Self hosted vaultwarden for personal use and pass at work.
this post was submitted on 15 Jun 2023
194 points (99.5% liked)
Privacy Guides
17383 readers
273 users here now
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
- We prefer posting about open-source software whenever possible.
- This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
- No soliciting engagement: Don't ask for upvotes, follows, etc.
- Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
- Be civil, no violence, hate speech. Assume people here are posting in good faith.
- Don't repost topics which have already been covered here.
- News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
- Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
- No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
- No misinformation: Extraordinary claims must be matched with evidence.
- Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
- General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Additional Resources:
- EFF: Surveillance Self-Defense
- Consumer Reports Security Planner
- Jonah Aragon (YouTube)
- r/Privacy
- Big Ass Data Broker Opt-Out List
founded 2 years ago
MODERATORS
+1 1Password (coming from LastPass) this manager is really great. Good mobile, desktop and browser support.
BitWarden for me. I got the premium plan so I use it to share family password with my Partner (one collection), my dad (a second), and my in-laws (a third). I've definitely gotten my money's worth and I've been happy with it.
Looking forward to seeing if the passwordless (like key vaults) works for my automated processes, but even if they don't, it's been fairly good for me and has a decent contingency (self-hosted).
Keepass and Strongbox.
I don’t like the honeypot that is anything too centralized, even if it is e2e encrypted. I’d be worried about exploits or compromised client payloads.
I've been using KeePass and KeePassdroid for at least 10 years now. "Sync" my dB through one drive, only because at one time we were allowed to use our personal one at work, but since they blocked personal folders in favor of corporate ones it is much less handy.
I used to use Dashlane but when I found out bitwarden was free I just started using that
1Password because we’re an Apple household (aside from my work laptop, and even then it’s easy enough to use through the web interface). The main thing that irks me about it is that they keep offering discounts for new subscribers but longtime users have to keep paying the full price. But I’ve been considering switching to Proton for email, and they’re in the process of rolling out a password manager that seems similar so I may be switching to that sooner rather than later.
Another very happy 1Password user here!
I switched my workplace to 1Password and I moved from Dashlane at the same time. One thing that's nice about 1P from that perspective is that our plan gives everyone a free personal account that they could take with them if they left the company (they'd have to pay for it themselves at that point of course).
Usability is the best of any password manager I've used, but the killer feature for us as a development team was the flexibility. Being able to assign the same credentials to multiple URLs (e.g. dev, stage, QA, prod) was just not possible with everything else we looked at the time.
load more comments
(2 replies)
Bitwarden is the way.
Another happy KeepassXC user here! Keepass2android on Android. I keep the passwords synced with nextcloud
1Password. Wasn't thrilled with their move to electron, but it hasn't been as bad as I feared, and they've earned my trust at this point
Doesn't hurt that my work now uses it, so I get the family plan for free either
Bitwarden all the way
Password managers are for suckas, I just use password123 for everything.
load more comments
(1 replies)
I use 1password, I used KeePass for years but it didn't work will on Android so I moved on.
Also using 1Password, works great for what my family needs.
KeepassXC and Keepass2Android
Dashlane here. I self host a lot and could definitely use Keypass or something locally, but the risk of losing all your passwords if I fuck something up was too great. I'll pay professionals.
load more comments
(1 replies)
My approach is a bit more complicated than of many commenters here: I use both Keepass and Bitwarden.
Bitawarden is for most of the passwords, and I use it to share some passwords with family.
Keepass is for the most sensitive stuff - online banking and emails. Also, I use it for non-web apps. Keepass DB is synced with Syncthing between desktop and mobile.
TOTP is handled by Aegis android app. I was thinking to move it to Keepass, but I really like interface of a dedicated app. And it's data automatically backed up to Nextcloud
load more comments
(1 replies)
KeepassXC with syncthing
Another vote for Bitwarden. Works on everything I use!
Enpass, no puplic hosting. Clients in phone and PC. You can use your own services if you want to upload or keep it in a folder on the phone.
load more comments
(2 replies)
1Password is a genuine life saver.
I’m entirely in the Apple ecosystem, so I use the built in Keychain, synced across devices through iCloud.
It would be Bitwarden otherwise.
load more comments
(6 replies)
I used to use KeePass, but switched to https://www.passwordstore.org with a YubiKey after discovering how janky the KeePass 2FA system is designed a while back.
load more comments
(1 replies)
For work I use 1Password, for at home I use Bitwarden.
KeePassXC and Keepass2Android auto-synced with my Nextcloud instance. Works great cross-platform for Linux/Windows/Android.
I know what you mean, trusting a SaaS provider with my master password list always felt like a bad plan.
Keepass on OneDrive, so I can access it from my computer and phone.
I use OneNote, with a bunch of coded words that mean other things and mix and match those to make longer passwords that are all different. Because I'm too lazy for a real app, and this is secure enough and useful enough.
load more comments
(1 replies)
I rolled my own, actually. I don't store any passwords (even encrypted). Instead, I just append the site name to my base password (which is in my head), hash it, and base-52 it. (I also start each password with the same uppercase letter, lowercase letter, punctuation mark, just to ensure it gets past any bullshit filters)
I like that there's nothing that can be leaked (except what's in my head) and nothing to be lost and nothing to back up.
Can you please elaborate on each step. I'm not sure on the hash and base52 - do you use a program you're written to do that for you? A simple example would be fantastic.
load more comments
(2 replies)
Bitwarden here too