Uh... Their web version's Terms and Conditions are... Readable? It's less than 1000 characters. That's characters, not words; It's 135 words.
Sometimes, it really pains me how much bullshit is on the internet. Why isn't every TaC like this?
Uh... Their web version's Terms and Conditions are... Readable? It's less than 1000 characters. That's characters, not words; It's 135 words.
Sometimes, it really pains me how much bullshit is on the internet. Why isn't every TaC like this?
So.. What's the business model here? I don't see any pricing and such, when using their services.
I'm not 100% on board of unifying alias and email, makes it harder to move, but this might be interesting.
I may be mistaken, but I believe the built-in email server is purely for aliases, so it's basically something like SimpleLogin or addy.io combined with Bitwarden.
Generate unique aliases (identities) for different services and create unique email addresses with AliasVault's built-in email server. Receive emails straight in AliasVault: no third-party email service required.
Thought the same, but this is what they say. Not only it's their aliases, they host the mail.
Would simplify the replying at least.
I never thought of integrating an email server into a password manager. That's an intriguing idea.
Not sure if they've resolved this, but last I checked you couldn't reply using the aliases (or maybe that was just their cloud offering?). Everything else I've seen has been pretty cool though, so I'm really hoping they succeed.
I'm keeping an eye on this one.
I reached out to the developer because there isn't a member sharing sync option (such as a family vault where you share with other members) but it's in their pipeline in the next 3 to 4 months.
I hope it doesn't say as I didn't bother to check - how do free projects get money for audits like this?
Has this been audited? Itโs easy to claim that something is secure, but there have been products that made such claims and were trivially exploitable.
One thing that jumps out at me reading the readme is the fact that it has a built in email server. Email is hard to get right, and I'm surprised a relatively young(?) project is working on getting all the moving pieces together rather than declaring it out of scope.
It'll be interesting to see how it develops.
I'm no expert but as i understood, it's the sending part that's tricky to get right. Lots of handshake to handle, all to probably end up in a spam folder or blocked along the way. But receiving from a publicly acknowledged address ? I think it's fairly simple
I'll optimistically sit back and see what comes of this. I'm happy with vaultwarden.
Itโs good to have options
They said VaultWarden, not BitWarden. This shouldn't affect them.
Looks promising! And it's refreshing to see something that doesn't look vibecoded in a week. Couldn't find any AGENTS.md or other AI crap so I could actually try it
This is most definitely AI assisted. I won't say vibe coded, but this has the hallmarks.
This is a claim that is meaningless. You can say it about literally any software currently in development, and there is zero way to reliably refute it.
Itโs like stating your comment was AI assisted.
Looks like an interesting project, but I just don't understand it's use case.
I use Keepass and I just copy the (different) email address I used to register for a site into the username field and I'm done.
No hosting required, no additional email server, etc. just credentials in a fully portable file.
Is this trying to automate email based 2FA ?
been the number 2 recommendation after shitass proton on alternativeto.net. ui is a bit weird, but works. password generstion def needs more options tho, some sites need more number or more special characters.
Do you have thoughts on 1password?
I recently started migrating away from 1Password. I was on the individual plan for almost 5 years, but this year they would raise the price. I would happily keep paying, but I just find that the quality has just gone downhill. The Firefox extension seems to freeze up quite often, or unlocking doesn't work, or sometimes it takes 10 seconds +...
The browser extension was also feeling a bit intrusive. It would often pop up for non-login fields. There's also no way to disable it for specific sites.
All in all, I just grew frustrated with it, and decided to switch to Bitwarden. I'm just on the free one, so I am missing quite a bit of functionality.
we used to use it at work. i hated it, cause it did not recognise any non english european character during search. i wonder what happens if someone with a full cyrillic alphabet starts to use a mess like this.
I don't know why people use these services that charge you. Just use Keepass. It's free and open source. The only disadvantage is syncthing across devices, but syncthing makes that trivial.
Iโm curious why you asked this?โฆ
Aren't both of them password managers? I guess I wonder if someone has a preference for one over the other.
Please remember that this software has not yet been properly audited and could potentially have bugs that compromise your passwords.
That said, it looks attractive and promising.
I use vaultwarden/bitwarden but Iโll check it out.
Same, the email alias feature is huge.
I had the same thought, but skimming through documentation it doesn't say how to access those emails. It has an smtp server to receive them, but how do I read them? Documentation doesn't mention a web interface (e.g. roundcube) or pop3/imap server.
Missed the self hosted install:
https://docs.aliasvault.net/installation/
Might investigate this further as I've wanted to move passwords to another solution and leave passkeys / 2fa via KeePass.
Iโm incredibly skeptical of the self-hosting email server claims. With the past 30 years of spam, most of the majors make it nigh impossible to do so. I know there are diehards out there that make it happen; itโs not as easy as it was 20 years ago though.
Edit: Very useful HN thread with multiple perspectives (not just my doom and gloom)
I use Addy.io and Aliasvault for email alias'. Aliasvault works just fine but its alias address' get picked up as spam more often than Addy.io. Addy is the way to go. But its not fully free. Alias vault as a password manager works very well and I like it.
I believe the biggest issues of self-hosting email is the sending part, not receiving. I usually don't have to send any emails through my aliases, I just use them so I can easily block if they start spamming, or know where a breach happened by the email, as well as to hide my main email. I know there are other use cases though, so its fair to share concerns
I honestly don't know where this idea comes from that email is so hard. I have set up many servers for business and personal domains with very little issues with spam filtering. If you can take a few hours max to read about SPF, DMARC, DKIM, & RDNS, it's easy to get right. There are tools like mail-in-a-box that more or less automate the whole thing.
It's slightly more involved than setting up a WordPress install, tbh. I recommend self-hosting email as a good exerciseinn reclaiming digital autonomy. I was about to say I'm not a diehard, but then again, how would I know? ๐๐
I've been working on pt-BR translations for the project, really excited about its progress and future!
AliasVault has its own built-in email server that allows you to create unique email addresses and receive emails straight in AliasVault. No third-party email service required.
I don't get how does that work exactly in a self hosted environment?
Just like selfhosting email I suppose, point the domain and add mx records etc. I self host Addy which is a service that does that
Neat. Do you ever get issues with your email being marked as spam? And if I understand correctly from Addy docs, you have to rent a VPS somewhere, or it's possible to run the whole thing on your own hardware exposed to the internet?
Looks cool but wouldn't use anything other than keepassXc
This is what I was thinking reading this thread.
Everyone needs to make their own choices but this is me.
Web apps are great but they're not the solution for everything.
Also email aliasing is great but this server is redundant if you have your own domain and use the catch-all.
all 11 comments