519
you are viewing a single comment's thread
view the rest of the comments
[-] Humanius@lemmy.world 3 points 15 hours ago* (last edited 15 hours ago)

It shouldn't even be that complex...

I might be mistaken, but ultimately a password manager is basically nothing more than a database of passwords in an encrypted zip file, right? That could entirely be self-hosted with off the shelf open source applications stringed together.
All you'd need is a nice UI stringing it all together.

Edit: I'm not sure why people are downvoting me. Is that not what a password manager essentially is?

[-] LedgeDrop@lemm.ee 4 points 6 hours ago

It's the "stringing it all together" that could be problematic.

If you have multiple clients (desktop/cellphone) modifying the same entry (or even different entries in the same "database" ). You need something smart enough to gracefully handle this or atleast tell you about it.

I did the whole "syncing" KeePass and it was functional, but it also meant I needed to handle conflicts - which was annoying. I switched and really appreciate the whole "it just works" with self-hosted bitwarden.

[-] wintermute@discuss.tchncs.de 27 points 14 hours ago

Keepass is exactly that. Basically all the client side parts, and the database is a single encrypted file that you can sync however you want.

[-] HereIAm@lemmy.world 6 points 11 hours ago

I see it as it's easy to self host. But I'm not skilled nor rich enough to guarantee the availability of it. I don't want to be stuck on a holiday without my passwords because my server back home died from black out or what have you.

I pay for bitwarden and the proton mail package to keep the password management market a bit more competitive and it actually works out cheaper. It would be nice to have protons anonymous emails built in, but I can live with it.

But I might have to reconsider if Bitwarden is going a different direction that what I'm paying for.

[-] xthexder@l.sw0.com 9 points 15 hours ago

I've done basically this in the past by encrypting a text file with GPG. But a real password manager will integrate with your browser and helps prevent getting phished by verifying the domain before entering a password. It also syncs across all my devices, which my GPG file only worked well on my desktop.

[-] AsudoxDev@programming.dev 6 points 15 hours ago

That is the bare minimum of a password manager like Bitwarden.

[-] Boozilla@lemmy.world 2 points 15 hours ago

Yup, thanks. Was thinking along these same lines.

this post was submitted on 20 Oct 2024
519 points (98.7% liked)

Technology

58792 readers
2947 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS