this post was submitted on 11 Feb 2025
39 points (97.6% liked)

Privacy

33554 readers
775 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I currently use KeepassXC that is synced through NextCloud. The sync isn't very elegant, especially on my phone. So I'm looking for a new password manager, which has a native server sync support that I can self host. What do y'all recommend? I need at least a phone app and a browser integration that can autofill.

all 33 comments
sorted by: hot top controversial new old
[–] untorquer@lemmy.world 1 points 4 minutes ago* (last edited 42 seconds ago)

I like to use SyncThing for my keepass vault. Imo it's about as simple and elegant as it can get without involving third party services.

I know you're asking for an integrated sync but this has been flawless for me and only rarely notice a delay between machines including android, limits, and windows (less that 30s in any case)

[–] kn33@lemmy.world 2 points 3 hours ago (1 children)

I haven't seen it mentioned here so I'll throw it out there - 1Password. It's just a very smooth experience that I really appreciate.

[–] tc4m@lemmy.world 2 points 1 hour ago

Got a free family subscription through my work. Before that I was paying for it.

1Password is just great. Wonderful Linux support (desktop app, cli client, identity agent for SSH).

The major update to version 8 was rolled out to Linux first, actually.

One of the few pieces of software where you feel that the developers care about their product.

[–] RejZoR@lemmy.ml 19 points 8 hours ago

Bitwarden is excellent and the paid plan is very reasonable unlike with others.

[–] Xanza@lemm.ee 6 points 6 hours ago (1 children)
[–] Arkhive@lemmy.blahaj.zone 3 points 5 hours ago

I also use Unix pass and self host a git repo over Tailscale to keep it synced across devices. Works like a charm so long as I remember to push whenever I edit a password somewhere.

[–] chrand@lemmy.ml 12 points 9 hours ago (1 children)

For native sync, the two good and reputable alternatives are Bitwarden and Proton Pass

[–] mrmule@lemmy.world 8 points 9 hours ago

2nding the Bitwarden, absolutely love it. I moved from LastPass years ago and never looked back.

[–] ImFineJustABitTired@lemmy.ml 26 points 12 hours ago
[–] g_damian@lemmy.world 32 points 13 hours ago (2 children)

Have you tried syncthing? It works great with keepassxc.

Vaultwarden is pretty easy to self host.

[–] zarlin@lemmy.dbzer0.com 11 points 10 hours ago (1 children)

+1 for Keepass + Syncthing. Free, no cloud, always synced.

Yeah this is me. It's been just perfect for many years now.

[–] makingStuffForFun@lemmy.ml 7 points 13 hours ago (1 children)
[–] palitu@aussie.zone 4 points 12 hours ago (1 children)
[–] makingStuffForFun@lemmy.ml 1 points 19 minutes ago

Actually keepassdx, and sounding syncthing

[–] EmbarrassedDrum@lemmy.dbzer0.com 10 points 11 hours ago (1 children)

Bitwarden.

My recommendation: Don't use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use). Why? You're not a security personal, and securing your vault isn't your job. You might do a slight mistake that'll lead to the compromise of your vault.

The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they'll probably do it better then you. When it comes to serious matter, I prefer to trust the professionals.

[–] EpicGamer@lemmy.world 13 points 10 hours ago (4 children)

Doesn't the server just hold an encrypted vault? What could go wrong when the server is compromised? Just thinking out loud I don't know the answer

[–] herrvogel@lemmy.world 1 points 2 hours ago

I just don't want any unauthorized persons anywhere near my vaults in general. I also see my vault as a critical service that requires high availability, and I know enough about system administration to know that my network and I are not qualified to provide that.

[–] sonalder@lemmy.ml 2 points 6 hours ago

Security is also about backups. 3 Replicas 2 Formats 1 Offsite location

[–] smiletolerantly@awful.systems 2 points 9 hours ago

Yep, that's right. In theory you could share the encrypted DB with the public and not degrade security. (Still don't do that though...)

[–] fireshell@lemmy.ml 6 points 10 hours ago

Good thing the KeepassXC can be used as a 2nd factor authenticator, though it has TOTP only, doesn't offer HOTP.

[–] timewarp@lemmy.world 14 points 12 hours ago* (last edited 12 hours ago)

KeePassXC. Despite a lot of room for improvement, overall it is pretty powerful & you don't have to host a server. You can also sync your password file to cloud storage. With VaultWarden, it will store a cache of your passwords on your phone but you wont' be able to update them away from home unless you also setup port forwarding, dynamic DNS, web server & all that.

[–] JASN_DE@lemmy.world 13 points 13 hours ago

Vaultwarden works really well for me.

[–] independantiste@sh.itjust.works 0 points 6 hours ago

Proton pass if general UX and speed are important to you. Bitwarden if amount of features is important to you

[–] Kng@feddit.rocks 4 points 13 hours ago

Keepass2android should be able to handle nextcloud sync from within the app so that might work better than on device sync. If your done with keepass bitwarden or proton pass are common alternatives

[–] sonalder@lemmy.ml 0 points 13 hours ago (2 children)

If you're on Android I had seen a better UX for synching with the client Keepass2droid than with KeepassXC or KeepassDX.

On iOS maybe try Keepassium.

[–] timewarp@lemmy.world 4 points 12 hours ago (1 children)

KeePassXC doesn't have an official client, does it? Also, KeePassDX has a better UI IMO, is updated much more frequently & is on Fdroid.

[–] sonalder@lemmy.ml 1 points 12 hours ago

I was sure that KeePassXC had an Android client but it seems like my memory tricked me. I do prefer the overall UX of KeePassDX but when I tried several Android KeePass clients during the pandemic I remember that KePass2Droid had an easier Nextcloud sync setup than what KeePassDX offered.

[–] dengtav@lemmy.ml 2 points 13 hours ago (1 children)

I do the exact same thing as OP with KeepassDX at work and works pretty nice so far, since I gave KeepassDX the right acces rights on the nextxloud directory.

What diferences have you figured out so far with Keepass2android in comparison ?

[–] sonalder@lemmy.ml 1 points 12 hours ago

Easier to setup sync for noobs, however this was years ago maybe it has changed since on DX