Mastodawn

is there a selfhosted password manager service that works offline? eg. I can save or edit passwords in the client (app/browser extension) and it will be synced once the password manager service is reachable again?
I had assumed bitwarden/vaultwarden would work like that, but it doesn't.
I don't want the system to be hosted online, only in my local Lan.

update, because this is still being boosted: please read my post on this at https://www.splitbrain.org/blog/2025-08/17-password_manager_woes

#passwordmanager #selfhosting #bitwarden #vaultwarden

Password Manager Woes [splitbrain.org]

Andreas Gohr Aug 17, 2025

everyone suggesting a #keepass based solution: How do you integrate it into your browsers? Do I really have to have a desktop application running that communicates with the browser extension? That seems absurd?

David L Aug 17, 2025

@splitbrain there are browser extensions. And instead of reimplementing all the functionality in the desktop application, they communicate with the existing app to query your vault.

varjolintu Aug 17, 2025

@splitbrain It’s not absurd. The extension just transfers messages with the main application, not opening or handling the database file directly. Just a different approach.

PresGas - RPG and Left Nerd Aug 17, 2025

@splitbrain Well, for me; I didn't integrate it into my browser at all. With the Auto-type feature (other KeePass implementations have something similar):

https://keepassxc.org/docs/KeePassXC_UserGuide#_auto_type

I can use it to input passwords in whatever application I choose - not just the browser. Good for ssh sessions etc.

Having #keepass able to type into whatever window I choose is the killer feature for me.

KeePassXC: User Guide

Andreas Gohr Aug 17, 2025

@PresGas thank you. This is the first reply that made somewhat sense to me. I will have a closer look at this feature.

PresGas - RPG and Left Nerd Aug 17, 2025

@splitbrain It really is the secret sauce, so to speak. That and I use Syncthing for many other items (newsboat db syncing and dotfiles).

Just keeps in mission with the whole "*NIX philosophy" of chaining tools that do one thing well together to make awesomeness. 🤓

DelegateVoid 1d ago

@splitbrain I just copy paste

__Miguel_Aug 17, 2025

@splitbrain
Keepass plus Syncthing is the first thing that comes to mind.

Also, TIL you can't offline edit with Vaultwarden...

Michael Stapelberg 🐧🐹😺Aug 17, 2025

@splitbrain I use KeePass and sync my keepass file. Not quite a service, but good enough for my sync needs

Gina Häußge Aug 17, 2025

@zekjur @splitbrain Seconding this, this is precisely the setup I've been using for well over a decade now. Keepass file in cloud storage (used to be my Google Drive, now it's my own NextCloud), Keepass2Android on Android and KeepassX on desktop.

Preston Maness ☭Aug 17, 2025

@foosel @zekjur @splitbrain This times infinity. Use #SyncThing for synchronizing across devices (SyncThing can work entirely locally). Use #KeepassXC as the password manager.

Jens Aug 17, 2025

@splitbrain I use https://www.passwordstore.org/ . It basically is a git repository and uses gpg as encryption. I use it in combination with a yubikey and a ssh accessible remote repository. But it is unfortunately not a one click solution, if you are looking for that.

Pass: The Standard Unix Password Manager

Pass is the standard unix password manager, a lightweight password manager that uses GPG and Git for Linux, BSD, and Mac OS X.

aceryz Aug 17, 2025

@splitbrain As mentioned above, but with KeePassXC. The database format deals with potential entry conflicts, you can use any syncing solution. I use self-hosted Nextcloud to sync passwords between 4 devices, never had a problem in... 10 years? Maybe more?

There's KeePassDX for Android, something for iOS too, I think. You can even use it from CLI if you need to.

🔐 PwMgmt-InfoMan Aug 17, 2025

@splitbrain
Whats about KeePassXC?
https://keepassxc.org

KeePassXC Password Manager

KeePassXC Password Manager

PresGas - RPG and Left Nerd Aug 17, 2025

@splitbrain I have used KeePass in a directory with other dotfiles that I sync to all my devices with synching.

For my mobile Android device I keep it ready only, I occasionally update it with localsend from a lappy to it

darkan15 Aug 17, 2025

@splitbrain the offline first options I know are https://keepassxc.org/ and https://www.passwordstore.org/ both work with local files, but you can backup/sync these files between devices with any other solution you like

KeePassXC Password Manager

KeePassXC Password Manager

Christian Aug 17, 2025

@splitbrain
Seconding the ones with Keepass. Using it with syncthing to sync the database file.
Keepass also can join databases, in case you produce a sync conflict (rarely happens).

Slim Amamou Aug 17, 2025

@splitbrain if you're going to use a browser, you're probably not offline. So your use case is special. If you don't need a browser extension you can use password-store. it's a perfectly fine bash script which encrypts your passwords using gpg and manages their revisions using git

Andreas Gohr Aug 17, 2025

@slim I am offline/disconnected from my home LAN. I need something well integrated into the browser. That's the whole point.

@splitbrain Interesting, I've been using Vaultwarden for years now and after all the testing *hum* outage *hum* everything seems to work fine offline

As in, even if the server is in valhala, I keep my cache in the browser/iOS app and I can still work out my passwords

I'm curious about your experience

Andreas Gohr Aug 17, 2025

@docyeet yes. you can access your passwords. But you can not create new ones when your vaultwarden server is not accessible. There is no create now, sync later.

@splitbrain @docyeet This blows my mind, I’ve been using keepass since forever and thought about trying vaultwarden.
Would a combination with syncthing fit the bill? The latter also works through NAT etc, but could also be configured to only sync locally. Then you would simply not get synced when outside of your lan.

Saju Manodo Aug 24, 2025

@splitbrain @docyeet I have this setup. When i am not a home i have a vpn tunnel open to my homenetwork, so i can access my selfhosted vaultwarden anytime. VPN is connecting to my fritzbox.

AMS Aug 17, 2025

@splitbrain keepassxc and syncthing. Keepass2Android on android.

Chopper Dave Aug 17, 2025

@splitbrain
I used to do this with a Keepass database I hosted on a share on my NAS. Then I used Syncthing to sync the copies on my various devices.

DelegateVoid 1d ago

@splitbrain #keepass + #syncthing does wonders. The only downside to keepass is that it doesn't support async authenticators so I cannot use my fingerprint reader with it.