Jorijn Schrijvershof

Spent a few hours researching alternatives to #1Password, due to their cost increase. For me, it boils down to three scenarios.

a) Migrate to Bitwarden Cloud, save ~25 USD/year, but deal with migration hell

b) Migrate to Bitwarden self-hosted through Vaultwarden, accept community risk, and lie awake at night about server hardening

c) Stay with 1Password and live a worry-free life for the cost of a cup of coffee per month per user

I'll be going with C. Thank you for coming to my TED talk.

Feb 27 at 4:13pmWeb
Show threadJorijn SchrijvershofFeb 27
I was already deep into writing a custom data migration script because the original script doesn't include attachments. All of a sudden, the "what the hell am I doing for ~30USD/year" moment hit.
Show threadJorijn SchrijvershofMar 20

Followup ☝

I picked up this little project again. I honestly dislike that staying with a company I no longer align with out of ease was the best option. I bit the bullet and migrated to a self-hosted Vaultwarden. It's not as polished, but we'll get there.

Show threadMarijnMar 20

@jorijn Dedication!!

I get 1password for free thanks to work and I'm genuinely curious about the state of Bitwarden apps, the last time I worked with them (YEARS ago) they lacked so much polish and auto-fill recognition that a physical password book was a genuine alternative

Show threadJorijn SchrijvershofMar 21

@IcyPalm Nice. I'm not sure I would've switched in that case.

The polish still isn't up to par with 1Password, but heck, they've been going at it for a decade longer. I'm sure Bitwarden will get there. It's very usable today.

Show threadZaynFeb 27
@jorijn https://keepassxc.org/
don't bother with bitwarden unless you self host https://www.techradar.com/pro/bitwarden-clarifies-open-source-commitment-amid-user-concerns
and keepass is free
KeePassXC Password Manager

KeePassXC Password Manager

Show threadJorijn SchrijvershofFeb 27

@zayn I'm not against self-hosting, but I do recognize that the heart of my complete digital life needs special consideration.

KeePass comes with its own can of worms: synchronization of shared data with the wife and kids.

Show threadZaynFeb 27
@jorijn one reddit thread suggested syncthing (.net). or nextcloud (or for manual ezpz sync) patchy.moe for just exporting it and sending (and merging) it to keepassdx (android)
Show threadLars Chr.Feb 27

@jorijn I ended at c also.

also 1password is canadian, bitwarden is us based, so that puts 1password one up, even though they increased their prices.

Show threadHarro van der KlauwFeb 27
@jorijn yeah, looked at proton pass too, but the fact that exporting passkeys is not a thing makes migration a pain, I'm in no hurry, I have till October so I'll evaluate again before then.
Show threadJorijn SchrijvershofFeb 27
@hvdklauw You can migrate passkeys now through iOS credential exchange. But it still doesn't migrate attachments.
Show threadMisterMakerFeb 27
@jorijn Seems like that you can host everything with Home Assistant addons....
Show threadJorijn SchrijvershofFeb 27
@MisterMaker that seems like a terrible idea
Show threadMisterMakerFeb 27
@jorijn I will keep doing it until someone tells me why it is. ;)
Show threadJelv🎴Feb 28
@jorijn same. And I got the second email that my legacy-price tier doesn’t increase at all 🤭 I did cry to support for the terrible data migration without passkeys (!!) and attachments (!)
Show threadJorijn SchrijvershofFeb 28
@jelv interesting, how did they react?
Show threadJelv🎴Mar 1
@jorijn that I can only transfer the passkeys with the iOS app and that attachments are not supported in the csv. Hope they can land on a better transfer standard @1password soon.
Show threadTom Sheppard has movedFeb 28
@jorijn I just completed migrating from 1Pv7 to BW with a self-hosted VW backend in Docker on macOS Sequoia on Apple Silicon (that's a lot of buzz words). It's probably easier than migrating from v8 because I don't have passkeys in v7. Multiple vaults, tags, and notably attachments were all migrated over thanks to a script written by Claude. Still checking odds and ends but it looks pretty intact. Instead of caddy I'm using my Synology NAS with a Let's Encrypt cert as a reverse proxy. LAN only.
Show threadJorijn SchrijvershofFeb 28
@TWSheppard I was headed on this route too, make sure to ask Claude to check code execution path parity for the original importer written in TypeScript. You'll want to catch all the edge-cases to avoid loosing data.
Show threadTom Sheppard has movedFeb 28
@jorijn Perhaps I cheated a bit. I did the original export from 1P to .1pif, then ran the script to add a custom field to each entry using the 1P UUID. Then I imported the .1pif files from each vault and then finished up by running the script again to finalize by assigning folders/collections for tags (I only ever used 1 tag per item), moving from the primary vault to organizations for my 1P shared vaults, and added the attachments to each item. Still checking. I'll keep 1P around a long time.
Show threadDan ⁂Mar 1
@jorijn arrived at the same conclusion, might switch to the family plan to save some bucks