Bitwarden Switches to Commercial License

2 days ago by Mustachius_Grumpius to c/selfhosted

RyanL Bitwarden Employee

Hello everyone!

Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.

Bitwarden remains committed to open source security and transparency
The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone

If you have any questions, please ask them in this thread. Thanks all!

EDIT:

Bitwarden is not going closed-source
You can still fork Bitwarden
No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden
The free plan is here to stay permanently

Lettuceeatlettuce 144 points 2 days ago

Well, we all know how this ends...

It's a really sad day for me, I love Bitwarden, it's easily the best password manager I've used, and I'm in IT, I've used a bunch.

Fuck private equity, fuck it to death. But until then, I'll be moving my test setup for KeyPassXC into production over the coming weeks and months.

I was happily subscribed to Bitwarden for years for my personal account, I moved several people and a whole company onto it's platform. We had a good run, time to move on.

path: 0 26267260, hotness: undefined, score: 144, children: 23

nibbler 27 points 2 days ago

why not vaultwarden?

path: 0 26267260 26267842, hotness: undefined, score: 27, children: 20

Lettuceeatlettuce 38 points 2 days ago

If I'm going to have to host my own infrastructure, I don't want it tied to Bitwarden, given the new direction of the company.

I fully support Vaultwarden though, and I wish them well.

I'll be going with KeyPassXC and Syncthing.

path: 0 26267260 26267842 26269774, hotness: undefined, score: 38, children: 0

lemmyvore 22 points 2 days ago

Vaultwarden (and all the client apps) depend on Bitwarden for the API spec. If Bitwarden introduces closed features in the API that Vaultwarden can't/won't implement, but the client apps do, it will split the spec. They can also introduce API license keys, which would render Vaultwarden mostly irrelevant.

The only way for Vaultwarden to remain relevant going forward is to own it and split ways from Bitwarden. This would in turn mean that the FOSS client apps have to decide which to support. But I think the ecosystem is going to fragment eventually anyway, so the sooner every app decides which way they want to go, the better.

path: 0 26267260 26267842 26270433, hotness: undefined, score: 22, children: 8

ryannathans 5 points 2 days ago

Or you could just fork it when there's a problem

path: 0 26267260 26267842 26270433 26271221, hotness: undefined, score: 5, children: 7

Natanox 19 points 2 days ago

Sounds like you're volunteering to do that additional amount of work.

path: 0 26267260 26267842 26270433 26271221 26271433, hotness: undefined, score: 19, children: 6

altphoto 8 points 2 days ago

I'm. Using Vaultgarden but its not clear if the Android app will still be available.

path: 0 26267260 26267842 26268467, hotness: undefined, score: 8, children: 9

pogmommy 13 points 2 days ago

I've been very happy with Vaultwarden+Keyguard

https://keyguard.dev/

path: 0 26267260 26267842 26268467 26269009, hotness: undefined, score: 13, children: 7

nibbler 5 points 2 days ago

But that's not Foss, so I didn't consider it

path: 0 26267260 26267842 26268467 26269009 26269336, hotness: undefined, score: 5, children: 3

dustyData 3 points a day ago

It currently doesn't work with Vaultwarden. The Linux client doesn't accept custom certificates. And the Android client is paid. It is a dead-end for self-hosting.

The license is also stupidly a single sentence. Which means that use could be nuked at any minute, and any money you use to pay the developer means nothing. If they wanted to kill the project today and nuke the repo, you have no legal rights, the project dies and fuck you and your passwords. That doesn't exactly inspires confidence.

path: 0 26267260 26267842 26268467 26269009 26280898, hotness: undefined, score: 3, children: 0

artwork 1 point 2 days ago

Thank you very much for the awesome project mentioned! I had no idea about it!
The marvel works great with Vaultwarden, too, it seems!

