this post was submitted on 15 Nov 2023
3 points (100.0% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
3
What is the point of vaultwarden? Is it safer or less safe than using the bitwarden app/website? (alien.top)
submitted 10 months ago by [email protected] to c/[email protected]
40 comments fedilink hide all child comments
 

Not sure I understand why you'd want to self host a password manager. Bitwarden has never been breached AFAIK. How is it better or safer to keep if self hosted?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 10 months ago (1 children)

It's good if you like self-hosting stuff.

However, what I tell people is this:

If you know jack about security and how to lock down a machine that is running Vaultwarden, then it's useless. You should go with Bitwarden.

If you're looking to install it just to play around with, I would be very cautious about what you store there, unless you can lock the system down to where it's not accessible by the outside internet and localized only to your network.

And I have redundant backups in place in case one decides to fail, which are all encrypted with GPG and a few other measures.

If you have it installed and not accessible to anyone else but you, it's a fun project. I like using VW and BW.

The other bonus would be no one is going to look to target you specifically unless you're turned into a target.

Whereas if BW were to be breached, it wouldn't have anything to do with you.

However, BW utilizes encryption, so even if they did somehow manage to get in, they can't read your passwords.

[–] [email protected] 3 points 10 months ago (1 children)

Alright, what minimal security do you need to lock down your vaultwarden? Wireguard, firewall, fail2ban? I’m trying to learn good security practices for my server

[–] [email protected] 1 points 10 months ago

Honestly just install wireguard on client and they use that to remote access the server when away from lan network