For example, something that is too complex for your comfort level, a security concern, or maybe your hardware can’t keep up with the service’s needs?

  • Karcinogen@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    84
    arrow-down
    4
    ·
    1 year ago

    Password manager like Bitwarden. I’d rather they take care of it for me. The consequences would be too great if I messed it up.

    • apprehensively_human@lemmy.ca
      link
      fedilink
      English
      arrow-up
      17
      ·
      1 year ago

      Smart move, unless you really know what you’re doing and have redundancy. When I first made the switch from Lastpass to Bitwarden I had tried to host the vault myself instead of using the cloud version, which worked fine right up until the moment I had a server outage and lost access to all my passwords.

      • somedaysoon@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        ·
        edit-2
        1 year ago

        I’ve managed to keep my KeePass database for almost 20 years going back as far as when I was a dumb teenager. Back then it was as simple as having a couple extra copies on usb drives and Google Drive, but now I keep proper backups.

        My take is, I’d rather control it myself, I am responsible enough to take care of my data, and I actually wouldn’t trust someone else to do it. That’s a huge reason I selfhost in the first place, a lack of trust in others’ services. Also, online services are a bigger target because of the number of customers, and maybe even the importance of some of their customers, whereas I’m not a target at all. No one is going to go after me specifically.

        • SocialDoki@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          8
          ·
          1 year ago

          I think that’s what’s kept me at KeePass rather than moving to something like Bitwarden. Since it’s file-level encryption, anything that can serve files can also serve my KeePass database. When I upgrade servers or change to different services, restoring my database is as simple as throwing the file into that new service and going on with my life.

          • somedaysoon@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            edit-2
            1 year ago

            Yeah, my recommendation is basically this:

            Do you need to share passwords?

            No - use KeePass

            Yes - use Bitwarden

      • bdonvr@thelemmy.club
        link
        fedilink
        English
        arrow-up
        13
        ·
        1 year ago

        Eh, the clients all cache your vault. It shouldn’t be a huge issue for it to be down even for a few days.

        But I do upload encrypted backups of the server every 6 hours to cloud storage

        • Engywuck@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          1 year ago

          Same.

          Plus, my instance is proxies through Clouflare and only IPs from my country are allowed.

    • ChrislyBear@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      2
      ·
      1 year ago

      Oh man, that’s actually really good advice! I recently switched to Vaultwarden, but you’re right: If my server goes down, I can’t even restart it, because the password for my account is in there! Damn! Close call!

      • Limit@lemm.ee
        link
        fedilink
        English
        arrow-up
        17
        ·
        1 year ago

        Well with bitwarden/vaultwarden you can have a copy of your entire vault on your phone or computer or both… so even if your server was totally dead, you’d have access to your passwords. Solid backups is a must, I follow the 3-2-1 rule on super critical systems (like vaultwarden) and test that you can actually recover. Something as simple as spinning up a VPS, testing a restore, testing access, see if that could work in a pinch until you get your server back online, then tear it down. Linode is very cheap for this kind of testing, it’d only cost you a few pennies to run a “dr” test of your critical systems. Of course you still want to secure it, I’d recommend wireguard or tailscale instead of opening access to your DR node to the internet, but as a temporary test it’s probably fine if your running patched up to date versions of docker, vaultwarden, and I’d always recommend putting a reverse proxy in front like nginx.

      • newIdentity@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        1
        ·
        1 year ago

        Usually the password are also stored locally.

        I can definitely access all my passwords offline with bitwarden

    • rglullis@communick.news
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 year ago

      I still don’t get why people want to have cloud-based password managers. Keepass works in all major platforms, it’s just one file, which it is super easy to sync and/or merge. It can integrate with your browser/Os if you want, but otherwise the surface attack is basically zero.