Privacy

33554 readers

775 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Which password manager to use? (sopuli.xyz)

submitted 13 hours ago* (last edited 13 hours ago) by vaionko@sopuli.xyz to c/privacy@lemmy.ml

30 comments fedilink hide all child comments

I currently use KeepassXC that is synced through NextCloud. The sync isn't very elegant, especially on my phone. So I'm looking for a new password manager, which has a native server sync support that I can self host. What do y'all recommend? I need at least a phone app and a browser integration that can autofill.

you are viewing a single comment's thread
view the rest of the comments

[–] EmbarrassedDrum@lemmy.dbzer0.com 10 points 10 hours ago (1 children)

Bitwarden.

My recommendation: Don't use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use). Why? You're not a security personal, and securing your vault isn't your job. You might do a slight mistake that'll lead to the compromise of your vault.

The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they'll probably do it better then you. When it comes to serious matter, I prefer to trust the professionals.

[–] EpicGamer@lemmy.world 13 points 9 hours ago (4 children)

Doesn't the server just hold an encrypted vault? What could go wrong when the server is compromised? Just thinking out loud I don't know the answer

[–] herrvogel@lemmy.world 1 points 2 hours ago

I just don't want any unauthorized persons anywhere near my vaults in general. I also see my vault as a critical service that requires high availability, and I know enough about system administration to know that my network and I are not qualified to provide that.

[–] sonalder@lemmy.ml 2 points 6 hours ago

Security is also about backups. 3 Replicas 2 Formats 1 Offsite location

[–] smiletolerantly@awful.systems 2 points 9 hours ago

Yep, that's right. In theory you could share the encrypted DB with the public and not degrade security. (Still don't do that though...)