this post was submitted on 13 Oct 2025
120 points (97.6% liked)

Selfhosted

53057 readers
614 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

One more step to unhitching from Google...

Right now the only option I see in F-Droid is Aegis.

I'm not sure what to actually look for side from checking for unexpected permissions and reasonably frequent updates.

Hopefully something I can sync with a GNOME app...

top 50 comments
sorted by: hot top controversial new old
[–] pipe01@programming.dev 70 points 1 month ago

I use Aegis, it works well

[–] deathbird@mander.xyz 60 points 1 month ago

I like Aegis.

[–] salacious_coaster@infosec.pub 46 points 1 month ago (4 children)

Bitwarden. I don't self host it, though. $10 a year for password management and 2FA is fine by me.

[–] HereIAm@lemmy.world 6 points 1 month ago (1 children)

Same. Self hosting it sounds nice, and I self host a handful of services, but I don't want to be stuck without passwords in another country with a dead server at home because a power cut happened at some point.

[–] gaylord_fartmaster@lemmy.world 19 points 1 month ago (2 children)

Bitwarden caches your vault to your device, so you don't actually need a live connection to the server.

[–] az04@lemmy.world 7 points 1 month ago (1 children)

I had fault in my server this summer and my local bitwarden app wouldn't work without the connection. Same in my laptop, if the connection is blocked by the firewall it doesn't let me load the vault at all.

load more comments (1 replies)
load more comments (1 replies)
[–] TedZanzibar@feddit.uk 5 points 1 month ago

It's niche but I like to point it out whenever I get the opportunity: if your workplace uses Bitwarden Enterprise, every licensed user gets a free family plan that can be linked to any account. I haven't personally paid for BW for years.

load more comments (2 replies)
[–] cmnybo@discuss.tchncs.de 39 points 1 month ago (1 children)

I've been using KeePassXC. I use Syncthing to keep the database synchronized between computers.

[–] synestine@sh.itjust.works 9 points 1 month ago (1 children)

Same here. If it's TOTP based 2fa, you can keep them in entries and use them from there.

[–] 30p87@feddit.org 10 points 1 month ago* (last edited 1 month ago) (2 children)

Tbh, if you're using the same DB for PWs, you've successfully downgraded to 1FA now. Except maybe if you use a seperate KeyStick/Yubikey as secret bearer or smth

[–] hikaru755@lemmy.world 14 points 1 month ago (2 children)

More like 1.5FA, at least. It still protects against passwords being compromised in any way that doesn't compromise full access to your password database, which is still a lot better than using just passwords without a second factor.

load more comments (2 replies)
load more comments (1 replies)
[–] asudox@lemmy.asudox.dev 25 points 1 month ago

I use Aegis on my phone.

[–] spacelord@sh.itjust.works 21 points 1 month ago

Aegis ♥️

[–] Appoxo@lemmy.dbzer0.com 21 points 1 month ago
[–] zingo@sh.itjust.works 20 points 1 month ago (1 children)

Aegis.

I like the auto backup feature (encrypted) . Then the backup is synced to computer via Syncthing.

Set and forget setup.

load more comments (1 replies)
[–] Unlearned9545@lemmy.world 17 points 1 month ago (11 children)
[–] Landless2029@lemmy.world 10 points 1 month ago (3 children)

I'm a little concerned about having OTP and passwords together in one system.

load more comments (3 replies)
load more comments (10 replies)
[–] Curious_Canid@lemmy.ca 16 points 1 month ago

I've been using Aegis for several years now without any problems. It replaced the Google Authenticator seamlessly.

[–] fubarx@lemmy.world 16 points 1 month ago (1 children)
load more comments (1 replies)
[–] bitwolf@sh.itjust.works 13 points 1 month ago
[–] AMillionMonkeys@lemmy.world 12 points 1 month ago

Bitwarden Authenticator because Bitwarden seems to have a good reputation. I don't use their password manager, though.
It does seem faintly insecure that it displays all of the codes at once on one page, but I'm having trouble imagining a scenario where it's actually a problem.

[–] nullpotential@lemmy.dbzer0.com 12 points 1 month ago
[–] retro@infosec.pub 10 points 1 month ago (1 children)

Proton Authenticator. Has both Desktop and Mobile apps. Free. Don't have to sync to Proton.

