Comment on Bitwarden 100% price increase

• pulsewidth@lemmy.world ⁨1⁩ ⁨month⁩ ago

  The person you’re replying to already gave you one: it’s free.

  Second: its not a prime target for attack like centralized, hosted webservices are. See: LastPass being cracked and people’s login data stolen… Twice.

  Yes, it is cryptographically superior to LastPass, and attempts to design around their flaws - but the threat still exists because its a very tasty target on the open internet for cybercrime.

  My little Keepass DB synched over personal VPN by Syncthing? Much harder to find a vector for attack. But it does require more moving parts and maintenance.

  Each have their pros and cons.

  source

  • chris@l.roofo.cc ⁨1⁩ ⁨month⁩ ago

    I think you misread. Lastweakness was talking about Vaultwarden which is a 100% FOSS reimplementation of bitwarden that you self host.

    source
  • callmemagnus@lemmy.world ⁨1⁩ ⁨month⁩ ago

    Vaultwarden is open source: github.com/dani-garcia/vaultwarden

    source
  • lastweakness@lemmy.world ⁨1⁩ ⁨month⁩ ago

    Every pro you listed is applicable to Vaultwarden as well. But I assume you misread it as Bitwarden.

    source
  • halcyoncmdr@piefed.social ⁨1⁩ ⁨month⁩ ago

    Vaultwarden, self-hosted is free as well. And since it’s not using the Bitwarden infrastructure, you’re only as exposed as your own network anyway.

    But you can still use all the standard Bitwarden apps and extensions on any device, you just need to point it at your server. Easy to set up for friends and family as well. No need to try and teach them about VPNs, setting up syncthing, etc.

    source
• Mihies@programming.dev ⁨1⁩ ⁨month⁩ ago

  I can.

  source

  • lastweakness@lemmy.world ⁨1⁩ ⁨month⁩ ago

    I realise now that I can think of one too. Which is that you don’t need to host it anywhere if you use something like Syncthing.

    source

    • Mihies@programming.dev ⁨1⁩ ⁨month⁩ ago

      Also available offline, all the time in your hands.

      source

      • besmtt@lemmy.world ⁨1⁩ ⁨month⁩ ago

        Bitwarden works offline. Obviously can’t save to the server, but reading from what’s already on your local machine works just fine.

        source

        • -> View More Comments
    • lyralycan@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

      I set up a simple sync service with FolderSync (similar to Syncthing) on Android for my family, that preserves their mobile files on a server hosted SMB share. You can’t underestimate a simple yet effective solution, sometimes so simple it flies under the radar.

      source
• john_t@piefed.ee ⁨1⁩ ⁨month⁩ ago

  If you can’t selfhost, then you can have your keepass file in your personal cloud. Many basic cloud services are free and the password file itself is encrypted so the cloud provider can’t access your passwords.

  source
• Telodzrum@lemmy.world ⁨1⁩ ⁨month⁩ ago

  I can’t think of a reason to choose Bit/Vaultwarden over Keepass.

  source