A review of my experience with Bitwarden after several years of self-hosting it, and why I decided to move away from the password manager.

Note: this is not my article.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 6 months ago (11 children)

But what if you don’t want to self host your password manager?

Any non terrible choices?

  • source
  • hideshow 11 child comments
  • [–] 9 points 6 months ago (2 children)

    I don't think Bitwarden is a terrible choice. That said, I share the author's concerns in general.

    How much does a non-selfhosted password manager cost? Weigh that against the cost of remote-mountable server storage, you can simply put your database there.
    (Both costs can be 0 btw)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 months ago (5 children)

    I prefer 1Password. They use a secure encryption key together with your master password. If you lose the encryption key, your data can’t be recovered. The key is only needed during the initial setup annd after that you unlock the vault on your device with your master password.

    This means if their database ever gets hacked, your data is encrypted in a way that not even you could get at unless you have that secure key.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 6 months ago (4 children)

    Is it open source? If not you can't know what they use there, just what they tell you to sell their stuff.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 6 months ago (3 children)

    Then literally no one can answer the question presented.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 6 months ago (2 children)

    If we leave out Bitwarden, yes. Doesn't make proprietary password managers any better.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 months ago* (1 child)

    ? What even is this, they asked what options there were, I gave them my opinion, and you’re jumping down my throat for not giving the only partially open source option.

  • source
  • parent
  • hideshow 1 child comment