this post was submitted on 15 May 2026
1023 points (99.5% liked)

Technology

84733 readers
3826 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

I find this move concerning, and wish that the Founder had looked for a new CEO that shared his values rather than a Private Equity and Mergers Expert.

Furthermore, the change to the GRIT motto is worrying. Trust is useless without Transparency when it comes to code and security.

you are viewing a single comment's thread
view the rest of the comments
[–] one_old_coder@piefed.social 278 points 2 days ago (3 children)

Is it that time when I say "oh shit!" and starts to look at alternatives? I've seen this scenario a hundred times already and I'm tired.

[–] Godort@lemmy.ca 113 points 2 days ago (2 children)

I don't have the patience to switch to alternatives until they make a change that actually affects the usability of the tool.

This is absolutely a red flag though.

[–] akilou@sh.itjust.works 1 points 15 hours ago

It takes a full 3 minutes to try an alternative. Export, install new one, import. Install extensions where you need them and sync.

[–] Quacksalber@sh.itjust.works 67 points 2 days ago (1 children)

Just FYI, you can export your Bitwarden database to plain text and import that with KeePassXC

[–] alakey@piefed.social 19 points 2 days ago

All the attachments, though... man this is going to be such a pain :/

[–] YurkshireLad@lemmy.ca 58 points 2 days ago (6 children)

Same question here. What are the best alternatives?

[–] zikzak025@lemmy.world 89 points 2 days ago (5 children)

KeePassXC is the best FOSS option, but you'll need to figure out self hosting if you want to sync the database between devices.

[–] M1k3y@discuss.tchncs.de 36 points 2 days ago (2 children)

As the database is encrypted in your device, you dont really need to self host. A keepass database in the Google cloud is not really problematic, although you should still choose a more private cloud provider.

[–] Quetzalcutlass@lemmy.world 6 points 2 days ago

And you can use a keyfile separate from the database for even more security. If the database is backed up on Google Drive and the keyfile is saved on a USB or in a (non-Google) email somewhere for the rare times you add a new device, your passwords should be safe even from keyloggers or Google themselves.

[–] eager_eagle@lemmy.world 5 points 2 days ago (1 children)

make sure to use post-quantum encryption algs

[–] victorz@lemmy.world 3 points 2 days ago* (last edited 2 days ago)

Which algs would that be? ed25519 okay? Is that even an encryption alg? I'm not too hot with encryption.

[–] Wildmimic@anarchist.nexus 6 points 2 days ago (1 children)

or use syncthing, no hosting experience required

[–] stephen01king@lemmy.zip 2 points 2 days ago (1 children)

Syncthing on the phone seems to use up a lot of battery, though.

[–] michaelalf@lemmy.world 3 points 1 day ago

If you don't need real time sync you can disable background use of the app. That's what I've done, and I just open the app when I need to update. Probably a smarter way to do it, but it works for me.

[–] Cethin@lemmy.zip 1 points 2 days ago

It doesn't need to be complicated. I use syncthing to synch them. It's pretty trivial. You just tell it what folders to synch, between which devices, and it'll synch whenever it's running.

post-quantum encryption algs

I use the built in ftp sync option with any file explorer that makes an ftp server on my phone.

[–] tremble5218@programming.dev 1 points 2 days ago* (last edited 2 days ago)

I found the easiest way to sync is to use rclone. This way you can use any cloud provider like Google Drive or OneDrive or DropBox. First create the rclone remote for your cloud provider using rclone config. Second step is to create a second remote using the encryption option (menu item 16), choosing an appropriate path <first remote>:<path to directory>. Upload your KeepassXC database to this encrypted remote using rclone copy.

On Android you can use the RoundSync app from F-droid to configure the the same remotes, then create a task to copy or sync from that encrypted remote and a trigger to run that task on a schedule. Overall, this one-time setup works really well for me. This is my backup in addition to using Bitwarden for several years. Bitwarden is not going to get my money any more.

[–] IcedRaktajino@startrek.website 34 points 2 days ago* (last edited 2 days ago) (2 children)
[–] refract@lemmy.zip 22 points 2 days ago* (last edited 2 days ago) (1 children)

But you still use the official BW client apps, correct?

Unless you forego usage of the clients and access Vaultwarden through the browser (removing accessibility and convenience especially on mobile), it is not an e2e replacement solution.

Are there any alternative FOSS clients/apps that work with Vaultwarden?

Edit: I see further down that the official client is open source, and would get forked in the event of any fuckery. So I'm sticking with Vaultwarden + Official client app approach for now.

[–] IcedRaktajino@startrek.website 4 points 2 days ago (1 children)

I just use the webapp UI and don't bother with the clients/extensions. Easy enough to just log in, copy/paste from there.

But yeah, the official client (and probably browser extension as well) would probably be forked if/when needed.

[–] napkin2020@sh.itjust.works 3 points 2 days ago

What about passkeys?

[–] h54@programming.dev 20 points 2 days ago (1 children)
[–] Joelk111@lemmy.world 16 points 2 days ago (1 children)

I'm pretty sure that isn't self hostable.

[–] h54@programming.dev 2 points 2 days ago
[–] jtrek@startrek.website 15 points 2 days ago

I use keepassxc. It does the job.

[–] Resonosity@lemmy.dbzer0.com 3 points 2 days ago

KeePassXC + Syncthing to sync passwords across devices

[–] xnx@piefed.social 4 points 2 days ago

Alias vault seems the most feature complete and self hostable https://www.aliasvault.net/

[–] ColeSloth@discuss.tchncs.de 7 points 2 days ago (1 children)

Sigh. This will be a huge pita. I have probably over 100 things saved into bitwarden. Where's a good foss alternative.

GabeN, please don't die before me.

[–] Appoxo@lemmy.dbzer0.com 5 points 2 days ago

Cute. A hundred items :p /j