28
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 10 Mar 2026
28 points (88.9% liked)
Selfhosted
60831 readers
945 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
Aegis + syncthing for remote backups
This. Aegis does all of the points except offsite backups. And for good reason.
The Aegis app has no network permissions at all, which is obviously a massive boost for security and privacy. And besides, off-device backuping is a nightmare.
Syncing the Aegis backups made on change to some other server is better handled by a great dedicated app. Syncthing is the best such program (by far), though for the few files involved here nextcloud would work just as well.
I second Aegis. You can drag icons and rename tokens. You can also sort by a to z, last used, usage count, etc. Aegis supports automatic backups and can export plaintext or encrypted backup files, after which you can transfer them to other devices however you transfer other files from your phone.
The backup files work with Aegis and with several independent desktop apps depending on your OS of choice. While I haven't looked into it, that suggests that the encryption method isn't something homebrew.
As far as #6 goes Aegis doesn't try to save my passwords, encourage me to use passkeys, or suggest AI solutions. Magic bullshit is a vague qualifier, but I think Aegis is thaumaturgically inert. The 'icons' are just the first letter of the name of the token issuer by default.
The more-than-one-year lifetime is a problem with anything, including plenty of Google projects. There are over 60 contributors on github, so that's something.
Print out all the QR codes on a sheet of paper and keep them secure in a fire safe. That's really the best way to keep them backed up and secure.
until you need to update them, or when you need recovery when travelling
If you need to update them, you just reprint and replace.
If you need to recover on the road, well that depends on your risk tolerance. I'm never away from home so long that it's a problem, and pretty much every service has a way to bypass 2FA in case of emergency.