▲ 53 ▼ I Do Not Recommend Bitwarden (マリウス.com) submitted 6 months ago by mesamunefire@piefed.social to c/technology@lemmy.world 30 comments fedilink hide all child comments A review of my experience with Bitwarden after several years of self-hosting it, and why I decided to move away from the password manager. Note: this is not my article.
[–] deegeese@sopuli.xyz 3 points 6 months ago (11 children) But what if you don’t want to self host your password manager? Any non terrible choices? permalink fedilink source hideshow 11 child comments replies: [–] A_norny_mousse@piefed.zip 9 points 6 months ago (2 children) I don't think Bitwarden is a terrible choice. That said, I share the author's concerns in general. How much does a non-selfhosted password manager cost? Weigh that against the cost of remote-mountable server storage, you can simply put your database there. (Both costs can be 0 btw) permalink fedilink source parent hideshow 2 child comments replies: [–] deegeese@sopuli.xyz 3 points 6 months ago (1 child) The real cost is time and reliability, not money. permalink fedilink source parent hideshow 1 child comment replies: [–] A_norny_mousse@piefed.zip 1 point 6 months ago Initially, yes, but no more once you got it working permalink fedilink source parent [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (5 children) I prefer 1Password. They use a secure encryption key together with your master password. If you lose the encryption key, your data can’t be recovered. The key is only needed during the initial setup annd after that you unlock the vault on your device with your master password. This means if their database ever gets hacked, your data is encrypted in a way that not even you could get at unless you have that secure key. permalink fedilink source parent hideshow 5 child comments replies: [–] pressanykeynow@lemmy.world 3 points 6 months ago (4 children) Is it open source? If not you can't know what they use there, just what they tell you to sell their stuff. permalink fedilink source parent hideshow 4 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (3 children) Then literally no one can answer the question presented. permalink fedilink source parent hideshow 3 child comments replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago (2 children) If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better. permalink fedilink source parent hideshow 2 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent [–] muusemuuse@sh.itjust.works -1 points 6 months ago Use yubikeys permalink fedilink source parent [–] xnx@piefed.social -4 points 6 months ago ProtonPass permalink fedilink source parent
[–] A_norny_mousse@piefed.zip 9 points 6 months ago (2 children) I don't think Bitwarden is a terrible choice. That said, I share the author's concerns in general. How much does a non-selfhosted password manager cost? Weigh that against the cost of remote-mountable server storage, you can simply put your database there. (Both costs can be 0 btw) permalink fedilink source parent hideshow 2 child comments replies: [–] deegeese@sopuli.xyz 3 points 6 months ago (1 child) The real cost is time and reliability, not money. permalink fedilink source parent hideshow 1 child comment replies: [–] A_norny_mousse@piefed.zip 1 point 6 months ago Initially, yes, but no more once you got it working permalink fedilink source parent
[–] deegeese@sopuli.xyz 3 points 6 months ago (1 child) The real cost is time and reliability, not money. permalink fedilink source parent hideshow 1 child comment replies: [–] A_norny_mousse@piefed.zip 1 point 6 months ago Initially, yes, but no more once you got it working permalink fedilink source parent
[–] A_norny_mousse@piefed.zip 1 point 6 months ago Initially, yes, but no more once you got it working permalink fedilink source parent
[–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (5 children) I prefer 1Password. They use a secure encryption key together with your master password. If you lose the encryption key, your data can’t be recovered. The key is only needed during the initial setup annd after that you unlock the vault on your device with your master password. This means if their database ever gets hacked, your data is encrypted in a way that not even you could get at unless you have that secure key. permalink fedilink source parent hideshow 5 child comments replies: [–] pressanykeynow@lemmy.world 3 points 6 months ago (4 children) Is it open source? If not you can't know what they use there, just what they tell you to sell their stuff. permalink fedilink source parent hideshow 4 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (3 children) Then literally no one can answer the question presented. permalink fedilink source parent hideshow 3 child comments replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago (2 children) If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better. permalink fedilink source parent hideshow 2 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent
[–] pressanykeynow@lemmy.world 3 points 6 months ago (4 children) Is it open source? If not you can't know what they use there, just what they tell you to sell their stuff. permalink fedilink source parent hideshow 4 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (3 children) Then literally no one can answer the question presented. permalink fedilink source parent hideshow 3 child comments replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago (2 children) If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better. permalink fedilink source parent hideshow 2 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent
[–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago (3 children) Then literally no one can answer the question presented. permalink fedilink source parent hideshow 3 child comments replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago (2 children) If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better. permalink fedilink source parent hideshow 2 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent
[–] pressanykeynow@lemmy.world 1 point 6 months ago (2 children) If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better. permalink fedilink source parent hideshow 2 child comments replies: [–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent
[–] KairuByte@lemmy.dbzer0.com 1 point 6 months ago* (1 child) ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option. permalink fedilink source parent hideshow 1 child comment replies: [–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent
[–] pressanykeynow@lemmy.world 1 point 6 months ago You gave your opinion, I gave my opinion that what you suggest is way worse than the alternatives. Don't understand why are you upset. permalink fedilink source parent