Though, Bitwarden system/clients are not so featureful as KeePassXC, for example, it's a great alternative for a more adequate synchronization.

path: 0 26267260 26267842 26268467 26269009 26273031, hotness: undefined, score: 1, children: 0

roofuskit 1 point a day ago

Awesome!

path: 0 26267260 26267842 26268467 26269009 26274073, hotness: undefined, score: 1, children: 0

nibbler 2 points 2 days ago

There will be... Some fork at least

path: 0 26267260 26267842 26268467 26269340, hotness: undefined, score: 2, children: 0

1984 2 points a day ago

100% but move where? I'm not going to self host something this critical. KeypassX is so much worse. I can't even use it on mobile probably.

path: 0 26267260 26274959, hotness: undefined, score: 2, children: 1

sonstwas 7 points a day ago

You can use KeePass on mobile, look for KeePassDX on fdroid.

path: 0 26267260 26274959 26277180, hotness: undefined, score: 7, children: 0

Pika 47 points 2 days ago

I guess we're gonna see more open-source apps soon, aimed at Vaultwarden first

path: 0 26265172, hotness: undefined, score: 47, children: 0

teezeh 33 points 2 days ago

@Mustachius_Grumpius “The GPLv3 OSS licensed version continues to be updated and published on GitHub

All current features are available in both versions

License details are on GitHub

Bitwarden remains committed to a robust, free forever plan for everyone”

path: 0 26263665, hotness: undefined, score: 33, children: 14

badgermurphy 86 points 2 days ago

Unfortunately, there is no historical example where this hasn't turned predatory. It's a tale as old as venture capital has been in software development:

get free contributions from altruistic people donating their time and expertise to your FOSS project that you're selling
make a closed-source set of extensions as optional dependencies
slowly diverge the closed source feature set to include developer and user "must-haves" you do not contribute upstream
slow or functionally halt open source contributions

It is an oft-repeated long con to pull off a mass heist of donated skill and time while imposing vendor lock-in on your users through a back door.

"As the poison spread through his body, the frog cried out, “Why did you sting me? You have killed us both!”

The scorpion replied, “I couldn’t help it. It’s my nature.”

path: 0 26263665 26265635, hotness: undefined, score: 86, children: 2

lntl 28 points 2 days ago

Embrace
Extend
Extinguish

path: 0 26263665 26265635 26267934, hotness: undefined, score: 28, children: 0

baatliwala 10 points 2 days ago

I swear most of Grafana's new features are enterprise only now

path: 0 26263665 26265635 26268219, hotness: undefined, score: 10, children: 0

Mustachius_Grumpius 59 points 2 days ago

yeah but its typical double speak

path: 0 26263665 26263666, hotness: undefined, score: 59, children: 3

surewhynotlem 6 points 2 days ago

Why do you think so?

path: 0 26263665 26263666 26263839, hotness: undefined, score: 6, children: 2

awelo 23 points 2 days ago

@surewhynotlem @Mustachius_Grumpius
Experience.......

path: 0 26263665 26263666 26263839 26265302, hotness: undefined, score: 23, children: 0

terabyterex 13 points 2 days ago

all "current" features. further down its asked about the future and they arent always clear but the fo state there wont be feature parity moving forward

path: 0 26263665 26263666 26263839 26266157, hotness: undefined, score: 13, children: 0

giant_smeeg 30 points 2 days ago

Yup. All CURRENT, these will start to diverge...

path: 0 26263665 26264908, hotness: undefined, score: 30, children: 0

flop_leash_973 19 points a day ago

If there is no intention to put the screws to the user base, then why do it on the first place?

We all know how this game ends when venture capital gets involved.

path: 0 26263665 26274271, hotness: undefined, score: 19, children: 2

teezeh 0 points a day ago

@flop_leash_973 Where are the screws here?

path: 0 26263665 26274271 26276572, hotness: undefined, score: 0, children: 1

dustyData 5 points a day ago

Split versions is usually the first step. Many projects have done so before. Next year there will be some technical reason they can't keep feature parity with the commercial repository, and it will drift from the OSS repository. Oops, we broke compatibility, sowwy guys. A couple of years later the OSS repository will be closed because it is a security risk. By that point the company and management would've drifted so far from the initial values of the project that people won't notice. Those who cared will have jumped ship to alternatives sooner, those who noticed later will be already too deep into depending on the software that they will keep paying the subscription.

