80
Which password manager to use? (sopuli.xyz)
submitted 2 years ago* by to c/privacy@lemmy.ml
67 comments fedilink hide all child comments
 

I currently use KeepassXC that is synced through NextCloud. The sync isn't very elegant, especially on my phone. So I'm looking for a new password manager, which has a native server sync support that I can self host. What do y'all recommend? I need at least a phone app and a browser integration that can autofill.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 2 years ago (1 child)

Just to play devils advocate. Bitwarden.com is a much more valuable target. My instance is behind a VPN. I think its actually far more likely Bitwarden will have a breach similar to LastPass then I will. But I agree with you mostly.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago* (last edited 2 years ago) (1 child)

    The data stored on Bitwarden's servers is completely encrypted though, which means a breach will not yield useful data, unlike the plain text storage for LastPass.

    I have the ability to selfhost BW so I am interested in counterpoints.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (1 child)

    Yes I agree. I was just offering a counter to the statement that Vaultwarden isnt as safe as Bitwarden. They both are encrypted but my vaultwarden instance is a lot less likely to experience a breach than Bitwarden. The guys with real skill are going after Bitwarden not me.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago

    That's a good point.

    Notice, your server is less likely to be targeted. But much more likely to receive a breach once it's targeted.

    It's helpful to analog. You got gold. Thieves are more likely to target a bank, but if they'll know of some gold in your house, it'll be much easier for them to take it from your house rather than from the bank.

    And now you have to work and make sure people don't find out about the gold in your house. Because once they did it's game over.

  • permalink
  • fedilink
  • source
  • parent