I've cancelled my subscription yesterday, conveniently it was about to renew at the end of the week, so I have a few days to migrate from Proton, here's what I'm thinking of, but I'd love to hear what other people are switching to

you are viewing a single comment's thread
view the rest of the comments
[–] 116 points 3 days ago (32 children)

Bitwarden is pivoting towards the same enshittification path as everything else, so that’s not gonna be a good long term for a password manager. They hired a new ceo whose only noteworthy experience is prepping companies for mergers and acquisitions, and briefly removed messaging on their website about always having a free tier which they reinstated after backlash. All signs point to a sinking ship, imo.

I don’t have the answer for what to use instead since I’m still a paid subscriber with them, but I’m looking around. Probably keepassxc but I don’t know enough to host and sync my own.

  • source
  • hideshow 32 child comments
  • [–] 18 points 3 days ago (3 children)

    KeepassDX on android. Any keepass .kdbx file opener on every OS. .kdbx file saved on a local network shared folder on an always on raspberry pi. Access the folder on all devices, open the file with keepass app.

    No sync, no extra sync software, no dangling copies, changes are immediate, decryption happens on device not over the network. Step up to network share over sftp. Tailscale tunnel to access when away from home.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 22 points 3 days ago (20 children)

    Vaultwarden is a great alternative.

  • source
  • parent
  • hideshow 20 child comments
  • [–] 22 points 3 days ago (19 children)

    However, Vaultwarden only implements the webvault, the client apps are still only supplied by Bitwarden, which they could make incompatible with Vaultwarden at some point.

  • source
  • parent
  • hideshow 19 child comments
  • [–] 8 points 3 days ago (16 children)

    the client apps are still only supplied by Bitwarden

    Not true. You could also use Keyguard.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 5 points 3 days ago* (15 children)
  • [–] -1 points 2 days ago (14 children)

    Their github page is public and you can review the code if you want to. What are you talking about?

  • source
  • parent
  • hideshow 14 child comments
  • [–] 7 points 2 days ago (9 children)

    I'm talking about the license. It is proprietary.

  • source
  • parent
  • hideshow 9 child comments
  • [–] -1 points 2 days ago (8 children)

    What is it exactly that you want to do but can't? Anyone can audit the code, you could see if they were doing something sketchy. Sounds lile you just want to complain.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 3 points 2 days ago (3 children)

    Open Source is not just about the source code availability. Keyguard is proprietary and I try to avoid proprietary software.

  • source
  • parent
  • hideshow 3 child comments
  • [–] -5 points 2 days ago (2 children)

    So no real reason then. Gotcha.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 days ago (1 child)

    Just because someone's constraints don't apply to you doesn't mean they aren't "real", maybe try to not be so dismissive of other people's needs?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 days ago (3 children)

    We're here discussing the possibility that BW enshittifies, and you suggest an alternative that has everything ready from its day1 to enshittify. Just saying.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 day ago (2 children)

    Uhm, no? I was talking about BW only as a client for Vaultwarden and mentioned thar Keyguard is an alternative client. There's nothing "enshitified" about it. What exactly is the issue about it only being source available?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 day ago (1 child)

    I didn't write it was enshittified. I'm saying it bears just as much risk of enshittification as BW clients, even worse here since you can't fork it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 day ago

    Literally anything can "enshittify". A project being open source does not ensure that won't happen.

    you can’t fork it.

    Well, technically you can, there's nothing stopping you. There are 121 forks already. Not sure you can distribute it though.

    Regardless of all of this, it's just like any app or service. You can use it while it meets your needs and drop it when it doesn't. In this particular case, you can at least see the source code and actually make sure that there's nothing bad in there.

  • source
  • parent
  • [–] 1 point 2 days ago (3 children)

    Source available does not mean the same thing as Open Source.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 1 day ago* (2 children)

    Re-read my comment. Did I say "open source"? Also, I reiterate my question, what does it being source available entail for you? Is there anything more insecure? Is there something you can't do? This sounds more like a pet peeve than an actual problem.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 3 days ago

    the community already made a custom server that's compatible with Bitwarden, I imagine if Bitwarden cut them off then they could make a custom client for it as well.

    in fact I believe there are community made Bitwarden apps already for Linux desktops, although I never tried them because I just use the browser extension.

  • source
  • parent
  • [–] 1 point 3 days ago

    Indeed, and I do not like that I have to have another repository just for the bitwarden app.

    I am not really worried though. If they completely fuck up, a fork of the app will be a matter of seconds.

  • source
  • parent
  • [–] 6 points 3 days ago

    AFAIK the concept behind keepassxc is that it's an encrypted .kdbx file that you sync yourself among your devices by any means you can. There are official apps for Windows/Linux/Mac, browser extensions for Firefox/Chrome/Chromium/Vivaldi, there's integration with ssh-agent, and 3rd-party apps for Android and iOS.

  • source
  • parent
  • [–] 5 points 3 days ago

    I don't think Keepass does syncing. I just leave the database in my Nextcloud sync folder on my desktop, and I can always pull the latest version to my phone. It'd be a bit more annoying if I routinely added new entries from my phone since Android won't let the NC app maintain bidirectional sync, but I pretty much always do it from my desktop, so the workflow is fine for me personally. If you do it on your phone, you can upload the changed version, but I think you'd have to do it manually, so not a great flow, but if it's a rarity, not too big a deal to me.

  • source
  • parent
  • [–] 4 points 3 days ago (1 child)

    write a bash script that rsyncs your keepass database to your other devices and run it once in a while. i have seen way too many online password vaults get hacked to ever bother with them.

  • source
  • parent
  • hideshow 1 child comment