In the latest episode of “they will always sell you out” - they sold you out! Who would’ve thought.
Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can’t exist without “leeching” off of Bitwarden.
In the latest episode of “they will always sell you out” - they sold you out! Who would’ve thought.
Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can’t exist without “leeching” off of Bitwarden.
Jesus, I’m tired of switching password managers.
I just got Bit warden this year! Gah. Where are we jumping?
Vaultwarden
Vaultwarden relies on Bitwarden existing.
Not really. Convenience relies on the app and browser plugin, but they could be recreated like the server was.
That would be quite nice to see.
KeePass
KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there)
I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor.
Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups.
Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW.
I’ve been using KeePass with Syncthing for 5+ years now and I think I’ve only had a sync issue once in all this time.
Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I’m using XC and DX clients not the OG KeePass program.
I’m curious what is causing sync issues to make it “common”, I use my db every day.
It’s really not that much of an issue. I sync my database between several devices, some of which are only used occasionally. Rarely do I ever have a merge conflict.
If you’re editing the database on multiple devices before they have a chance to sync with each other, maybe stop doing that. That’s what causes merge issues.
I use KeePass with KeeAnywhere. KeePass can natively sync over network share, FTP, or WebDav. With plugins, it can sync over SSH, FTPS, Amazon S3 compatible buckets (including open source compatible versions you host yourself), Azure, Box, Dropbox, Google Drive, OneDrive, and more.
That’s a neat one, although it doesn’t look like KeePass supports passkeys yet, at least I don’t see it in the feature list.
Are you trying to use a passkey to unlock the database or for authenticating with other websites? KeePass can natively do TOTP. There’s also plugins to do that. Including one that allows KeePass to be a native Windows 11 PassKey Provider.
For other websites, if I search for ‘passkey’ on the KeePass website feature list nothing comes up. Plugins in a password manager sketch me out a bit tbh lol
See here: https://keepass.info/help/base/placeholders.html#otp Also worth pointing out that most plugins are open source. You can read the source and compile them yourself, if you’d like.
This is for OTP not Passkeys it seems?
How do you go about loading plugins on the Android version for sync with your setup?
I don’t usually use plugins on the Android version. I don’t use the Android much, actually, just due to my use patterns. There’s actually several different KeePass Android apps. KeePass is open source and the database format is documented. So anybody can make a program that uses the same database. The one I use is Keepass2Android, seems to be one of the popular ones. Looks like it also can natively generate TOTP. Apparently it has some sort of plugin system, but I’ve never needed to use it because it can pull my password database out of my Google Drive natively.
You need to specify what kind of passkey to be more specific. There’s several different algorithms. HOTP and TOTP are very widely used. It’s what Google Authenticator and the like use. If you have something very proprietary, like the old RSA keys, that probably can’t be emulated by any software. Or they could, but you can’t get the secret to be able to do that.
XC is really nice, but the devs are kinda dicks about not integrating some sort of syncing option, instead telling everyone who asks to “just point it to a local folder and use <insert sync tool of your choice> to keep that folder updated.” Which isn’t terrible advice, but some of us don’t have that option on managed devices.
I ended up using Keepass2Android and just pointing it at my webdav server, it seems to work pretty well!
On desktop it’s already taken care of since I put the DB in my folders that already sync via Syncthing.
I love K2A, been using it for well over a decade now. I really should toss the dev some cash… They’ve kept the UI consistent for years.
KeePass isn’t going anywhere. They’re also dragging their feet on passkey support, so you might go with KeepassXC.
They also don’t effectively allow collaboration though, which is my cheif reason for using a cloud hosted password manager.
What is “collaboration” in this context?
Sharing passwords between groups of people so everyone always has the up to date version. Not breaking the world if two people try to modify the same entry as some file syncing solutions do.
Hmm, interesting, though isn’t that a fault of the organization not having an account-linking system so that each person could have their own credentials but can still access the unified content? This workaround seems… flimsy, unless I’m not picturing a legit scenario in which no other method is as good, or something.
It’s the fault of my family organization or every company we use that my parent’s bank, Google, phone, laptop, etc don’t allow more than one set of credentials to access the same thing?
It’s not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account?
Wait, I don’t understand. Why do you need to do so much account-sharing? I never had half of that… and if connecting is just once in a blue moon, then it shouldn’t need something like group creds anyway, right?
I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager.
I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn’t want to manage (I can change the Snowflake password but they can still login).
I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does.
Sure they do. Multiple people can have a file open at the same time. I use it for exactly this every day at work.
With KeePassXC, that is. I don’t know if other flavors have different support. I use XC primarily for the browser extension.
And you can both modify the same things without causing horrible conflict issues? And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between? I’m assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can’t edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn’t allow this.
Yes, no conflicts. I don’t know if you can only share part of vault; I just created a separate one for a separate team.
I wouldn’t put it in Google Drive or anything like that. The separate sync logic will definitely cause conflicts.
I’m not worried about having access if I’m offline, because if I’m offline I’m not going to be able to log into anything anyway.
I guess a laptop, server, IoT device, or WiFi connection when your main device doesn’t have internet is out of scope for you?
Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online?
And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn’t that necessitate some syncronization logic?
It’s hosted on a local network share, so we don’t need Internet access.
If can’t copy paste, I just type it out.
We use a VPN to the office.
KeePass isn’t meant to be used that way. It’s a personal password manager. Always has been.
Valid. But it’s also valid that it now doesn’t work for me or anyone who also helps manage other people’s lives or works on a team ¯_(ツ)_/¯
Gotta use the right tool for the job. Sorry KeePass doesn’t work for you. It really is a fantastic piece of software.