this post was submitted on 27 Mar 2026
287 points (96.4% liked)
Technology
83126 readers
3704 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Get yourself a mini pc or old laptop and control your own future: https://github.com/dani-garcia/vaultwarden
Would love to selfhost. However, I have no trust in my skills to secure my device in the same manner as a provider, and I do not wish my database to be compromised.
Then use Keepass, which is literally just a local app.
I have used KeePass, but Bitwarden is far more convenient when you have different devices
Eh. Bitwarden is better in that way, but not by much. It's honestly not that bad if you just sync the keepass DB somewhere. Whether that's cloud or syncthing.
Bitwarden's apps are where it's a better experience. But there's still somethings about the apps that are very lacking. Like not being able to sort entries.
I easily sync my keepass db across 5-6 devices.
https://lemmy.ca/comment/22453242
There's a plugin that lets you store your database file in the cloud to solve this. Although I only used it for work because I use ProtonPass.
Or want to share a subset of passwords with someone.
Would you be okay with synchronizing only when you're on your own Wi-Fi network? If that's the case, you don't have to try exposing anything to the Internet.
You can also purchase a server online to install it on, but you're going to get saddled with some kind of monthly fee there.
Plus you'll still have to pay at least some attention to security if you get a server.
This might be a good option for you: https://elfhosted.com/
I've had my VPS exposed to the internet for a while and never been pwned. No professional experience. Use SSH keys, not password authentication. Use FDE if physical access is in your threat model. Use a firewall to prevent connection on internal-only ports.
Vaultwarden will store your passwords encrypted (obviously) so even if your database does get stolen, the attacker shouldn't be able to read your passwords without your master password.
If you use Tailscale or Netbird, you can avoid exposing your VPS to the internet completely.
https://lemmy.ca/comment/22449085
I know about Tailscale. I don't use it because I want my VPS to be exposed to the internet; some of my services are supposed to be public. And those that aren't, have their own authentication systems that are adequately secure for their purposes. I just don't need Tailscale so I've not bothered with the setup.
Use Tailscale. Don't expose the port to the public. You're good to go. On iOS, the Tailscale app allows for on demand joining of your Tailscale network (when you're off from your home network for example). This makes it easy. On Android it's not as direct, can use Tasker to achieve this, it's not great. But there's a feature request on their repo too.
Alternatively, there's Netbird which behaves similarly. I haven't tried it, but have read good things about it.
Neither are US based as well if that's a concern for you. Tailscale is Canadian, and Netbird is German. Netbird is completely open source. With Tailscale, the CLI and Android apps are open source, and there's an open source alternative to the control server called Headscale. But honestly, using their free tier is probably enough (for both services).
I never get this excuse except for ignorance (not being mean to you)—you can export your entire db as a text file then encrypt it if you wanted. Also, if your server goes offline its offline first on all devices
I mean that I don't have the necessary knowledge to make sure no one can get into my network and server, and having my entire life thus possibly vulnerable is too risky. Heck, I can't even get Caddy to work properly.
My view on this is that I also do not trust a company to properly secure something so if it's going to be a hack job I might as well attempt it myself!
Understandable! However I'd rather have the provider tell me that they were hacked and my data compromised than me being hacked and never finding out because I have no clue to look 😆
Unless you go out of your way to make it available to the internet, it will only be available on your local network, and you're a much smaller target than the cloud provider.
Right there with you! Selfhosting Vaultwarden would be cool, but I barely know what I’m doing. I trust Bitwarden’s security knowledge and abilities way more than my own.