this post was submitted on 13 Dec 2025
-25 points (26.4% liked)

Selfhosted

61103 readers
609 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

So I'm using bit warden self hosted and now I'm freaking out about the very real possibility of my passwords getting stolen or lost in a fire. Having passwords on my phone makes no sense.

We need some sort of distributed password manager safety net. Like I keep your passwords safe if you keep mine. But how can I trust you? Can you trust me?

you are viewing a single comment's thread
view the rest of the comments
[–] BCsven@lemmy.ca -4 points 7 months ago* (last edited 7 months ago) (1 children)

Just takes a brute force or 0 day vulnerability to get master password access, then they have everything.

Something that seems secure never is online, like the 2017 Intel managetment vulnerability where remote attackers could access your computer by sending a null password, and access your keyboard and camera etc

[–] hummingbird@lemmy.world 1 points 7 months ago (1 children)

That's why tools like keepass allow you to require more than just a password to decrypt.

[–] BCsven@lemmy.ca 1 points 7 months ago

Yes 2FA is good, but most people default to their phone being the tool, but your phone number can be ported by scammers, or is often the target of theft