AliasVault is a privacy-first password and email alias manager. Create unique identities, strong passwords, and random email aliases for every website you use. Fully end-to-end encrypted, with a built-in email server and zero third-party dependencies.

all 7 comments

sorted by: hot top controversial new old
[–] 5 points 11 months ago (3 children)

AliasVault has its own built-in email server that allows you to create unique email addresses and receive emails straight in AliasVault. No third-party email service required.

I don't get how does that work exactly in a self hosted environment?

  • source
  • hideshow 3 child comments
  • [–] 3 points 11 months ago (2 children)

    Just like selfhosting email I suppose, point the domain and add mx records etc. I self host Addy which is a service that does that

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 11 months ago (1 child)

    Neat. Do you ever get issues with your email being marked as spam? And if I understand correctly from Addy docs, you have to rent a VPS somewhere, or it's possible to run the whole thing on your own hardware exposed to the internet?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 11 months ago

    I only use it to receive email, so I don't know about sending them, but they don't go to spam

    As for the vps yeah I use one, but it was a great experience to learn about selfhosting. As usual the difference between a vps and a pc at your home is static ip

  • source
  • parent
  • [–] 2 points 11 months ago (2 children)

    Looks cool but wouldn't use anything other than keepassXc

  • source
  • hideshow 2 child comments
  • [–] 1 point 8 months ago

    This is what I was thinking reading this thread.

    Everyone needs to make their own choices but this is me.

    Web apps are great but they're not the solution for everything.

    Also email aliasing is great but this server is redundant if you have your own domain and use the catch-all.

  • source
  • parent
  • 29 comments in c/selfhosted@lemmy.world view that post
    [+] 47 points 5 months ago (2 children)
  • [–] 8 points 5 months ago (1 child)

    I hope it doesn't say as I didn't bother to check - how do free projects get money for audits like this?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 5 months ago

    Excellent question, because financial transparency is becoming more and more of a factor in my shift to open software.

    And I suspect that there are indeed a few not-so-good actors who are abusing FOSS for political or financial gain.

  • source
  • parent
  • [–] 46 points 5 months ago (2 children)

    Has this been audited? It’s easy to claim that something is secure, but there have been products that made such claims and were trivially exploitable.

  • source
  • hideshow 2 child comments
  • [–] 39 points 5 months ago (1 child)

    One thing that jumps out at me reading the readme is the fact that it has a built in email server. Email is hard to get right, and I'm surprised a relatively young(?) project is working on getting all the moving pieces together rather than declaring it out of scope.

    It'll be interesting to see how it develops.

  • source
  • hideshow 1 child comment
  • [–] 5 points 5 months ago

    I'm no expert but as i understood, it's the sending part that's tricky to get right. Lots of handshake to handle, all to probably end up in a spam folder or blocked along the way. But receiving from a publicly acknowledged address ? I think it's fairly simple

  • source
  • parent
  • [–] 24 points 5 months ago (3 children)

    I'll optimistically sit back and see what comes of this. I'm happy with vaultwarden.

  • source
  • hideshow 3 child comments
  • [–] 14 points 5 months ago (2 children)
  • [–] 17 points 5 months ago (5 children)

    Looks promising! And it's refreshing to see something that doesn't look vibecoded in a week. Couldn't find any AGENTS.md or other AI crap so I could actually try it

  • source
  • hideshow 5 child comments
  • [+] -7 points 5 months ago (3 children)

    This is most definitely AI assisted. I won't say vibe coded, but this has the hallmarks.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 7 points 5 months ago

    Looks like an interesting project, but I just don't understand it's use case.

    I use Keepass and I just copy the (different) email address I used to register for a site into the username field and I'm done.

    No hosting required, no additional email server, etc. just credentials in a fully portable file.

    Is this trying to automate email based 2FA ?

  • source
  • [–] 5 points 5 months ago

    Thanks but i stick to keepass. It does the job

  • source
  • [–] 1 point 5 months ago

    It worked right out of the box.

  • source
  • [–] 1 point 5 months ago

    been the number 2 recommendation after shitass proton on alternativeto.net. ui is a bit weird, but works. password generstion def needs more options tho, some sites need more number or more special characters.

  • source
  • [–] 0 points 5 months ago (6 children)

    Do you have thoughts on 1password?

  • source
  • hideshow 6 child comments
  • [–] 3 points 5 months ago

    I recently started migrating away from 1Password. I was on the individual plan for almost 5 years, but this year they would raise the price. I would happily keep paying, but I just find that the quality has just gone downhill. The Firefox extension seems to freeze up quite often, or unlocking doesn't work, or sometimes it takes 10 seconds +...

    The browser extension was also feeling a bit intrusive. It would often pop up for non-login fields. There's also no way to disable it for specific sites.

    All in all, I just grew frustrated with it, and decided to switch to Bitwarden. I'm just on the free one, so I am missing quite a bit of functionality.

  • source
  • parent
  • [–] 2 points 5 months ago

    we used to use it at work. i hated it, cause it did not recognise any non english european character during search. i wonder what happens if someone with a full cyrillic alphabet starts to use a mess like this.

