▲ 130 ▼ Vaultwarden update (security!) (github.com) submitted 7 months ago by megaman@discuss.tchncs.de to c/selfhosted@lemmy.world 8 comments fedilink hide all child comments Vaultwarden update out as of ~15 minutes ago, includes security updates. It says "unconfirmed owner can purge entire organization vault". That seems probably not great, so updating is probably a good idea.
[–] mpramann@discuss.tchncs.de 8 points 7 months ago (2 children) That's why most use a VPN. permalink fedilink source parent hideshow 2 child comments replies: [–] TrumpetX@programming.dev 10 points 7 months ago (1 child) I understand why some would do this. It's definitely a more secure setup, but I highly doubt "most". I like having passwords on my work laptop. I couldn't sync there with a VPN, for example. My wife, kids and parents aren't going to run VPNs on their phones, etc. permalink fedilink source parent hideshow 1 child comment replies: [–] mpramann@discuss.tchncs.de -1 points 7 months ago Vaultwarden is specifically used for self hosting. Setting up a Wireguard VPN on your server at home can be tricky in specific instances. Most of the time it's dead simple though. Installing a Wireguard Client on your mobile devices is as simple as scanning a QR code. And to be fair: If you're going to expose the Vaultwarden instance to the internet why not just use the official Bitwarden service then? I'm sure they can handle security better than someone who has trouble setting up an VPN server. permalink fedilink source parent
[–] TrumpetX@programming.dev 10 points 7 months ago (1 child) I understand why some would do this. It's definitely a more secure setup, but I highly doubt "most". I like having passwords on my work laptop. I couldn't sync there with a VPN, for example. My wife, kids and parents aren't going to run VPNs on their phones, etc. permalink fedilink source parent hideshow 1 child comment replies: [–] mpramann@discuss.tchncs.de -1 points 7 months ago Vaultwarden is specifically used for self hosting. Setting up a Wireguard VPN on your server at home can be tricky in specific instances. Most of the time it's dead simple though. Installing a Wireguard Client on your mobile devices is as simple as scanning a QR code. And to be fair: If you're going to expose the Vaultwarden instance to the internet why not just use the official Bitwarden service then? I'm sure they can handle security better than someone who has trouble setting up an VPN server. permalink fedilink source parent
[–] mpramann@discuss.tchncs.de -1 points 7 months ago Vaultwarden is specifically used for self hosting. Setting up a Wireguard VPN on your server at home can be tricky in specific instances. Most of the time it's dead simple though. Installing a Wireguard Client on your mobile devices is as simple as scanning a QR code. And to be fair: If you're going to expose the Vaultwarden instance to the internet why not just use the official Bitwarden service then? I'm sure they can handle security better than someone who has trouble setting up an VPN server. permalink fedilink source parent