Comment on Bitwarden Switches to Commercial License

• uzay@infosec.pub ⁨4⁩ ⁨hours⁩ ago

  I had done that for a long time. It worked until it didn’t and I lost passwords. I tried again with keepass2android and it’s built-in sync. It again worked fine until at some point it wasn’t able to sync anymore for no discernible reason. I’d love for this to be a reliable setup, but it just isn’t in my experience, at least when there are 3+ devices involved with different clients and no proper awareness of the password manager and the sync sides of each other.

  source
• 4am@lemmy.zip ⁨6⁩ ⁨hours⁩ ago

  Every single time Bitwarden is mentioned on the internet, someone comes in here and proudly recites the anthem “I have been using Keep ass with sink things”

  It sucks compared to a dedicated extension.

  No autofill No TOTP or 2FA support Doesn’t do passkeys Doesn’t have organizational sharing Doesn’t sync to mobile devices Doesn’t integrate with mobile browsers without trusting some compatible 3rd party app Requires selfhosting your passwords (don’t fuck it up!)

  It’s actually pretty sad that the open source world doesn’t have a better solution for this. I mean I guess BitWarden was it but that’s been stolen by venture capital so

  source

  • unexposedhazard@discuss.tchncs.de ⁨1⁩ ⁨hour⁩ ago

    Why is it that every time i comment about keepass, its because some web based password manager once again broke, got hacked, or stopped development. Keepass users just stay winning :)

    source
  • defaultusername@lemmy.dbzer0.com ⁨5⁩ ⁨hours⁩ ago

    Both KeepassXC on desktop and KeepassDX on mobile support autofill, passkeys, and TOTP. Syncing to mobile devices is handled by Syncthing (I use BasicSync on Android) and is quite seamless after setup.

    Integration with mobile browsers and other applications is handled by the OS-level autofill service (at least on Android). Trusting a third party app that is completely open source and has a ton of eyes on it? I don’t see a problem with that.

    Selfhosting is literally the entire point, since who more can you trust with your most sensitive information than yourself? And even if you don’t trust yourself with being able to keep good backups and following the 3-2-1 rule, you’re more than welcome to sync with a third party cloud provider of your choosing since the password file is fully encrypted.

    source
• lemmyvore@feddit.nl ⁨7⁩ ⁨hours⁩ ago

  I just wish Syncthing didn’t have such a convoluted port usage, and also that its Android usage didn’t revolve around an unofficial app.

  So I’ll stick to apps that do sync over SSH (using FolderSync atm).

  source
• hummingbird@lemmy.world ⁨8⁩ ⁨hours⁩ ago

  Yup great combo. It baffles me why anyone one would favour to depend oneself on an online service instead

  source
• WuxinGoat@lemmy.ml ⁨8⁩ ⁨hours⁩ ago

  I used keepass but switched to vaultwarden, i might consider switching back, but is there a good self hostable web front end for a keepass database? (I need to access it on my work laptop and can’t install stuff there)

  source

  • e8d79@discuss.tchncs.de ⁨8⁩ ⁨hours⁩ ago

    There is KeeWeb but I am not sure how well maintained it is. This issue is still open. It might be worth contacting your employers IT department instead. Asking for a well known password manager like KeePass shouldn’t raise any eyebrows.

    source
  • unexposedhazard@discuss.tchncs.de ⁨8⁩ ⁨hours⁩ ago

    I dont think there is. Keepass is trying to be as offline as possible. Just makes for a piece of software with much less attack surface.

    source
• brave_lemmywinks@lemmy.world ⁨8⁩ ⁨hours⁩ ago

  That’s my stack, except swap keepassdx for keepass2android, and add the Firefox plugin.

  source
• magnue@lemmy.world ⁨8⁩ ⁨hours⁩ ago

  I’ve been using that for a while. I like the control I have in that I understand where everything is stored and encrypted. I miss the way that Google password manager had the autofill for seemingly every page nailed though.

  source