  • source
  • parent
  • [–] 2 points 5 months ago

    I don't know why people use these services that charge you. Just use Keepass. It's free and open source. The only disadvantage is syncthing across devices, but syncthing makes that trivial.

  • source
  • parent
  • [–] 2 points 5 months ago (2 children)

    I’m curious why you asked this?…

  • source
  • parent
  • hideshow 2 child comments
  • 15 comments in c/opensource@lemmy.ml view that post
    [–] 20 points 11 months ago (1 child)

    Please remember that this software has not yet been properly audited and could potentially have bugs that compromise your passwords.

    That said, it looks attractive and promising.

  • source
  • hideshow 1 child comment
  • [–] 14 points 11 months ago (3 children)

    I use vaultwarden/bitwarden but I’ll check it out.

  • source
  • hideshow 3 child comments
  • [–] 10 points 11 months ago (2 children)

    Same, the email alias feature is huge.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 11 months ago (1 child)

    I had the same thought, but skimming through documentation it doesn't say how to access those emails. It has an smtp server to receive them, but how do I read them? Documentation doesn't mention a web interface (e.g. roundcube) or pop3/imap server.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 11 months ago

    Missed the self hosted install:

    https://docs.aliasvault.net/installation/

    Might investigate this further as I've wanted to move passwords to another solution and leave passkeys / 2fa via KeePass.

  • source
  • [–] 5 points 11 months ago* (3 children)

    I’m incredibly skeptical of the self-hosting email server claims. With the past 30 years of spam, most of the majors make it nigh impossible to do so. I know there are diehards out there that make it happen; it’s not as easy as it was 20 years ago though.

    Edit: Very useful HN thread with multiple perspectives (not just my doom and gloom)

  • source
  • hideshow 3 child comments
  • [–] 3 points 11 months ago

    I use Addy.io and Aliasvault for email alias'. Aliasvault works just fine but its alias address' get picked up as spam more often than Addy.io. Addy is the way to go. But its not fully free. Alias vault as a password manager works very well and I like it.

  • source
  • parent
  • [–] 2 points 11 months ago

    I believe the biggest issues of self-hosting email is the sending part, not receiving. I usually don't have to send any emails through my aliases, I just use them so I can easily block if they start spamming, or know where a breach happened by the email, as well as to hide my main email. I know there are other use cases though, so its fair to share concerns

  • source
  • parent
  • I honestly don't know where this idea comes from that email is so hard. I have set up many servers for business and personal domains with very little issues with spam filtering. If you can take a few hours max to read about SPF, DMARC, DKIM, & RDNS, it's easy to get right. There are tools like mail-in-a-box that more or less automate the whole thing.

    It's slightly more involved than setting up a WordPress install, tbh. I recommend self-hosting email as a good exerciseinn reclaiming digital autonomy. I was about to say I'm not a diehard, but then again, how would I know? 😂🙃

  • source
  • parent
  • [–] 2 points 11 months ago

    Sometimes, an app can be an app and not some hosted web service mess.

  • source
  • [–] 2 points 11 months ago

    I've been working on pt-BR translations for the project, really excited about its progress and future!

  • source
  • [–] 1 point 11 months ago

    Does this basically replace SimpleLogin? Cuz id be down with that

  • source
  • [–] 1 point 11 months ago

    One for us (who need to know what the experts do) to watch

  • source
  • 11 comments in c/buyeuropean@feddit.uk view that post
    [–] 29 points 8 months ago* (1 child)

    Uh... Their web version's Terms and Conditions are... Readable? It's less than 1000 characters. That's characters, not words; It's 135 words.

    Sometimes, it really pains me how much bullshit is on the internet. Why isn't every TaC like this?

  • source
  • hideshow 1 child comment
  • [–] 11 points 8 months ago

    Holy Shit^TM^, this looks amazing !

  • source
  • [–] 7 points 8 months ago (3 children)

    So.. What's the business model here? I don't see any pricing and such, when using their services.

    I'm not 100% on board of unifying alias and email, makes it harder to move, but this might be interesting.

  • source
  • hideshow 3 child comments
  • [–] 8 points 8 months ago (2 children)

    I may be mistaken, but I believe the built-in email server is purely for aliases, so it's basically something like SimpleLogin or addy.io combined with Bitwarden.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 8 months ago (1 child)

    Generate unique aliases (identities) for different services and create unique email addresses with AliasVault's built-in email server. Receive emails straight in AliasVault: no third-party email service required.

    Thought the same, but this is what they say. Not only it's their aliases, they host the mail.

    Would simplify the replying at least.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 8 months ago

    I never thought of integrating an email server into a password manager. That's an intriguing idea.

  • source
  • [–] 3 points 8 months ago

    Not sure if they've resolved this, but last I checked you couldn't reply using the aliases (or maybe that was just their cloud offering?). Everything else I've seen has been pretty cool though, so I'm really hoping they succeed.

  • source
  • [–] 1 point 8 months ago

    I'm keeping an eye on this one.

    I reached out to the developer because there isn't a member sharing sync option (such as a family vault where you share with other members) but it's in their pipeline in the next 3 to 4 months.

  • source
  • [–] 1 point 8 months ago

    wow!! will definitely slap this into freshrss and keep an eye on it

  • source