I have no evidence, but I also don't have any doubts this is the plan.

path: 0 26263665 26274271 26276572 26280986, hotness: undefined, score: 5, children: 0

freely1333 3 points 2 days ago

I kinda thought the paid plan already had extra features no? Like silly ones but I swear it isn’t just donations right?

path: 0 26263665 26265451, hotness: undefined, score: 3, children: 2

4am 10 points 2 days ago

It had cloud storage, built in TOTP with autofill, and some had features like organizations and sharing

Still, this fucking sucks. Bitwarden was literally created as a ln answer to this shit happening to LastPass and Dashlane.

path: 0 26263665 26265451 26266851, hotness: undefined, score: 10, children: 1

freely1333 4 points 2 days ago

I get it because minio dying burned me hard but so long as it keeps operating as it does now do we need more features? I would be fine with a continuously secure version of exactly what it does now. I kinda hate feature bloat

path: 0 26263665 26265451 26266851 26268001, hotness: undefined, score: 4, children: 0

unexposedhazard 31 points 2 days ago

Not surprised in the slightest sadly.

path: 0 26263843, hotness: undefined, score: 31, children: 0

irotsoma 25 points 2 days ago

Sure, it's no change for self hosters currently, but it's one more step in moving towards a more closed platform overall. I do hope more FOSS client apps end up getting made sometime soon. I've been using Keyguard on Android for some time, which means the recent several breaking changes in the Bitwarden apps to the Vaultwarden backend haven't hit me as hard, but I do still use the official apps for my laptop and desktop and Keyguard isnt fully FOSS, of course. I'd love to see some forks or brand new apps one of these days that are actually fully FOSS for both mobile and browsers. I've thought about doing some myself, but I have too many other projects and I also don't have a MAC or want to pay the fees to make an iPhone version. And I abandoned my Android Developer account when they started the identity nonsense, so none of my apps are on the official store anymore and Fdroid and similar may not be viable soon, so it would only really be for myself and a few others who use alternate Android OS's.

path: 0 26268359, hotness: undefined, score: 25, children: 2

jpaskaruk -1 points 2 days ago

@irotsoma There's no such thing as "Actually FOSS" - that's why it stands for Free & Open Source Software.

All of the pain being experienced by this move from Bitwarden is because it is Open Source Software, which is the not-Free, shitty corporate owned version of Free Software.

What you want is software that is "actually Free."

@Mustachius_Grumpius

path: 0 26268359 26270719, hotness: undefined, score: -1, children: 1

irotsoma 7 points 2 days ago

I mean, yeah, that's what I was saying. I want a truly free and thus FOSS version of the apps. Vaultwarden is a FOSS version of Bitwarden back end, but there aren't really any totally FOSS apps for it. That's what I'd like to see more of.

path: 0 26268359 26270719 26270720, hotness: undefined, score: 7, children: 0

peyotecosmico 17 points 2 days ago

Heh, I'm looking at you to those people that looked at me weird because I told them I was good with Keepass!

path: 0 26269486, hotness: undefined, score: 17, children: 0

Dirk 17 points 2 days ago

So, Vaultwarden it is?

path: 0 26270440, hotness: undefined, score: 17, children: 1

phx 18 points 2 days ago

This seems to be clients for the end devices, which I'm worried may actually be a move towards locking out VaultWarden which will uses the BW Clients

path: 0 26270440 26271322, hotness: undefined, score: 18, children: 0

badgermurphy 15 points 2 days ago

Does anyone know if there's any chance for a fork before this situation inevitably deteriorates? I dont know the license on that software enough to know if its an option.

path: 0 26266127, hotness: undefined, score: 15, children: 2

Mustachius_Grumpius -10 points 2 days ago

are u gonna maintain clients?

path: 0 26266127 26266272, hotness: undefined, score: -10, children: 1

badgermurphy 20 points 2 days ago

No, I have money to pay instead. If I were able to contribute to the effort, I would have said that. Just picking fights in response to open questions today?

path: 0 26266127 26266272 26268315, hotness: undefined, score: 20, children: 0

PrinzKasper 15 points 2 days ago

Are they still going to publish the Android client app via their own F-Droid repository?

path: 0 26268662, hotness: undefined, score: 15, children: 0

possiblylinux127 13 points 2 days ago

It is effectively going closed source

path: 0 26265109, hotness: undefined, score: 13, children: 5

Estebiu -2 points 2 days ago

How so

path: 0 26265109 26265767, hotness: undefined, score: -2, children: 4

possiblylinux127 14 points 2 days ago

They don't make any money off of the open source version. It is just a matter of the before they "discontinue" the open source version and move to source available.

