Hey my @1password plan is up for renewal.

[scott@sfba.social]

Hey my @1password plan is up for renewal.

Can you good folks remind me of your preferred alternatives?

Ideally:

- Mac and iOS integration
- “family” sharing of items
- Not hosted on AWS, Azure…
- Established security (eg, not some random FOSS project that only one person has ever tested)

(I asked this question a couple months ago but somehow lost my bookmarks and tabs… ‍️ I promise to take notes this time!)

#AskFedi #privacy #passwords

[britt@mstdn.games]

@scott I know this is going to sound cliche, but have you considered Proton Pass? I know they don’t use AWS (or other third party providers) and are based in Europe.

[viss@mastodon.social]

@scott ive been using 1pw since 2011. once they started forcing people into the cloud, i quit upgrading. its now been so long that its kinda untenable, and im tired of trying to run 1pw4 in wine on ubuntu to make it work. i cant sync with my phone anymore either.

so far as i can tell, using bitwarden clients, and vaultwarden locally hosted as a backend seems to be the next best thing. i havent deployed it myself though, but an incus container with vaultwarden seems like the way

[scott@sfba.social]

@britt Thank you! Had not heard of it, so it doesn’t sound cliche to me.

I will check it out.

Proton was in the news recently for disclosing a lot of user metadata in response to subpoenas (or something) so I am pre-biased against them, but I will still take a look. :)))

[scott@sfba.social]

@Viss This is great, thank you.

So IF I were open to self-hosting (not sure I trust myself to do that properly yet), I could use VaultWarden (server) and BitWarden (clients) for free (other than hosting costs), right?

[viss@mastodon.social]

@scott exactly. you could, for example, light up a podman or docker or incus at home, spin up vaultwarden in that - or just run vaultwarden on some server internally, doesnt even need to be a container, and it exposes an api - the bitwarden clients get aimed at that api and bam - now you got a central repository

https://github.com/dani-garcia/vaultwarden

the github repo says that it'll support organizations, which suggests you can attach family to it too!

[douglasvb@m.ai6yr.org]

@scott @1password For what it's worth, I'm using KeePass.

[txtechnician@mastodon.social]

@scott @1password

Vaultwarden (FOSS implementation of Bitwarden that has Bitwarden's blessing). I use it and like it.

KeepassXC KeepassDX
FOSS local password manager. Sync the database using any sync or cloud service. Been using it for 5 years. Solid and simple.

I use vaultwarden for customers and family. But I use KeePassXC for all of my companies passwords.

Mostly just because I never want to worry about network connection to get my db. VW, when used with a bitwarden app 1/2

[txtechnician@mastodon.social]

@scott @1password VW db syncs locally to a bitwarden app (official BW apps work with VW).

Which is available offline, cus its synced locally with the server.

And that's great. But that only works if my BW app is active on that device. And some of my devices don't get touched for weeks. So the BW app wouldn't sync in the background.

But my KeePass DB is always synced.

[monkeyninja@10base2.dev]

@scott Are you looking for something that doesn’t use one of the big cloud providers or something that doesn’t use *any* cloud services?

For zero cloud, If you’re comfortable with the self-hosting, BitWarden seems to be what most of the folks I know are using.

If you’re okay with cloud services that just aren’t AWS, Azure, or GCP, then Proton Pass is pretty great and you get it packaged with the paid Proton mail services which is convenient.