrypted so the cloud provider can’t access your passwords.

    source
  • Telodzrum@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    I can’t think of a reason to choose Bit/Vaultwarden over Keepass.

    source
• terabyterex@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  so is bitwarden. i dont get your argument here. bitwarden does a lot more for free than keepass

  source