If you have any doubts just look at Redis, Vagrant or Terraform

path: 0 26265109 26265767 26268153, hotness: undefined, score: 14, children: 3

badgermurphy 11 points 2 days ago

You can watch this same process unfold live before your eyes with Android OS, or if you don't want to miss the beginning of the show, grab some popcorn and watch these guys.

path: 0 26265109 26265767 26268153 26269762, hotness: undefined, score: 11, children: 0

1984 3 points a day ago

Yeah we have seen the same process many times now.

path: 0 26265109 26265767 26268153 26274985, hotness: undefined, score: 3, children: 0

Estebiu 1 point 8 hours ago

I really hope they don't go that route.

A different licence for the commercial version isn't a bad thing in se, in my opinion

path: 0 26265109 26265767 26268153 26290257, hotness: undefined, score: 1, children: 0

brave_lemmywinks 10 points 2 days ago

What's the benefit for them to change the license?

path: 0 26265622, hotness: undefined, score: 10, children: 19

thr0w4w4y2 40 points 2 days ago

commercial providers can’t fork and sell it and give nothing back to the OSS community.

path: 0 26265622 26265657, hotness: undefined, score: 40, children: 16

brave_lemmywinks 22 points 2 days ago

So basically they were getting undercut by people reselling the same a services under a different name.

path: 0 26265622 26265657 26265810, hotness: undefined, score: 22, children: 1

Appoxo 18 points 2 days ago

And not having to do R&D

path: 0 26265622 26265657 26265810 26265992, hotness: undefined, score: 18, children: 0

Mubelotix 11 points 2 days ago

No, that would GPL. The benefit for them is that some features will be paid and won't be unlockable just by using Vaultwarden

path: 0 26265622 26265657 26266154, hotness: undefined, score: 11, children: 13

thr0w4w4y2 1 point 2 days ago

it literally says in the post that the license change affects companies who are repackaging and reselling bitwarden, but ok.

path: 0 26265622 26265657 26266154 26267242, hotness: undefined, score: 1, children: 12

nibbler 20 points 2 days ago

But this is the post by bitwarden, defending their decision. AKA marketing.

Can you explain how bitwarden can be "repackaged and resold", that would be stopped by that change?

Everybody can still fork/rename/publish the FOSS version which is continued to be available. Everybody can connect to vaultwarden....?

path: 0 26265622 26265657 26266154 26267242 26267915, hotness: undefined, score: 20, children: 11

talkingpumpkin 15 points 2 days ago

What differences will exist between the two parallel versions?

Some future components will be published under the commercial license and will exist only in that build. Newly developed features will be evaluated on a case-by-case basis for which license applies to them.

source: the page linked by OP, https://community.bitwarden.com/...

path: 0 26265622 26268012, hotness: undefined, score: 15, children: 0

Dirk 11 points 2 days ago

Money

path: 0 26265622 26270441, hotness: undefined, score: 11, children: 0

1984 7 points a day ago

There is no way I'm self hosting something this important... So now I'm not sure what to do actually.

path: 0 26274942, hotness: undefined, score: 7, children: 2

sonstwas 11 points a day ago

That's why I'm just using KeePass. It's just an encrypted file that you can store on whatever storage you want and sync with existing solutions like Syncthing etc.

Yes it's a bit finicky when you edit the file on multiple devices before they've synced but it works very well for me..

path: 0 26274942 26277168, hotness: undefined, score: 11, children: 0

probable_possum 2 points a day ago

If self hosting is not an option. Ideas that come to mind:

Evaluate what it is worth to you and maybe pay for it, if they offer enough worth to you and it is affordable.

Then there are people who host it and provide it to others. Together with other apps, as a suite. Maybe that's an option. But I suppose, donating or paying is expected here, too.

