596
Concerns Raised Over Bitwarden Moving Further Away From Open-Source
(www.phoronix.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 20 Oct 2024
596 points (96.9% liked)
Technology
58795 readers
2851 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
so what's the best pw manager?
Vaultwarden is a nice self hosted bitwarden alternative
https://github.com/dani-garcia/vaultwarden
Some prefer using KeepassXC and sync the database between devices
https://www.ctrl.blog/entry/keepass-vs-bitwarden-server.html
+1 For KeePassXC and the KeePass ecosystem. Yes, you need to sync the database yourself, but you can use any file sharing service you like, e.g. google drive, dropbox... or selfhost something like nextcloud (like I do), which for me is actually a point in its favor.
Based on this news, I think I made the right choice back then when I decided to go with KeePass.
As someone who used to use KeePass, went to LastPass, and then Bitwarden (Vaultwarden), I finally got my non-tech literate wife to use Bitwarden. I’m concerned that KeePass might end up being more difficult if it comes down to it. I believe that KeePass had some sort of browser integration but it really has been a long time since I used it so who knows the current state. Curious how browser integration is today.
The big issue isn't using it, it's syncing it.
User A used KeePass to order pizza and changed the Papa John's(heaven forbid) password while they were at it, on their desktop.
syncing: "oh! This file changed! Neat!"
User B picks up their phone and wants to order Papa John's at work. They try, but the password isn't right. Huh. They check KeePass. No issues. They go to change the password because they think something is wrong.
(All the while, they never thought to see if syncthing had been woken up in the background lately)
They change the password, update KeePass,
syncthing opens later, goes: "Oh, hi, User B's phone! I have a ne- Oh! You have a new password file too!!? Small world! I'll take both!
Now there's two files, two users who think they both made corrections to a password, syncthing thinking nothing is wrong, and someone has to now merge the newer KeePass file over the old ones by hand and realize what happened, but the bigger problem is, no one knows anything is wrong yet and it doesn't even take two users. This can just be you ordering on your phone after modifying on your desktop.
As an example. Imagine an insurance app, or a banking app, or the DMV... And you won't know for months down the line. It gets old.
Vaultwarden is Bitwarden--at least for now, this change may push them apart.