I selfhost Vaultwarden on my server. I use the Bitwarden client to access my passwords.
this post was submitted on 23 Jun 2026
51 points (98.1% liked)
Technology
85651 readers
3864 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
At least it's just salesforce data and not actual vaults and secrets.
I moved away from these guys a long, long time ago when they started upping subscription costs.
When Logmein acquired LastPass in 2015 I moved to Keepass and haven't looked back. If the word enshittification existed back then it would have applied perfectly.
I went with bitwarden and signs are pointing to them going to shit now.
Maybe it's time for me to keep ass.
keep ass with keepass
What signs are pointing to them going to shit? I don’t exactly keep up on this stuff, but I use their product and it is perfectly fine for me.
Keepass & Syncthing has worked for years without an issue, even though my DB is opened on multiple devices at once. It is rare (once or twice a year) that I have a minor, easily solved sync problem.
Haven't used Lastpass since the logmein deal rubbed me the wrong way, went to dashlane for many years but they had some security scares just recently. now I self host Vaultwarden, which is a bitwarden compatable server.
for maximum security I could have it local only and connect to it via VPN directly, but I put it behind nginx, with SSL, fail2ban with only my IPs whitelisted and a geofilter on top of that. so even if someone did manage to make it to the login page of the admin panel, they'd need a 30 digit passphrase and an email address username that only exists for that one application, get it wrong once and you are blacklisted.
Again? It happens a lot to them.
lastpass is already on my 'stay far away from' list, and have been on it for years:
The Klue supply chain attack was claimed by the Icarus extortion group, who compromised the infrastructure of the AI-powered market intelligence platform and stole OAuth tokens that connected customers' Salesforce environments.
At least someone is finding good use for AI lol