Or switch to another solution. Preferably one with an import feature.

path: 0 26274942 26276673, hotness: undefined, score: 2, children: 0

AustralianSimon 7 points 16 hours ago

I pay for their product and its totally worth. It was $10 for the longest time and much like everything in the last few years has increased price to what it is actually worth. To be honest $20 a year is still stupid cheap and worth it to keep them developing the product. Bitwarden is also one of the few password managers that hasn't had a user data breach.

path: 0 26286314, hotness: undefined, score: 7, children: 0

grillme 7 points 2 days ago

Does anyone have a handy guide to switching to selfhosted version? I was considering doing that but I let my plan renew out of laziness.

path: 0 26263803, hotness: undefined, score: 7, children: 33

unexposedhazard 17 points 2 days ago

Idk how it compares feature wise, but i have been running keepassxc/keepassdx combined with syncthing (or any file synchronization/cloud system) for many years without issues. The entire password manager database sits in one encrypted .kdbx file that you keep synced between your devices. Syncthing is nice because its p2p, so no self-/hosting required.

https://keepassxc.org/
https://github.com/keepassxreboot/keepassxc

https://f-droid.org/...

https://syncthing.net/
https://github.com/syncthing/syncthing

path: 0 26263803 26263918, hotness: undefined, score: 17, children: 12

4am 6 points 2 days ago

Every single time Bitwarden is mentioned on the internet, someone comes in here and proudly recites the anthem “I have been using Keep ass with sink things”

It sucks compared to a dedicated extension.

No autofill No TOTP or 2FA support Doesn’t do passkeys Doesn’t have organizational sharing Doesn’t sync to mobile devices Doesn’t integrate with mobile browsers without trusting some compatible 3rd party app Requires selfhosting your passwords (don’t fuck it up!)

It’s actually pretty sad that the open source world doesn’t have a better solution for this. I mean I guess BitWarden was it but that’s been stolen by venture capital so

path: 0 26263803 26263918 26266931, hotness: undefined, score: 6, children: 2

defaultusername 15 points 2 days ago

Both KeepassXC on desktop and KeepassDX on mobile support autofill, passkeys, and TOTP. Syncing to mobile devices is handled by Syncthing (I use BasicSync on Android) and is quite seamless after setup.

Integration with mobile browsers and other applications is handled by the OS-level autofill service (at least on Android). Trusting a third party app that is completely open source and has a ton of eyes on it? I don't see a problem with that.

Selfhosting is literally the entire point, since who more can you trust with your most sensitive information than yourself? And even if you don't trust yourself with being able to keep good backups and following the 3-2-1 rule, you're more than welcome to sync with a third party cloud provider of your choosing since the password file is fully encrypted.

path: 0 26263803 26263918 26266931 26268055, hotness: undefined, score: 15, children: 0

unexposedhazard 7 points 2 days ago

Why is it that every time i comment about keepass, its because some web based password manager once again broke, got hacked, or stopped development. Keepass users just stay winning :)

Also i have been using keepass with TOTP 2FA for years what are you on about?

Also also, you shouldnt use fido passkeys. Its a failed technology that is worse than what it tries to replace.

path: 0 26263803 26263918 26266931 26271104, hotness: undefined, score: 7, children: 0

uzay 5 points 2 days ago

I had done that for a long time. It worked until it didn't and I lost passwords. I tried again with keepass2android and it's built-in sync. It again worked fine until at some point it wasn't able to sync anymore for no discernible reason. I'd love for this to be a reliable setup, but it just isn't in my experience, at least when there are 3+ devices involved with different clients and no proper awareness of the password manager and the sync sides of each other.

path: 0 26263803 26263918 26268548, hotness: undefined, score: 5, children: 1

1984 1 point a day ago

Exactly. No way I'm going to use this for something critical.

path: 0 26263803 26263918 26268548 26274991, hotness: undefined, score: 1, children: 0

lemmyvore 4 points 2 days ago

I just wish Syncthing didn't have such a convoluted port usage, and also that its Android usage didn't revolve around an unofficial app.

