pass-tomb
vaultwarden
Our great sponsors
| pass-tomb | vaultwarden | |
|---|---|---|
| 9 | 489 | |
| 366 | 32,634 | |
| - | - | |
| 7.1 | 8.9 | |
| about 2 months ago | 6 days ago | |
| Shell | Rust | |
| GNU General Public License v3.0 only | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pass-tomb
-
KeePass is the free, open source, light-weight and easy-to-use password manager
By itself, Passwordstore will not encrypt file names or directory names, which might not be a problem if no one else has access to the machine that hosts your git repo, but if that's not the case (even if it's a private repo on whatever platform), you might want to use either Tomb or git-crypt-remote to have full end-to-end encryption. There are even some tools that glue tomb and pass together (https://github.com/roddhjav/pass-tomb for one), though I'm not sure what's the situation is like when it comes to mobile integration with tomb/git-crypt-remote.
- Clever uses of pass, the Unix password manager
-
Any self-hostable password managers worth using?
That can of course be fixed by using pass-tomb, but that isn’t implemented in mobile clients (at least not on iOS).
- Pass: The standard Unix password manager
-
LastPass is finally a no-brainer to ditch: Bitwarden?
A plug-in called pass-tomb exists to fix this, but doesn’t work with mobile apps (a least not iOS)
vaultwarden
-
Bitwarden
To people who want to self-host this, look at Vaultwarden which is a fully compatible alternate server with even more features:
https://github.com/dani-garcia/vaultwarden
Been running it for a year with 0 issues.
-
What program(s) do you use to remember passwords, including crypto?
For passwords and 2FA I use Bitwarden in combination with a self-hosted Vaultwarden service (for imcreased security and use of pro features for free).
- Comment gérez-vous vos mots de passe ?
-
List of your reverse proxied services
Vaultwarden as Password-Safe
-
Bitwarden: Free, open-source password manager
For this I self-host vaultwarden (https://github.com/dani-garcia/vaultwarden), an implementation of the bitwarden server, on my raspberry pi at home (and back up the DB frequently). It works well enough for me, and doesn't have my stuff stored in a single company's cloud.
Self hosting is incredibly easy with vaultwarden (https://github.com/dani-garcia/vaultwarden)
-
Your privacy is optional
I have now switched to using the BitWarden app with the self-hosted VaultWarden server. I have set it up, so my passwords are only accessible when connected to my home network either physically or with a VPN (I am using tailscale for this).
-
Can Chrome Sync or Firefox Sync be trusted with sensitive data?
There are solutions external to the browsers that work pretty well and where you have control on your data :
Floccus for bookmarks (https://floccus.org/) : it works also on mobile devices : a great plus ! You need only a webdav server (or a Nextcloud account), I use Dave (https://github.com/micromata/dave)
Vaultwarden for the passwords (https://github.com/dani-garcia/vaultwarden)
A huge advantage of this solution is that you can have synchronization also between different browsers and on mobile devices.
-
Bitwarden Secrets Manager now generally available
And it also seems like vaultwarden has no interest in implementing the functionality?
I don't get why they don't do a clean-room implementation if they're so worried about licenses..
Vaultwarden does not implement the secrets manager. It does implement the password manager.
Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154
What are some alternatives?
Bitwarden - The core infrastructure backend (API, database, Docker, etc).
Passbolt - Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
Nginx Proxy Manager - Docker container for managing Nginx proxy hosts with a simple, powerful interface
keepassxc - KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
authelia - The Single Sign-On Multi-Factor portal for web apps
Nextcloud - ☁️ Nextcloud server, a safe home for all your data
sso-wall-of-shame - A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.
web - The website vault (vault.bitwarden.com).
KeeWeb - Free cross-platform password manager compatible with KeePass
bitwarden - Bitwarden client applications (web, browser extension, desktop, and cli) [Moved to: https://github.com/bitwarden/clients]
totp-generator - Generates TOTP tokens in the browser
bitwarden_rs - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs [Moved to: https://github.com/dani-garcia/vaultwarden]