400
Bitwarden Switches to Commercial License (community.bitwarden.com)
submitted 1 week ago* by to c/selfhosted@lemmy.world
149 comments fedilink hide all child comments
 

RyanL Bitwarden Employee

Hello everyone!

Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.

Bitwarden remains committed to open source security and transparency
The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone

If you have any questions, please ask them in this thread. Thanks all!

EDIT:

Bitwarden is not going closed-source
You can still fork Bitwarden
No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden
The free plan is here to stay permanently
you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 1 week ago* (15 children)

Idk how it compares feature wise, but i have been running keepassxc/keepassdx combined with syncthing (or any file synchronization/cloud system) for many years without issues. The entire password manager database sits in one encrypted .kdbx file that you keep synced between your devices. Syncthing is nice because its p2p, so no self-/hosting required.

https://keepassxc.org/
https://github.com/keepassxreboot/keepassxc

https://f-droid.org/packages/com.kunzisoft.keepass.libre/

https://syncthing.net/
https://github.com/syncthing/syncthing

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 15 child comments
    •
  • [–] 7 points 1 week ago (3 children)

    Every single time Bitwarden is mentioned on the internet, someone comes in here and proudly recites the anthem “I have been using Keep ass with sink things”

    It sucks compared to a dedicated extension.

    No autofill No TOTP or 2FA support Doesn’t do passkeys Doesn’t have organizational sharing Doesn’t sync to mobile devices Doesn’t integrate with mobile browsers without trusting some compatible 3rd party app Requires selfhosting your passwords (don’t fuck it up!)

    It’s actually pretty sad that the open source world doesn’t have a better solution for this. I mean I guess BitWarden was it but that’s been stolen by venture capital so

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 15 points 1 week ago

    Both KeepassXC on desktop and KeepassDX on mobile support autofill, passkeys, and TOTP. Syncing to mobile devices is handled by Syncthing (I use BasicSync on Android) and is quite seamless after setup.

    Integration with mobile browsers and other applications is handled by the OS-level autofill service (at least on Android). Trusting a third party app that is completely open source and has a ton of eyes on it? I don't see a problem with that.

    Selfhosting is literally the entire point, since who more can you trust with your most sensitive information than yourself? And even if you don't trust yourself with being able to keep good backups and following the 3-2-1 rule, you're more than welcome to sync with a third party cloud provider of your choosing since the password file is fully encrypted.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 7 points 1 week ago* (1 child)

    Why is it that every time i comment about keepass, its because some web based password manager once again broke, got hacked, or stopped development. Keepass users just stay winning :)

    Also i have been using keepass with TOTP 2FA for years what are you on about?

    Also also, you shouldnt use fido passkeys. Its a failed technology that is worse than what it tries to replace.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 week ago

    There isn’t anything wrong with passkeys that can’t also be made wrong with passwords, and there isn’t anything more secure about passwords, at all.

    Please don’t tell me you took that article that was spammed all over here a few days ago at face value…

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 1 week ago (1 child)

    I had done that for a long time. It worked until it didn't and I lost passwords. I tried again with keepass2android and it's built-in sync. It again worked fine until at some point it wasn't able to sync anymore for no discernible reason. I'd love for this to be a reliable setup, but it just isn't in my experience, at least when there are 3+ devices involved with different clients and no proper awareness of the password manager and the sync sides of each other.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 1 week ago

    I just wish Syncthing didn't have such a convoluted port usage, and also that its Android usage didn't revolve around an unofficial app.

    So I'll stick to apps that do sync over SSH (using FolderSync atm).

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 1 week ago (4 children)

    I used keepass but switched to vaultwarden, i might consider switching back, but is there a good self hostable web front end for a keepass database? (I need to access it on my work laptop and can't install stuff there)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 1 week ago (2 children)

    There is KeeWeb but I am not sure how well maintained it is. This issue is still open. It might be worth contacting your employers IT department instead. Asking for a well known password manager like KeePass shouldn't raise any eyebrows.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 week ago

    I've been using that for a while. I like the control I have in that I understand where everything is stored and encrypted. I miss the way that Google password manager had the autofill for seemingly every page nailed though.

  • permalink
  • fedilink
  • source
  • parent