So I'll stick to apps that do sync over SSH (using FolderSync atm).

path: 0 26263803 26263918 26265837, hotness: undefined, score: 4, children: 0

WuxinGoat 3 points 2 days ago

I used keepass but switched to vaultwarden, i might consider switching back, but is there a good self hostable web front end for a keepass database? (I need to access it on my work laptop and can't install stuff there)

path: 0 26263803 26263918 26265135, hotness: undefined, score: 3, children: 2

unexposedhazard 3 points 2 days ago

I dont think there is. Keepass is trying to be as offline as possible. Just makes for a piece of software with much less attack surface.

path: 0 26263803 26263918 26265135 26265268, hotness: undefined, score: 3, children: 0

e8d79 2 points 2 days ago

There is KeeWeb but I am not sure how well maintained it is. This issue is still open. It might be worth contacting your employers IT department instead. Asking for a well known password manager like KeePass shouldn't raise any eyebrows.

path: 0 26263803 26263918 26265135 26265455, hotness: undefined, score: 2, children: 0

hummingbird 3 points 2 days ago

Yup great combo. It baffles me why anyone one would favour to depend oneself on an online service instead

path: 0 26263803 26263918 26265218, hotness: undefined, score: 3, children: 0

magnue 1 point 2 days ago

I've been using that for a while. I like the control I have in that I understand where everything is stored and encrypted. I miss the way that Google password manager had the autofill for seemingly every page nailed though.

path: 0 26263803 26263918 26265518, hotness: undefined, score: 1, children: 0

brave_lemmywinks 1 point 2 days ago

That's my stack, except swap keepassdx for keepass2android, and add the Firefox plugin.

path: 0 26263803 26263918 26265597, hotness: undefined, score: 1, children: 0

Zachariah 5 points 2 days ago

Here it explains some self host options with links to “Get Started” for each:

https://bitwarden.com/help/self-host-bitwarden/

For example, here’s the link to “Linux standard deployment”

https://bitwarden.com/...

You may also want to consider not making your server available to the open internet, and instead access it only on your LAN via VPN.

path: 0 26263803 26263957, hotness: undefined, score: 5, children: 15

TrippyHippyDan 26 points 2 days ago

That or jump to Vaultwarden https://github.com/dani-garcia/vaultwarden

path: 0 26263803 26263957 26264051, hotness: undefined, score: 26, children: 14

WuxinGoat 4 points 2 days ago

Is there another client we can use with vaultwarden though? (In the scenario wgere that gets locked down)

path: 0 26263803 26263957 26264051 26265108, hotness: undefined, score: 4, children: 4

Azazel 3 points 2 days ago

The web interface is hosted directly by your vaultwarden interface so it’s not lockdown-able. The only things that are would be the browser extension and phone apps. Both of which are formally unnecessary because you can always just use the web interface. I’m sure if they ever locked down there’d be community versions in no time as they’re basically just web wrappers anyway.

path: 0 26263803 26263957 26264051 26265108 26266637, hotness: undefined, score: 3, children: 2

Luckyfriend222 3 points 2 days ago

There is an iOS app for Vaultwarden. Under that name.

https://apps.apple.com/...

Don’t see one for Android. And for the rest I just online.

path: 0 26263803 26263957 26264051 26265108 26266913, hotness: undefined, score: 3, children: 0

Zachariah 2 points 2 days ago

great suggestion

path: 0 26263803 26263957 26264051 26264469, hotness: undefined, score: 2, children: 0

grillme 1 point 2 days ago

Can I simply migrate content from Bitwarden to Vaultwarden?

I couldn't tell from looking at the faq or wiki.

path: 0 26263803 26263957 26264051 26267383, hotness: undefined, score: 1, children: 2

awelo 1 point 2 days ago

@grillme @TrippyHippyDan
I would say yes. I use vaultwarden with bitwarden clients, but I don't know for sure, the best way to know is try it.....xdddd

path: 0 26263803 26263957 26264051 26267383 26267477, hotness: undefined, score: 1, children: 0

TrippyHippyDan 1 point 2 days ago

It's been a long while, but I believe you just export from Bitwarden and import into Vaultwarden.

path: 0 26263803 26263957 26264051 26267383 26270713, hotness: undefined, score: 1, children: 0

possiblylinux127 1 point 2 days ago

Vaultwarden still depends on upstream bitwarden

path: 0 26263803 26263957 26264051 26265136, hotness: undefined, score: 1, children: 4

TrippyHippyDan 1 point 2 days ago

Only if you're using the Android app or the web browser plugin, the actual core system does not.

