Not sure I understand why you’d want to self host a password manager. Bitwarden has never been breached AFAIK. How is it better or safer to keep if self hosted?
Not sure I understand why you’d want to self host a password manager. Bitwarden has never been breached AFAIK. How is it better or safer to keep if self hosted?
What you mean is it hasn’t been breached *yet*.
All commercial password managers have a huge, fuck off, target on their backs
Nobody is going to come after some random blokes self-hosted password manager to get access to their Sonarr (I’m trivialising to make the point) as long as if a similar effort would get them into Bitwarden.
It’s the same principal as bears in the wood - nobody needs to outrun a bear, just your companion
OK, thanks for the solid answer. I suppose the core of my question was that pretty much: is it just as secure AND a less likely target than bitwarden. That makes a lot of sense to me. I would probably still worry about the strength of the code , though. Do we know if/how it’s been audited?
The code is as good as bitwardens, and even better, everyone can see the code to review it’s vulnerabilities and fix them.
What is a major factor is you’re far less likely to be of interest to a hacker. So whilst crunching numbers to crack bitwarden encryption may make some sense…it makes absolutely zero sense to spend that time to hack mine.
Have there been audits if vaultearden code? Or comparison with bitwarden code? Otherwise I am curious on what do you base that code is as good as bitwarden?