I use it currently, but I’ve seen a few people say it’s bad for privacy or something? Is this true? If so, what alternatives do you suggest?

  • Helix 🧬
    11•3 years ago

    There’s an Open Source implementation called Vaultwarden. You should certainly export your passwords from Bitwarden so they can’t keep them hostage.

    Alternatives include Passbolt (no offline client, weird French crypto implementation of RSA), KeePassXC (best for single users, not good for sharing) and QtPass/gopass/pass (best solution if you are very proficient with GPG and like the command line).

    • @fishonthenet@lemmy.ml
      6•3 years ago

      You should certainly export your passwords from Bitwarden so they can’t keep them hostage.

      imo your tone is a bit blowing this out of proportion, you can stay on the free tier, pay regularly for a very good service or even self-host. they are not keeping your password “hostage”.

      • Helix 🧬
        0•3 years ago

        Yes, that’s why I said you should export the passwords regularly, so they can not hold them hostage. Whether they currently do it or just remove some features when you stop paying is irrelevant since they could change that tomorrow.

      • Helix 🧬
        1•3 years ago

        I have years of experience with GPG and still didn’t manage to set up a shared password repository with pass and derivates which is usable by people without my experience. I’m talking junior devs, senior devs and junior admins here. I only managed to make it work between a few DevOps and admin people. Our senior DevOps guy didn’t even bother because it has so many papercuts.

        The most promising client to me apart from gopass (not to confuse with go-pass) was QtPass but even that was lightyears away from KeePassXC in terms of UX.

        Maybe another thing to add is that there’s pass-import which can convert several different formats of password stores between each other and to pass itself.

    • Mr. UpsyOP
      1•3 years ago

      What do you mean by “keep them hostage”? Why would they do that?

      • Helix 🧬
        -1•3 years ago

        You pay for their service and when you stop paying, you lose access to the passwords you didn’t synchronise to your local client before that happens.