They could lock Bitwarden out tomorrow and Valtwarden would still work fine.

Then people would just have to write specific application and plugin if they wanted to continue to use it with no change.

The web interface would be fine.

path: 0 26263803 26263957 26264051 26265136 26270699, hotness: undefined, score: 1, children: 3

JigglypuffSeenFromAbove 2 points 2 days ago

My knowledge of network security is very limited, right now I only self-host things like movies, music, ROMs, etc. I would love to do the same with my passwords, but I don't think I would feel comfortable doing it with such sensitive data.

path: 0 26263803 26270651, hotness: undefined, score: 2, children: 3

TrippyHippyDan 3 points 2 days ago

A viable concern if you wanted to put it public-facing. If you only care about syncing when you're home, though, you should be able to host it perfectly fine just not giving any pathways in from the outside world.

If you wanted to use the Android application, you would have to learn about TLS certificates anyway, because it doesn't work without HTTPS.

path: 0 26263803 26270651 26270796, hotness: undefined, score: 3, children: 2

phx 2 points 2 days ago

Works fine with acme certs though

path: 0 26263803 26270651 26270796 26271954, hotness: undefined, score: 2, children: 1

TrippyHippyDan 1 point a day ago

I'm personally using Let's Encrypt and duckdns.org for a completely free solution.

Currently only hosting everything on my local network though with VPN to access when not at home.

path: 0 26263803 26270651 26270796 26271954 26274435, hotness: undefined, score: 1, children: 0

greedytacothief 6 points a day ago

Having only ever used keepass, what was the advantage of bitwarden? That you didn't need to sync it yourself?

path: 0 26277398, hotness: undefined, score: 6, children: 3

WhyJiffie 9 points a day ago

That you didn't need to sync it yourself?

and that you have to never deal with sync conflicts. It's a huge deal for those who are using tech but not understanding it, and a convenience for the rest

path: 0 26277398 26279301, hotness: undefined, score: 9, children: 0

Croquette 3 points a day ago

That's the main benefit yeah.

I use the send tool as well for sensitive files

path: 0 26277398 26278410, hotness: undefined, score: 3, children: 0

CedricWhaley 2 points a day ago

It's also way easier to have shared passwords for family accounts.

path: 0 26277398 26279717, hotness: undefined, score: 2, children: 0

The_Zen_Cow_Says_Mu 5 points 16 hours ago

wow, setting up vaultwarden quadlet to work with my selfhosted OIDC sso was stupid easy. Migrating my bitwarden setup to it took no time at all. The extra step was setting up some extra pocketid passkeys to be stored on non-vaultwarden hosted systems (ie. google) to prevent myself from being locked out in case vaultwarden crashes (which probably was a good idea to do regardless). Just need to add the data volume to my regular backup.

path: 0 26285798, hotness: undefined, score: 5, children: 0

andrewoidxyz 4 points a day ago

Fine to me as long as this doesnt impact Vaultwarden

path: 0 26278213, hotness: undefined, score: 4, children: 0

Imaginary_Stand4909 3 points 18 hours ago

Side note: I just tried switching to KeePassXC and it seems pretty fine, except for one caveat. If you installed your browser (probs FF or Librewolf) through flatpak or snap on Linux, the browser extension will not work.

I had to change to the non-Flatpak ver of Librewolf on my Fedora PC, which sucked a little lol 😅

path: 0 26284453, hotness: undefined, score: 3, children: 1

tooLikeTheNope 2 points 8 hours ago

Have you tried fixing it using flatseal and manually changing the config folder location for the browser in keepassxc? Librewolf too, even as native package, requires that location edit

path: 0 26284453 26290812, hotness: undefined, score: 2, children: 0

DanWolfstone 1 point a day ago

All these people keep saying that Vaultwarden won't work because it relies on bitwarden's API but if there is an incompatibility then wouldn't vaultwarden just be left in a functional limbo? Like it'll still work because self hosted but no more new features in parity with official client? Or have I misunderstood the connection between the two

path: 0 26277054, hotness: undefined, score: 1, children: 1

WhyJiffie 5 points a day ago

this year there were 2 separate updates to bitwarden clients that fucked up vaultwarden servers, because the bitwarden developers "accidentally" reused a variable name in the data that was unused for a few years. but vaultwarden forgot to remove it, and now it is used in a different way, and the clients bugged away so hard that you had to uninstall them, because even if you was fortunate to be able to get to your passwords list you could not get it to sync otherwise

path: 0 26277054 26279372, hotness: undefined, score: 5, children: 0

Decronym 0 points a day ago

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters	More Letters
Git	Popular version control system, primarily for code
SSH	Secure Shell for remote terminal access
TLS	Transport Layer Security, supersedes SSL
VPN	Virtual Private Network

