this post was submitted on 27 Mar 2026
109 points (95.8% liked)

Technology

83098 readers
2746 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] shiftymccool@piefed.ca 18 points 8 hours ago (1 children)

Get yourself a mini pc or old laptop and control your own future: https://github.com/dani-garcia/vaultwarden

[–] guy@piefed.social 15 points 7 hours ago (4 children)

Would love to selfhost. However, I have no trust in my skills to secure my device in the same manner as a provider, and I do not wish my database to be compromised.

[–] XLE@piefed.social 1 points 1 hour ago

Would you be okay with synchronizing only when you're on your own Wi-Fi network? If that's the case, you don't have to try exposing anything to the Internet.

You can also purchase a server online to install it on, but you're going to get saddled with some kind of monthly fee there.

[–] communism@lemmy.ml 3 points 5 hours ago

I've had my VPS exposed to the internet for a while and never been pwned. No professional experience. Use SSH keys, not password authentication. Use FDE if physical access is in your threat model. Use a firewall to prevent connection on internal-only ports.

Vaultwarden will store your passwords encrypted (obviously) so even if your database does get stolen, the attacker shouldn't be able to read your passwords without your master password.

[–] grue@lemmy.world 6 points 7 hours ago (1 children)

Then use Keepass, which is literally just a local app.

[–] guy@piefed.social 6 points 5 hours ago (1 children)

I have used KeePass, but Bitwarden is far more convenient when you have different devices

[–] village604@adultswim.fan 4 points 3 hours ago

There's a plugin that lets you store your database file in the cloud to solve this. Although I only used it for work because I use ProtonPass.

[–] ComradeMiao@lemmy.world -5 points 7 hours ago (1 children)

I never get this excuse except for ignorance (not being mean to you)—you can export your entire db as a text file then encrypt it if you wanted. Also, if your server goes offline its offline first on all devices

[–] guy@piefed.social 9 points 7 hours ago (2 children)

I mean that I don't have the necessary knowledge to make sure no one can get into my network and server, and having my entire life thus possibly vulnerable is too risky. Heck, I can't even get Caddy to work properly.

Right there with you! Selfhosting Vaultwarden would be cool, but I barely know what I’m doing. I trust Bitwarden’s security knowledge and abilities way more than my own.

[–] AvocadoSandwich@eviltoast.org 5 points 7 hours ago (1 children)

My view on this is that I also do not trust a company to properly secure something so if it's going to be a hack job I might as well attempt it myself!

[–] guy@piefed.social 6 points 5 hours ago (1 children)

Understandable! However I'd rather have the provider tell me that they were hacked and my data compromised than me being hacked and never finding out because I have no clue to look 😆

[–] AbidanYre@lemmy.world 1 points 1 hour ago* (last edited 1 hour ago)

Unless you go out of your way to make it available to the internet, it will only be available on your local network, and you're a much smaller target than the cloud provider.