If you rely on Bitwarden, they've changed leadership and are now on the PE extract-and-exit track. Start working on your backup/exit strategy as soon as you reasonably can.
If you rely on Bitwarden, they've changed leadership and are now on the PE extract-and-exit track. Start working on your backup/exit strategy as soon as you reasonably can.
@espadrine @mhoye depends how you feel.
If you're happy to take a risk that the bitwarden client apps may enshittify too but somebody may fork them and keep them real, then vaultwarden is a great option.
Otherwise I have no current recommendations.
@theorangetheme @espadrine @mhoye
great, so Proton has a MAGA CEO, Bitwarden has PE, and 1Password is slop
guess I just need to keep working down the list
@jokeyrhyme I don’t know anything about the author of this article (and you presumably don’t know anything about me either) so take that into consideration and be skeptical if you deem it appropriate, but there’s apparently good evidence that Proton’s CEO is _not_ MAGA. Phew.
@leigh well, the broader picture is definitely better
but it was the "today the tables have completely turned" comment made there that concerned me, as that seemed like unnecessary flattery / sycophancy and not an especially accurate assessment
i mean, both parties are firmly USA imperialist and capitalist, so there's a limit to how much better one party can be over the other party in most aspects
and sure, we did see some antitrust moves against Google and Facebook, but these seemed more about finding some way to punish them for alleged censorship of conservative views online, and instead of breaking up monopolies we ended up with drastically reduced moderation of hate speech
but i retract my "Proton CEO is MAGA" assertion, the bigger picture doesn't demonstrate a commitment to that dogma, this does seem more like a poorly-worded or insufficiently-detailed "hooray for seeming to be less stupid than usual" post 🤷
@espadrine @mhoye "Start a collective" is annoying advice. But here it makes a lot more sense than usual. Find 10 people, one of whom is willing to learn yunohost in exchange for beer. Costs maybe EUR5 per month on Hetzner. For almost all services this would be be a terrible solution. But Vaultwarden is unique...
Uptime: it doesn't matter. All your clients cache your entire vault. You can add new passwords. No Internet required. The server only matters for synchronisation, which happens in the background when the server comes back up. It would be unusual if a multi-day outage affected you at all.
Security: your vault is end-to-end encrypted. The admin can't access anything in your vault, and neither can the hackers who blow the server wide open. Unlike Lastpass, in Vaultwarden this is actually true.
Enshittification: your sysadmin is Judas? Export your vault, import it into a different instance. And while you're setting that up, your client caches still work. You're scared of Bitwarden because they have the resources to re-engineer the whole platform while stringing you along. Your small-time Judas does not.
I'm happy to give you an account on my server. But that's maybe taking trust to extremes...
Bitwarden: about to be gobbled by private equity
KeepassXC: went all-in for AI sludge recently
1Password: see “KeepassXC”
LastPass: surely you jest
“Piece of paper in a locked box” is looking like a better option by the day.
(I have enough AppleThings that Apple’s password service is semi-workable for the time being, but that doesn’t help me much at work, or people who don’t want to deal with AppleThings.)
Update: I went ahead and imported all the Bitwarden logins to Apple Password. I’m not wild about this, since I don’t really want to add another fairly deeply-rooted plant to Apple’s walled garden, but at least the two fates seen above (“gobbled by private equity” and “heavily contaminated by AI dreck”) seem less likely there. I’m keeping the Bitwarden account for a while at least, until I can see if something better comes along, but I’m not holding my breath.