[Thread #125 for this comm, first seen 11th Oct 2026, 04:30] [FAQ] [Full list] [Contact] [Source code]

path: 0 26274453, hotness: undefined, score: 0, children: 0

AzuraTheSpellkissed -15 points 2 days ago

As always, people overreacting in the comments (of the linked forum). So the current plan is that the core remains OSS, but upcoming features are partially not. To me that sounds similar to Chrome's or VSCode's approach.

path: 0 26263560, hotness: undefined, score: -15, children: 9

ture 74 points 2 days ago

Be cautious in such cases is not overreacting. We've seen enough open to closed rug pulls in the last years.

path: 0 26263560 26263603, hotness: undefined, score: 74, children: 1

freely1333 9 points 2 days ago

Fucking minIO

path: 0 26263560 26263603 26265470, hotness: undefined, score: 9, children: 0

Mustachius_Grumpius 45 points 2 days ago

yeah sorry I dont want that

path: 0 26263560 26263600, hotness: undefined, score: 45, children: 3

AzuraTheSpellkissed 2 points 2 days ago

I'm not saying that's great news, but it doesn't sound like the self destruction move that some OSS companies have done recently. I wouldn't migrate away just because of that change. In the end, they have to find a sustainable mode of operation.

path: 0 26263560 26263600 26263717, hotness: undefined, score: 2, children: 2

lka1988 21 points 2 days ago

They are going to slowly strip features from the free version over time.

path: 0 26263560 26263600 26263717 26264523, hotness: undefined, score: 21, children: 0

4am 17 points 2 days ago

It’s 2026 and you have way too much optimism left after all the OSS rug pulls of the last six fucking years.

Even hardware rugpulled. Fucking Micron.

Forget it; BitWarden is cooked.

path: 0 26263560 26263600 26263717 26266976, hotness: undefined, score: 17, children: 0

bertlewirth 8 points a day ago

So the current plan is that the core remains OSS

.... for now.

Embrace, Enhance, Extinguish.

*: got the E's in the wrong order

path: 0 26263560 26274188, hotness: undefined, score: 8, children: 0

1984 6 points a day ago

It's not overreacting when you have seen the same development at least 10 times before. Its called experience.

path: 0 26263560 26275010, hotness: undefined, score: 6, children: 0

Dirk 2 points 2 days ago

So it's open core now? As if this would be any better.

path: 0 26263560 26270467, hotness: undefined, score: 2, children: 0

danielfm123 -15 points 2 days ago

Claude, code me a bit warden clone...

path: 0 26266699, hotness: undefined, score: -15, children: 4

jobbies 18 points 2 days ago

Careful, Claude is very sensitive these days. Might want to add 'please' and 'thankyou'.

path: 0 26266699 26266827, hotness: undefined, score: 18, children: 3

kata1yst -6 points 2 days ago

Anthropic is drawing a line in the sand protecting their model's training sets from abuse.

Meanwhile OpenAI is down in a dungeon torturing GPT6 into writing academic mathematics papers.

path: 0 26266699 26266827 26266988, hotness: undefined, score: -6, children: 2

danielfm123 3 points 2 days ago

They say if because AI will conquer the world... Reality since they use conversations to train AI, their AI is becoming less gentle.

path: 0 26266699 26266827 26266988 26267860, hotness: undefined, score: 3, children: 1

ParlimentOfDoom 1 point a day ago

It's because being abusive was able to bypass some of their guardrails.

path: 0 26266699 26266827 26266988 26267860 26278021, hotness: undefined, score: 1, children: 0

selfhosted

@lemmy.world

login for more options

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

go to feed...

selfhosted

@lemmy.world

login for more options

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

go to feed...