I currently use KeepassXC that is synced through NextCloud. The sync isn’t very elegant, especially on my phone. So I’m looking for a new password manager, which has a native server sync support that I can self host. What do y’all recommend? I need at least a phone app and a browser integration that can autofill.
Bitwarden
Bitwarden.
My recommendation: Don’t use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use). Why? You’re not a security personal, and securing your vault isn’t your job. You might do a slight mistake that’ll lead to the compromise of your vault.
The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they’ll probably do it better then you. When it comes to serious matter, I prefer to trust the professionals.
Just to play devils advocate. Bitwarden.com is a much more valuable target. My instance is behind a VPN. I think its actually far more likely Bitwarden will have a breach similar to LastPass then I will. But I agree with you mostly.
Ignoring the security aspect of it Bitwarden is responsible for hosting a fault tolerant, highly available web app.
They have redundant networking, redundant servers, load balancers, redundant databases.
While you could host this yourself to these tolerances it’s work and it’s not free.
If you’re using your password manager to the fullest you have a different password for every resource out there. It’s more than a minor inconvenience if you get locked out of your passwords.
Their service is dirt cheap and it’s absolutely worth every penny.
VW isn’t the self hostable version of BW. It’s a complete rewrite. I don’t know if it is audited in the same way as BW, so I wouldn’t recommend it until you check that. BW can be self hosted as it is. VW is a rewrite with all the premium features unlocked for free
I use KeepassXC on desktop, KeepassDX on my phone and keep it all synced with Syncthing. Works great
For native sync, the two good and reputable alternatives are Bitwarden and Proton Pass
I also use Unix pass and self host a git repo over Tailscale to keep it synced across devices. Works like a charm so long as I remember to push whenever I edit a password somewhere.
One of the big flaws of snapshot-based VCSs like get is the patch order mattering—which causes conflicts. I would love to see an alternative built on Darcs or Pijul with their Patch Theory-based VCS system that does not have the flaws Git does.
Yeah agreed. I borked my repo a couple times and needed to rollback changes, re-sync everything, and resubmit changes. It was a bit scary, but that’s also kind of the beauty of the system, is it’s just files in a folder. I could move the conflicting files out, do a push/pull and then move the files back in and push. The biggest part is getting in the habit of doing a pull before I make any local changes on a device.
I haven’t heard of the tools you mentioned, but you’ve got me curious, so I’ll definitely be looking into them and a potential fix. I’m sure I could automate things with some simple scripting, but until I make my final move off iOS I’m sort of stuck with the clunky Unix Pass app on that OS which causes most of my issues.
Presumably you could just target the passwordstore folder with any version control, Unix Pass just has some git interaction built in.
Good thing the KeepassXC can be used as a 2nd factor authenticator, though it has TOTP only, doesn’t offer HOTP.
Most here won’t like this answer. 1Password.
I’ve used it for years and it just works well for me. Finally convinced my spouse to also use it a couple of years ago. Switching is not an option since it took years of convincing to make that happen.
Big fan of Keeppass + syncing program of choice. It has served me well for years. If you don’t like nextcloud pick a different syncing app.
Bitwarden is excellent and the paid plan is very reasonable unlike with others.
Keepass2android should be able to handle nextcloud sync from within the app so that might work better than on device sync. If your done with keepass bitwarden or proton pass are common alternatives
If you’re on Android I had seen a better UX for synching with the client Keepass2droid than with KeepassXC or KeepassDX.
On iOS maybe try Keepassium.
I do the exact same thing as OP with KeepassDX at work and works pretty nice so far, since I gave KeepassDX the right acces rights on the nextxloud directory.
What diferences have you figured out so far with Keepass2android in comparison ?
Easier to setup sync for noobs, however this was years ago maybe it has changed since on DX
I used to be a rabid advocate of self hosting password managers, and was switching between Vaultwarden and KeepassXC every few months. But Proton offered a lifetime subscription to Proton Pass with unlimited Simple login aliases, and I bought it now use this exclusively.
- Gayhitler ( @Gayhitler@lemmy.ml ) English2•1 month ago
There’s a lot of arguments for one solution or the other based on security or privacy, but let me present a different scenario:
Imagine you’re in a natural disaster. Your home based self hosted server is down because of a general rolling network outage or just irrecoverably destroyed. Your offsite on the other side of the county is in a similar state. Can your cloud hosted backup be accessed at generic, public computer in a shelter or public building?
Bitwarden can. It has specific instructions for doing so as safely as possible.
Yea I was just saying that. Well said
If you can’t self host --> KeePass If you can self host --> Vaultwarden
Is VW audited in the same way that BW is?
Really I don’t know, surely a bit less but in my opinion, not that much
I hear good thing about Vaultwarden, but the web UI is horrible.
Vaultwarden’s web UI is very confusing, especially the search feature. And it’s difficult to move items between folders/collection. The desktop app is available as DEB/RPM package but without auto-update, which isn’t great.
Fon now I’m sticking to KeepassXC because the desktop app for my Linux distribution has a package for it and allows auto-update. The UI works well, and it has decent browser integration. Syncing isn’t smooth, but I can live with this.
Vaultwarden is not to be used in itself you can for example use the bitwarden app but with your vaultwarden server
You’re right. Above, I was referring to the bitwarden desktop app. See https://github.com/bitwarden/desktop
It’s an electron app, and there’s no auto-update solution for DEB packages (ie no DEB repo for apt auto update).
Some people are probably happy with it, but I prefer KeepassXC which is more lightweight (ie not electron based) and can auto update via APT.