998
Bitwarden's new CEO has a Private Equity background, removed 'Inclusion' and 'Always Free' from their website -- because of course he did (www.fastcompany.com)
submitted 2 months ago* (last edited 2 months ago) by to c/selfhosted@lemmy.world
229 comments fedilink hide all child comments
 

In the latest episode of "they will always sell you out" - they sold you out! Who would've thought.

Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can't exist without "leeching" off of Bitwarden.

you are viewing a single comment's thread
view the rest of the comments
[–] 82 points 2 months ago (7 children)

KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there)

I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 20 points 2 months ago (1 child)

    Sync however you want. Syncthing, Nextcloud, Dropbox, Gdrive etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 15 points 2 months ago (2 children)

    Syncthing is the way to leave Google Drive, etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 10 points 2 months ago (1 child)

    I use Nextcloud myself, but if people don't want to host a server or fuck with syncthing, they can sync it however they want as long as they use a strong enough master password/phrase (which they should be anyway.).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    Oh, well, I'm talking about not having to password-lock and unlock your stuff constantly. For long-term storage, sure, that's fine; anything else would be way too tedious, though, no? I guess it depends on your use case and if you could locally automate the locking and unlocking or something.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    I'm not sure what you mean. On my computer, I have to unlock the database every so often (you can set how long) with my master password. On my phone I unlock it with my fingerprint. The method of syncing the database is irrelevant.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 months ago (2 children)

    Is there a proper syncthing android client now, after the official android client was discontinued?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 months ago

    Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it.

    However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well).

  • permalink
  • fedilink
  • source
  • parent
  • [–] [S] 16 points 2 months ago (5 children)

    Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups.

    Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 8 points 2 months ago (1 child)

    I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time.

    Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program.

    I'm curious what is causing sync issues to make it "common", I use my db every day.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 4 points 2 months ago* (1 child)

    Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever.

    With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer.

    It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago

    Hmm, I'll have to play around with it a bit more then to see if I can trigger it.

    My only gripe is the browser autofill. Sometimes it triggers correctly and sometimes it doesn't. I've noticed if I let KeePass add in a new login itself after I've manually entered it then it's much more receptive to suggesting that login correctly going forward. So I'm tempted to create a brand new database and login everything manually so KeePass will create the database entries itself to fix my gripe.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 2 months ago

    I'm using Keepass2Android (and KeepassXC). It can copy the database from/to an sftp server, so it can easily merge the entries. I don't have the sftp server exposed to the Internet, because when I'm not home, nobody will change the database at home.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 months ago

    Merge conflicts are a concern for KeePass

    It's really not that much of an issue. I sync my database between several devices, some of which are only used occasionally. Rarely do I ever have a merge conflict.

    If you're editing the database on multiple devices before they have a chance to sync with each other, maybe stop doing that. That's what causes merge issues.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 2 months ago (1 child)

    I use KeePass with KeeAnywhere. KeePass can natively sync over network share, FTP, or WebDav. With plugins, it can sync over SSH, FTPS, Amazon S3 compatible buckets (including open source compatible versions you host yourself), Azure, Box, Dropbox, Google Drive, OneDrive, and more.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 months ago (1 child)

    KeeAnywhere

    That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    Are you trying to use a passkey to unlock the database or for authenticating with other websites? KeePass can natively do TOTP. There's also plugins to do that. Including one that allows KeePass to be a native Windows 11 PassKey Provider.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    For other websites, if I search for 'passkey' on the KeePass website feature list nothing comes up. Plugins in a password manager sketch me out a bit tbh lol

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    See here: https://keepass.info/help/base/placeholders.html#otp Also worth pointing out that most plugins are open source. You can read the source and compile them yourself, if you'd like.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago* (1 child)

    This is for OTP not Passkeys it seems?

    How do you go about loading plugins on the Android version for sync with your setup?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago

    I don't usually use plugins on the Android version. I don't use the Android much, actually, just due to my use patterns. There's actually several different KeePass Android apps. KeePass is open source and the database format is documented. So anybody can make a program that uses the same database. The one I use is Keepass2Android, seems to be one of the popular ones. Looks like it also can natively generate TOTP. Apparently it has some sort of plugin system, but I've never needed to use it because it can pull my password database out of my Google Drive natively.

    You need to specify what kind of passkey to be more specific. There's several different algorithms. HOTP and TOTP are very widely used. It's what Google Authenticator and the like use. If you have something very proprietary, like the old RSA keys, that probably can't be emulated by any software. Or they could, but you can't get the secret to be able to do that.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 months ago (1 child)

    XC is really nice, but the devs are kinda dicks about not integrating some sort of syncing option, instead telling everyone who asks to "just point it to a local folder and use <insert sync tool of your choice> to keep that folder updated." Which isn't terrible advice, but some of us don't have that option on managed devices.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    I ended up using Keepass2Android and just pointing it at my webdav server, it seems to work pretty well!

    On desktop it's already taken care of since I put the DB in my folders that already sync via Syncthing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •