Get yourself a mini pc or old laptop and control your own future: https://github.com/dani-garcia/vaultwarden
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
Would love to selfhost. However, I have no trust in my skills to secure my device in the same manner as a provider, and I do not wish my database to be compromised.
I never get this excuse except for ignorance (not being mean to you)—you can export your entire db as a text file then encrypt it if you wanted. Also, if your server goes offline its offline first on all devices
Yeah...they've been making a lot of changes to the client, too. I'm not sure what form it will take yet, because idk enough about bitwarden as a company, but get ready for enshittification and forks.
The link is from February 1st, about a blog post in January. I clicked here thinking Bitwarden just raised their subscription price again haha.
Sorry!
TIL theres a paid version of Bitwarden.
While the increase is not a huge deal because the total is still cheaper than alternatives, the thing that irks me is how they did indeed just announced it via a blog post titled "Bitwarden launches enhanced premium plan: Complete online security for everyone". This reads like there's going to be free, premium and premium+ at best, and "we are just adding more stuff to the premium" at worst, not implying a price bump, at least to me. I did not get my renewal email yet, so can't confirm whether or not they don't even mention the annual price, but rather just the monthly one. Another thing that kind of bothers me is that they list "Vault health alerts" as a new thing, while it's always been there. While "Phishing blocker" just seems like a feature outside of the scope of a password manager.
All in all, double the price in exchange for x5 more storage and x2 more hardware keys is fine to me, but I hope they improve their communication and actually properly inform users of upcoming pricing changes.
I had my renewal email come through today. Here is what is says: Your Bitwarden Premium subscription renews in 15 days. The price is updating to $1.65/month, billed annually. As an existing Bitwarden customer, you will receive a one-time 25% loyalty discount for this year's renewal. This renewal will now be billed annually at $14.85 + tax.
20$/year is still cheap compared to other password managers, but yeah, the lack of transparency is worrying.
Keepass is free?
so is bitwarden. i dont get your argument here. bitwarden does a lot more for free than keepass
Thing is, a large percentage of internet-connected users might have two or more devices. The simplicity offered by a cloud (be it hosted or selfhosted) password manager is a huge benefit.
And unless you're already running a syncthing-like service for something else, setting it up just for a password manager when other services provide it out of the box, is not worth the hassle usually.
Everyone has some kind of cloud service tho no? The database is encrypted so you can even sync it over googles cloud storage if you dont have nextcloud or syncthing.
IMO Keepass and Bitwarden aren't exactly the same, as the latter has cross-device sync built-in.
I can't think of a reason to choose Keepass over Vaultwarden.
I can.
I realise now that I can think of one too. Which is that you don't need to host it anywhere if you use something like Syncthing.
I set up a simple sync service with FolderSync (similar to Syncthing) on Android for my family, that preserves their mobile files on a server hosted SMB share. You can't underestimate a simple yet effective solution, sometimes so simple it flies under the radar.
Also available offline, all the time in your hands.
Bitwarden works offline. Obviously can't save to the server, but reading from what's already on your local machine works just fine.
Isn't it easier then just to use a (keepass) file? Also we carry phones around where we need secrets, too etc.
The person you're replying to already gave you one: it's free.
Second: its not a prime target for attack like centralized, hosted webservices are. See: LastPass being cracked and people's login data stolen.. Twice.
Yes, it is cryptographically superior to LastPass, and attempts to design around their flaws - but the threat still exists because its a very tasty target on the open internet for cybercrime.
My little Keepass DB synched over personal VPN by Syncthing? Much harder to find a vector for attack. But it does require more moving parts and maintenance.
Each have their pros and cons.
Every pro you listed is applicable to Vaultwarden as well. But I assume you misread it as Bitwarden.
I think you misread. Lastweakness was talking about Vaultwarden which is a 100% FOSS reimplementation of bitwarden that you self host.
Vaultwarden, self-hosted is free as well. And since it's not using the Bitwarden infrastructure, you're only as exposed as your own network anyway.
But you can still use all the standard Bitwarden apps and extensions on any device, you just need to point it at your server. Easy to set up for friends and family as well. No need to try and teach them about VPNs, setting up syncthing, etc.
Cant see any changes on the business plans? Anyone see anything on that?
TBH, $10/year is a small price not to have to get my wife to change again after lastpass. She is not equipped to deal with enshittification.
If you do any sort of self-hosting, take a look at Vaultwarden. All the premium functions for free.
Before my entire network setup changed recently for unrelated reasons... I had Vaultwarden running on my home server (TrueNAS) and a free Cloudflare account with a tunnel to my home server and a $5/year domain. Worked for my parents easily and no longer had to worry about the big infrastructure being targeted.
Possibly but the main thing we find useful is the OTP generation. This means we can both use shared accounts without having to ask the other for a code. That's probably an edge case, and not enough sites support it, but it's really nice for the ones that do.
I doubt that is available in self-hosting but I'd be happy to be wrong about that. I have a raspberry pi serving up a couple of local things and I could register a domain if I had a use case for connectivity outside the house.
That is totally available self hosted. Nothing is blocked. In fact that's why I originally switched, reducing unnecessary monthly costs.
OTP codes for websites as well as all the MFA options for Vaultwarden itself. It also supports organizations, so you can share info between multiple accounts on your server. Emergency access, and even a web vault client.
Everything the paid Bitwarden does as far as I'm aware.
That's pretty freaking awesome, mate. Thank you!
~~You know why Git was written in the first place, right? Some people think ahead.~~ Doh! I was thinking of BitKeeper.