[–] hanrahan@slrpnk.net 4 points 1 month ago (1 children)

Do they have a Linux client for the desktop?

[–] retro@infosec.pub 6 points 1 month ago (1 children)
load more comments (1 replies)
[–] poccalyps@sh.itjust.works 10 points 1 month ago

2FAS Authentication

[–] gagootron@feddit.org 9 points 1 month ago

Yubikey. I dont want to trust my phone, so I use some separate hardware instead

[–] Cyberflunk@lemmy.world 9 points 1 month ago (1 children)
[–] BingBong@sh.itjust.works 4 points 1 month ago

Definitely this, especially if you'll be sharing with a non techie. My wife was able to pick 1password up and use it immediately and she normally turns her nose up at any of my recommendations.

For the 1password accounts 2FA, use a yubikey or aegis. Everything else to 1 password.

[–] sbeak@sopuli.xyz 9 points 1 month ago

Aegis seems like a pretty good 2FA app on Android from what I’ve heard. Personally, I use Ente Auth as sync is very helpful when I don’t have my phone nearby (you can either use the desktop app or use your browser, both work). Don’t think you can self-host sync, though I might be wrong. Ente Auth also works without sync, so there’s that.

I would not suggest using a password manager’s 2FA integration (e.g. Bitwarden, I think Proton Pass has one if you use that?) as it kind of defeats the point of 2FA, since if someone got access to your password manager, they would also get the 2FA codes.

[–] ClydapusGotwald@lemmy.world 9 points 1 month ago (1 children)
[–] blackbarn@lemmy.zip 8 points 1 month ago

Vaultwardwn/bitwarden + a yubikey for bitwarden itself and a few others

[–] vrighter@discuss.tchncs.de 7 points 1 month ago

keepassxc and a yubikey. And syncthing to keep all devices in sync

[–] lka1988@lemmy.dbzer0.com 7 points 1 month ago

I use Aegis, automatically backed up every time a new key is added. Was using Authy for a while, but they're going down the enshittification hole, so I dumped them.

[–] Undaunted@feddit.org 6 points 1 month ago

Yubikeys. I have 2 of them and both have the same entries in case one breaks.

[–] slazer2au@lemmy.world 6 points 1 month ago

Authenticator and Authenticator.

Damn thoe innovative tech companies, what will they think of next.

[–] julianwgs@discuss.tchncs.de 5 points 1 month ago

I use Proton Authenticator on an iPhone without an account and I am satisfied

[–] ohshit604@sh.itjust.works 4 points 1 month ago* (last edited 1 month ago) (7 children)

Yubikey for 2Fa codes also works well for sudo and su (2Fa) or if you still use Windows I think it supports single sign on there. Absolutely worth the purchase have had my keys for years.

load more comments (7 replies)
[–] erev@lemmy.world 4 points 1 month ago

Bitwarden as Vaultwarden enables TOTP.

[–] example@reddthat.com 4 points 1 month ago

FreeOTP/FreeOTP+

depending on your goal for this (real 2fa vs just simulated) you shouldn't have sync in the first place.

you could also look into security keys (hardware solution, webauthn/FIDO2) as an alternative that has strong security with good user experience (no typing anymore), but they're not as widely accepted.

[–] BruisedMoose@piefed.social 3 points 1 month ago

Adding to the Aegis chorus.

I also use Proton Pass for some sites that aren't as critical for me / don't have a bunch of PII. It's easy.

[–] maxwellfire@lemmy.world 3 points 1 month ago (2 children)

I use bitwaarden and stratum since it has a wearos app as well and it's nice to use that for 2fa codes

load more comments (2 replies)
[–] arox@lemmy.frozeninferno.xyz 3 points 1 month ago

What you mean syncing with Gnome app?

[–] nickiam2@aussie.zone 3 points 1 month ago

Yubikey. It supports TOTP as well as passkeys. Plus is a physical device separate from my phone. Recommend getting 2 to have 1 as backup

[–] Redex68@lemmy.world 3 points 1 month ago* (last edited 1 month ago)

I personally use Ente Auth and quite like it, don't use syncing and save an encrypted copy to my PC. I really like that you can see what the next code will be.

load more comments
view more: next ›