Comment on Bitwarden 100% price increase

shiftymccool@piefed.ca ⁨17⁩ ⁨hours⁩ ago

• guy@piefed.social ⁨16⁩ ⁨hours⁩ ago

  Would love to selfhost. However, I have no trust in my skills to secure my device in the same manner as a provider, and I do not wish my database to be compromised.

  source

  • grue@lemmy.world ⁨16⁩ ⁨hours⁩ ago

    Then use Keepass, which is literally just a local app.

    source

    • guy@piefed.social ⁨14⁩ ⁨hours⁩ ago

      I have used KeePass, but Bitwarden is far more convenient when you have different devices

      source
  • ComradeMiao@lemmy.world ⁨16⁩ ⁨hours⁩ ago

    I never get this excuse except for ignorance (not being mean to you)—you can export your entire db as a text file then encrypt it if you wanted. Also, if your server goes offline its offline first on all devices

    source

    • guy@piefed.social ⁨16⁩ ⁨hours⁩ ago

      I mean that I don’t have the necessary knowledge to make sure no one can get into my network and server, and having my entire life thus possibly vulnerable is too risky. Heck, I can’t even get Caddy to work properly.

      source

      • AvocadoSandwich@eviltoast.org ⁨16⁩ ⁨hours⁩ ago

        My view on this is that I also do not trust a company to properly secure something so if it’s going to be a hack job I might as well attempt it myself!

        source

        • -> View More Comments
  • communism@lemmy.ml ⁨14⁩ ⁨hours⁩ ago

    I’ve had my VPS exposed to the internet for a while and never been pwned. No professional experience. Use SSH keys, not password authentication. Use FDE if physical access is in your threat model. Use a firewall to prevent connection on internal-only ports.

    Vaultwarden will store your passwords encrypted (obviously) so even if your database does get stolen, the attacker shouldn’t be able to read your passwords without your master password.

    source