223
submitted 10 months ago by Dasnap@lemmy.world to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] Norgur@kbin.social 23 points 10 months ago

Bitwarden can do everything Authy can afaik

[-] stealth_cookies@lemmy.ca 13 points 10 months ago

It is a bad idea to have your password manager and 2FA be the same app though. You want to spread it around so one attack can't break your logins.

[-] ikidd@lemmy.world 8 points 10 months ago

You aren't wrong and I should rethink that. But BW is so damn handy.

[-] BearOfaTime@lemm.ee 1 points 10 months ago* (last edited 10 months ago)

Good point.

Is it realistic (i.e. is it secure enough) to self-host 2 Bitwarden, one for passwords, one for authentication?

Or would splitting that between 2 Bitwarden logins work?

I just throwing stuff at the wall, I haven't thought either of these through yet.

[-] Norgur@kbin.social 1 points 10 months ago

While that is true, the risk of someone brute forcing into an account of mine on the login side than on mine. That's what I use 2FA against. If they managed to break into my vault, they'd have broken into my Mailserver and whatnot, so....

[-] rambaroo@lemmy.world 9 points 10 months ago

BitWarden can generate 2FA tokens? I don't see any option for that on Android

[-] AbidanYre@lemmy.world 14 points 10 months ago

Vaultwarden can. Self hosting isn't for everyone though.

[-] Norgur@kbin.social 16 points 10 months ago

Given that the comment was a demand for self hostable Authy, I think they might wanna :P

[-] AbidanYre@lemmy.world 5 points 10 months ago* (last edited 10 months ago)

Ha. Apparently two comments worth of context is too much for me to handle.

[-] BearOfaTime@lemm.ee 3 points 10 months ago

Lol.

Welcome to the club, mate! 🤣

[-] LWD@lemm.ee 3 points 10 months ago* (last edited 10 months ago)
[-] unwillingsomnambulist@midwest.social 10 points 10 months ago

Need to pay for a subscription for TOTP. It’s like $10/year for the personal plan.

[-] CosmicTurtle@lemmy.world 8 points 10 months ago

Which is damn near cheap compared to other companies. I personally use dashlane (I know I know I should self host but I don't trust myself for something as important as passwords) and that's $60 for their premium package.

[-] reev@sh.itjust.works 6 points 10 months ago

I love my bitwarden but is it less secure to have all your eggs in one basket? That's the main reason I've been using separate apps so far.

[-] unwillingsomnambulist@midwest.social 1 points 10 months ago

It may very well be, especially if the basket your eggs are in is full of holes. I always figure, as long as it isn’t a pad of paper on a desk, or a company that regularly makes headlines due to security breaches, I should be okay.

[-] rambaroo@lemmy.world 2 points 10 months ago

Cool, I might check it out then. I knew I'd have to move off of authy eventually.

[-] Merlin404@lemmy.world 8 points 10 months ago
[-] Norgur@kbin.social 6 points 10 months ago
[-] ikidd@lemmy.world 4 points 10 months ago

I self-host, but I still pay for their premium because it's a damn good product I want to see kept maintained for years to come.

I mean, cmon, it's $10. Almost cheaper than a banana.

[-] AbidanYre@lemmy.world 3 points 10 months ago
[-] ikidd@lemmy.world 2 points 10 months ago

Glad someone caught that.

[-] BearOfaTime@lemm.ee 1 points 10 months ago

That's a good point.

I'm not paying currently because I don't use their online service.

Adding them to my "Annual Donate to Software I find Useful" list, that I just started this year.

I despise subscriptions. For apps that have a hosted portion, I understand them, but I'd still rather pay annually.

[-] ikidd@lemmy.world 2 points 10 months ago

It's $10 annually in case you thought it was monthly. I'd imagine if you went in and subbed, then cancelled the sub, you'd still have your year you paid for. But yah, I'd like an option to not auto-renew, even though I do.

[-] BearOfaTime@lemm.ee 1 points 10 months ago

Oh, I saw that it was $10 for the year. That's crazy cheap.

I just want my stuff on my stuff, after the Lastpass debacle last year - it was the last straw to push me into self hosting everything.

[-] Merlin404@lemmy.world 1 points 10 months ago
[-] rambaroo@lemmy.world 1 points 10 months ago* (last edited 10 months ago)
[-] bdonvr@thelemmy.club 4 points 10 months ago

Yeah, I already run Vaultwarden. But like others I don't really want to combine my tokens and passwords.

this post was submitted on 08 Jan 2024
223 points (96.3% liked)

Technology

59689 readers
2504 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS