301
Bitwarden 100% price increase (www.fastcompany.com)
submitted 5 months ago by to c/technology@lemmy.world
139 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 142 points 5 months ago (44 children)

20$/year is still cheap compared to other password managers, but yeah, the lack of transparency is worrying.

  • permalink
  • fedilink
  • source
  • hideshow 44 child comments
    •
  • [–] 27 points 5 months ago (43 children)

    Keepass is free?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 43 child comments
    •
  • [–] 74 points 5 months ago (6 children)

    Thing is, a large percentage of internet-connected users might have two or more devices. The simplicity offered by a cloud (be it hosted or selfhosted) password manager is a huge benefit.

    And unless you're already running a syncthing-like service for something else, setting it up just for a password manager when other services provide it out of the box, is not worth the hassle usually.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 10 points 5 months ago* (3 children)

    Everyone has some kind of cloud service tho no? The database is encrypted so you can even sync it over googles cloud storage if you dont have nextcloud or syncthing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [+] 0 points 5 months ago (2 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 11 points 5 months ago* (last edited 5 months ago)

    What? I think you dont understand at all how this works. The database of any password manager is an encrypted file. When you open your password manager and type in the master password it opens that file and decrypts its contents for you and only saves them to memory. It doesnt actually decrypt the file on the drive. When you close the application it doesnt need to be encrypted again. This is exatly the same for all password managers, the only difference is that with web based ones the database file sits on bitwardens server instead of on your harddrive. You are just changing the location of the database, nothing else. Keepass also automatically saves a backup version of the database to a location you can specify and even if you dont you still have better redundancy than with bitwarden because the file sits both in your cloud storage and on each of your devices.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 5 months ago

    I use KeePass on like.. I dunno 5-6 devices? They all sync together via Syncthing. No server needed. My keepass db is just one of the things synced this way.

    Works pretty well.

    These are the apps I use:

    Desktop (Linux & macOS): KeePassXC Andrdoid: KeePassDX iOS: KeePassium

    The whole ecosystem can be used for free. But like.. tip your open source devs yo.

    Syncing happens pretty quickly with Syncthing. So conflicts in the keepass DBs are very rare (maybe once a year if I'm impatient after a change on a different device). But they do happen, I'll give you that. Some restraint (wait for sync) and checking (this is where sorting by modified helps!!!!) what's the latest change helps.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 27 points 5 months ago (5 children)

    IMO Keepass and Bitwarden aren't exactly the same, as the latter has cross-device sync built-in.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 5 months ago* (4 children)

    I use one for work and the other for personal. They are both great, with slightly different convenience/security tradeoffs imo. Big fan of both, don't know why it has to be one or the other for an OSS credentials manager

    Edit: part of what you're paying for with BW is first-class native apps

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 5 months ago (2 children)

    Big fan of both, don't know why it has to be one or the other for an OSS credentials manager

    20 bucks are kind of a reason tho?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago

    It is a reason, and a fine one. I certainly don't pay for a subscription for my work stuff. I've told them we should have enterprise secrets management and shown them what that looks like. Not my problem anymore, and I have KeePassXC to handle everything I'm responsible for for work

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 5 months ago

    Big fan of both, don't know why it has to be one or the other for an OSS credentials manager

    On an individual level, you only need one or the other. But which one is best for you may be different than which one is best for me.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 5 months ago (25 children)

    I can't think of a reason to choose Keepass over Vaultwarden.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 25 child comments
    •
  • [–] 8 points 5 months ago (1 child)

    If you can't selfhost, then you can have your keepass file in your personal cloud. Many basic cloud services are free and the password file itself is encrypted so the cloud provider can't access your passwords.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 5 months ago* (last edited 5 months ago) (7 children)

    (Edit - I misread as Bitwarden and went off on the wrong tangent. Vaultwarden is not centralized, and it's FOSS - my bad.)

    The person you're replying to already gave you one: it's free.

    Second: its not a prime target for attack like centralized, hosted webservices are. See: LastPass being cracked and people's login data stolen.. Twice.

    Yes, it is cryptographically superior to LastPass, and attempts to design around their flaws - but the threat still exists because its a very tasty target on the open internet for cybercrime.

    My little Keepass DB synched over personal VPN by Syncthing? Much harder to find a vector for attack. But it does require more moving parts and maintenance.

    Each have their pros and cons.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 6 points 5 months ago (1 child)

    Vaultwarden, self-hosted is free as well. And since it's not using the Bitwarden infrastructure, you're only as exposed as your own network anyway.

    But you can still use all the standard Bitwarden apps and extensions on any device, you just need to point it at your server. Easy to set up for friends and family as well. No need to try and teach them about VPNs, setting up syncthing, etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 5 months ago (6 children)

    I can.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 2 points 5 months ago (5 children)

    I realise now that I can think of one too. Which is that you don't need to host it anywhere if you use something like Syncthing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 5 months ago (3 children)

    Also available offline, all the time in your hands.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 5 months ago (2 children)

    Bitwarden works offline. Obviously can't save to the server, but reading from what's already on your local machine works just fine.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (1 child)

    Isn't it easier then just to use a (keepass) file? Also we carry phones around where we need secrets, too etc.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 5 months ago

    I use keepassXC for work and I only use it on one machine at a time. I don't have any experience syncing it around to multiple devices, so you might have a better perspective than I do on that.

    For personal use, I self host vaultwarden and use it on my desktop and Android phone. I'm able to use the bitwarden app just fine on my phone, even when I turn on airplane mode and am unable to sync.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 5 months ago*

    I set up a simple sync service with FolderSync (similar to Syncthing) on Android for my family, that preserves their mobile files on a server hosted SMB share. Haven't even looked at storage encryption though. You can't underestimate a simple yet effective solution, sometimes so simple it flies under the radar.

  • permalink
  • fedilink
  • source
  • parent
  • [–] -3 points 5 months ago* (last edited 1 month ago) (7 children)

    This comment should be deleted soon

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 2 points 5 months ago (5 children)

    Shared passwords

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [+] 0 points 5 months ago* (last edited 1 month ago) (4 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 5 months ago* (last edited 5 months ago) (3 children)

    Not really and not nearly at the same level

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [+] -2 points 5 months ago* (last edited 1 month ago) (2 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 5 months ago (2 children)

    so is bitwarden. i dont get your argument here. bitwarden does a lot more for free than keepass

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •