Bitwarden New CEO has extensive M&A, Private equity experience, Removes Transparency from its Motto

https://www.fastcompany.com/91542655/bitwarden-scrubs-always-free-and-inclusion-values-from-its-website-as-longtime-execs-step-down

I find this move concerning, and wish that the Founder had looked for a new CEO that shared his values rather than a Private Equity and Mergers Expert.

Furthermore, the change to the GRIT motto is worrying. Trust is useless without Transparency when it comes to code and security.

1.1k points · 293 comments · view on lemmy.world

293 Comments

one_old_coder@piefed.social · 299 pts · 80d (48 replies)

Is it that time when I say "oh shit!" and starts to look at alternatives? I've seen this scenario a hundred times already and I'm tired.

Godort@lemmy.ca · 122 pts · 80d (3 replies)

I don't have the patience to switch to alternatives until they make a change that actually affects the usability of the tool.

This is absolutely a red flag though.

Quacksalber@sh.itjust.works · 73 pts · 80d (1 reply)

Just FYI, you can export your Bitwarden database to plain text and import that with KeePassXC

alakey@piefed.social · 22 pts · 80d

All the attachments, though... man this is going to be such a pain :/

akilou@sh.itjust.works · 1 pts · 78d

It takes a full 3 minutes to try an alternative. Export, install new one, import. Install extensions where you need them and sync.

YurkshireLad@lemmy.ca · 63 pts · 80d (34 replies)

Same question here. What are the best alternatives?

zikzak025@lemmy.world · 97 pts · 80d (20 replies)

KeePassXC is the best FOSS option, but you'll need to figure out self hosting if you want to sync the database between devices.

M1k3y@discuss.tchncs.de · 41 pts · 80d (13 replies)

As the database is encrypted in your device, you dont really need to self host. A keepass database in the Google cloud is not really problematic, although you should still choose a more private cloud provider.

meathappening@lemmy.ml · 28 pts · 80d (9 replies)

Syncthing is probably a simple fix.

mnemonicmonkeys@sh.itjust.works · 32 pts · 80d (7 replies)

Assuming you have a degoogle'd phone. The syncthing-fork devs announced that they aren't going to certify for Google Play when that's made a requirement in a few months

meathappening@lemmy.ml · 18 pts · 80d (4 replies)

Ugh, I forgot about this. Aren't you still going to be able to install apps from third-party marketplaces? I thought the plan was just that the phone was going to hassle you and require multiple hoops.

punkibas@lemmy.zip · 6 pts · 80d

Yes, that's the plan

scutiger@lemmy.world · 3 pts · 80d

I think other apps will require ADB to install

napkin2020@sh.itjust.works · 4 pts · 80d
conartistpanda@lemmy.world · 2 pts · 79d

fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck fuck

conartistpanda@lemmy.world · 1 pts · 79d

I use both KeePassXC and Syncthing for passwords. Works fine.

Quetzalcutlass@lemmy.world · 8 pts · 80d

And you can use a keyfile separate from the database for even more security. If the database is backed up on Google Drive and the keyfile is saved on a USB or in a (non-Google) email somewhere for the rare times you add a new device, your passwords should be safe even from keyloggers or Google themselves.

eager_eagle@lemmy.world · 5 pts · 80d (1 reply)

make sure to use post-quantum encryption algs

victorz@lemmy.world · 4 pts · 80d

Which algs would that be? ed25519 okay? Is that even an encryption alg? I'm not too hot with encryption.

Wildmimic@anarchist.nexus · 7 pts · 80d (2 replies)

or use syncthing, no hosting experience required

stephen01king@lemmy.zip · 2 pts · 80d (1 reply)

Syncthing on the phone seems to use up a lot of battery, though.

michaelalf@lemmy.world · 3 pts · 79d

If you don't need real time sync you can disable background use of the app. That's what I've done, and I just open the app when I need to update. Probably a smarter way to do it, but it works for me.

tremble5218@programming.dev · 2 pts · 80d

I found the easiest way to sync is to use rclone. This way you can use any cloud provider like Google Drive or OneDrive or DropBox. First create the rclone remote for your cloud provider using rclone config. Second step is to create a second remote using the encryption option (menu item 16), choosing an appropriate path <first remote>:<path to directory>. Upload your KeepassXC database to this encrypted remote using rclone copy.

On Android you can use the RoundSync app from F-droid to configure the the same remotes, then create a task to copy or sync from that encrypted remote and a trigger to run that task on a schedule. Overall, this one-time setup works really well for me. This is my backup in addition to using Bitwarden for several years. Bitwarden is not going to get my money any more.

Cethin@lemmy.zip · 2 pts · 79d

It doesn't need to be complicated. I use syncthing to synch them. It's pretty trivial. You just tell it what folders to synch, between which devices, and it'll synch whenever it's running.

Programman4233@lemmy.dbzer0.com · 1 pts · 79d

post-quantum encryption algs

I use the built in ftp sync option with any file explorer that makes an ftp server on my phone.

IcedRaktajino@startrek.website · 34 pts · 80d (4 replies)
refract@lemmy.zip · 23 pts · 80d (2 replies)

But you still use the official BW client apps, correct?

Unless you forego usage of the clients and access Vaultwarden through the browser (removing accessibility and convenience especially on mobile), it is not an e2e replacement solution.

Are there any alternative FOSS clients/apps that work with Vaultwarden?

Edit: I see further down that the official client is open source, and would get forked in the event of any fuckery. So I'm sticking with Vaultwarden + Official client app approach for now.

IcedRaktajino@startrek.website · 4 pts · 80d (1 reply)

I just use the webapp UI and don't bother with the clients/extensions. Easy enough to just log in, copy/paste from there.

But yeah, the official client (and probably browser extension as well) would probably be forked if/when needed.

napkin2020@sh.itjust.works · 4 pts · 80d

What about passkeys?

ripcord@lemmy.world · 1 pts · 80d

For now

meathappening@lemmy.ml · 25 pts · 80d (1 reply)

Coincidentally, I moved to self-hosting Vaultwarden last night, which is open source but compatible with Bitwarden. If you want a simple transition and are capable of hosting it yourself, that would be my recommendation.

ITGuyLevi@programming.dev · 11 pts · 80d

I've been hosting it for a couple years now and question why it took me so long.

h54@programming.dev · 21 pts · 80d (2 replies)

Proton Pass.

Joelk111@lemmy.world · 17 pts · 80d (1 reply)

I'm pretty sure that isn't self hostable.

h54@programming.dev · 2 pts · 80d

That's true.

jtrek@startrek.website · 16 pts · 80d

I use keepassxc. It does the job.

xnx@piefed.social · 5 pts · 80d

Alias vault seems the most feature complete and self hostable https://www.aliasvault.net/

Resonosity@lemmy.dbzer0.com · 3 pts · 80d

KeePassXC + Syncthing to sync passwords across devices

ColeSloth@discuss.tchncs.de · 7 pts · 80d (1 reply)

Sigh. This will be a huge pita. I have probably over 100 things saved into bitwarden. Where's a good foss alternative.

GabeN, please don't die before me.

Appoxo@lemmy.dbzer0.com · 5 pts · 79d

Cute. A hundred items :p /j

const_void@lemmy.ml · -6 pts · 80d (6 replies)

I’ve been pretty happy with Apple passwords

Appoxo@lemmy.dbzer0.com · 3 pts · 79d (5 replies)

Oh great. Let's go from an open client to a vendor closed-source lock-in.
Sometimes I am baffled by the polarity of Lemmy.
From Tryhard-only-libre-software type of users over A-bit-of-each users (but tending to sway towards (F)OSS application) over to this opinion/suggestion.

Wild.

blitzen@lemmy.ca · 4 pts · 79d (2 replies)

Vendor lock in is an issue, true, but it's a different issue than the enshittification we're starting to see from Bitwarden. Also, apple passwords isn't "locked in" per se, as passwords aren't difficult to export.

Lately, I'm starting to feel like finding good software (often FOSS but not exclusively) is increasingly a hook for later increased monetization. The 'agreement' I had with Bitwarden was they provide a solid service, and (while not required) I pay the $10/year honor system fee. That's been upped to $20 now, and now they're appearing to move away from their core principles. I won't be paying for another year.

With Apple, the unspoken agreement is I "overpay" for my hardware, and they don't have incentive to monetize me otherwise. I'll admit, there are cracks forming in that agreement, but that's my read on it currently anyway, and I think probably the person to which you are replying to as well.

Appoxo@lemmy.dbzer0.com · 2 pts · 79d (1 reply)

Your decision are sound.

Not a fan of the usability of Apple devices (I have an iPad, so I am not talking ou of my butt) but I can't deny they reduced user hostility is attractive.

blitzen@lemmy.ca · 2 pts · 79d

iPad usability is in a really weird place. It's definitely the least "usable" of Apple's platforms, and to be honest I probably wouldn't be an Apple user at all if all they had was iPadOS and iOS. macOS is still attractive to me (the Liquid Glass theme notwithstanding). For the record, I split my password manager use between Apple Passwords and [now] self-hosted Vaultwarden. Each has advantages, and while I'd like to just use one, having two is working okay for me for now.

const_void@lemmy.ml · 2 pts · 79d (1 reply)

What? Is it frowned upon here to just use what works?

floofloof@lemmy.ca · 1 pts · 79d

A lot of people chose Bitwarden because it was open-source, so they don't see the very closed Apple Passwords as a suitable alternative.

ulkesh@piefed.social · 204 pts · 80d (9 replies)

Why the fuck does everything that's good turn to shit? This world sucks. This timeline sucks.

kazerniel@lemmy.world · 87 pts · 80d (6 replies)

it's all motivated by the accumulation of wealth = capitalism

Katana314@lemmy.world · 11 pts · 80d (5 replies)

Accumulation of power is a common motive regardless of political system. Money is just one way power gets expressed.

Not claiming our system is perfect by any means. But this thought, to me, always felt like kicking the can down the road.

ContactClosure@lemmus.org · 3 pts · 79d

That might qualify as an argument but the enshittification of everything hasn't gained anyone power, only money. Cuba was curing cancer before we started more war crimes in order to prove socialism doesn't work, while we're financing fast food.

Koarnine@pawb.social · 2 pts · 79d (2 replies)

Kicking the can down the road implies you have a better solution?

Katana314@lemmy.world · 4 pts · 79d (1 reply)

A solution that stops evil people from being greedy for all of future society, gaming whatever our system is to hoard resources? No, I don't.

Whether under capitalism or socialism, either system would need frequent attention and intervention by thoughtful, socially responsible people to watch for abusers of the system.

Koarnine@pawb.social · 1 pts · 78d

Right, but Capitalism incentivises this behaviour, thus making the checks and balances required both more robust and needing to be applied for regularly - while the powerful are capable of preventing this.

On the other hand, Socialism has incentives that are completely different - managing the abusers would be a much simpler task.

kazerniel@lemmy.world · 2 pts · 78d

I think there's a difference though, in that capitalism rewards this kind of innate motive, while socialism doesn't, so I think it would be much easier to build a system based on that that's not fucked from the foundations like capitalism is. The societal benefits of capitalism always feel like an accidental side effect at most, when it should be at a heart of any economy system.

Also it definitely seems that holding power over others warps the human mind, so I would definitely advocate for distributing policy-making power as evenly across the population as possible.

ripcord@lemmy.world · 59 pts · 80d

It's not a timeline. It's just the world we keep making. The only one.

perviouslyiner@lemmy.world · 35 pts · 80d

VC ruins everything

This is literally a product where a hobbyist tried to fix a niche, and now the VCs arrive.

kazerniel@lemmy.world · 124 pts · 80d (8 replies)

reading this as someone who migrated the rest of the household to Bitwarden literally yesterday: 😒

nocturne@slrpnk.net · 37 pts · 80d (5 replies)

It took me years after the lastpass breach to get my wife and 1/3 of my kids to switch to Bitwarden. I am not looking to having to migrate again.

terabyterex@lemmy.world · 14 pts · 80d (1 reply)

but exporting is easy with bitwarden. this is annoying. after the age check laws, i have been moving off big companies because it will be bad snd i know my migration will take a bit. i finalized bitwarden a couple weeks ago and was just about to assist my family.

i would not be as upset if ram and harddtives didnt cost a mortgage right now.

nocturne@slrpnk.net · 11 pts · 80d

It does not matter how easy exporting is, the difficulty is going someone who really does not understand why they should be using a password locker to use one, much less change to a different one.

LordKitsuna@lemmy.world · 4 pts · 79d (2 replies)

You won't have to. Bitwarden is FOSS. The server is able to be self hosted so "migration" will just be you moving their account to the self hosted one if things go south

perviouslyiner@lemmy.world · 1 pts · 79d (1 reply)

Does this mean other companies are hosting compatible servers to switch to?

LordKitsuna@lemmy.world · 1 pts · 79d

I mean some may be offering that but it means you can just rent a cheap. VPS and host your own

WarmSoda@lemmy.world · 1 pts · 80d (1 reply)

What do you use it for?

kazerniel@lemmy.world · 1 pts · 78d

passwords and secure notes of recovery codes and the like

Fmstrat@lemmy.world · 91 pts · 80d (8 replies)

Luckily BW is open source, and VaultWarden exists. If they enshitify, all it takes is a fork of the browser extensions and apps with a rebrand.

phoenixz@lemmy.ca · 37 pts · 80d (3 replies)

This right here is the only answer

Companies can try to steal the app but they can only steal the name

this@sh.itjust.works · 9 pts · 79d (2 replies)

Exactly, IMO Vaultwarden should just fork the clients and extensions and officially take the lead. Bitwarden can just go the way of OpenOffice for all I care.

incompetent@programming.dev · 3 pts · 79d (1 reply)

I'm out of the loop, what happened to OpenOffice?

this@sh.itjust.works · 3 pts · 78d

OpenOffice was maintained by sun Microsystems and they were bought by oricale. At the time it was seen so negatively that a fork called libreoffice was created and almost immediately became the default office suite for most people who were using OpenOffice.

ilinamorato@lemmy.world · 4 pts · 79d

Yeah, this here is exactly the reason why anytime I have to migrate from any piece of software I'm migrating to something open source and standards compliant.

eronth@lemmy.world · 4 pts · 80d (1 reply)

How would network hosting work, though? Like... do I need to pull my passwords down now?

Fmstrat@lemmy.world · 2 pts · 79d

You can export from any of the BW clients. Then import into sepf-hosted BW or VW.

zqps@sh.itjust.works · 0 pts · 79d

Short-term, yes. Maintaining the client integrations is a ton of work. If BW ever breaks selfhosted integrations, it's gonna be a shitshow.

CompactFlax@discuss.tchncs.de · 85 pts · 80d

1Password took investor funding, moved to subscription and focusing on corporate.

Bitwarden heading the same way. Great…

KingThrillgore@lemmy.ml · 61 pts · 80d (6 replies)

This is troubling and I am going to accelerate my migration to Vaultwarden. I'm not going to leave Bitwarden yet but I saw how this played out with LastPass, and I was a happy LastPass customer until I wasn't.

anon_8675309@lemmy.world · 12 pts · 80d (5 replies)

Docker and caddy make this pretty easy. Even easier if you have a static ip and go to porkbun for a domain.

And that’s only if you wanna access it outside your network. Mostly you can get away with syncing before you leave.

potustheplant@feddit.nl · 22 pts · 80d (3 replies)

Or just use ZeroTier/Tailscale/NetBird/Wireguard and you can access your server from anywhere without exposing it to the imternet directly.

anon_8675309@lemmy.world · 5 pts · 80d (2 replies)

Yeah I know but I’d rather just expose the services I want.

potustheplant@feddit.nl · 4 pts · 80d (1 reply)

And I'd rather not deal with extra, unnecessary security concerns.

anon_8675309@lemmy.world · 12 pts · 80d

Cool. You do you and I’ll do me.

Katana314@lemmy.world · 3 pts · 80d

I should get a cheap laptop and start self hosting...

brucethemoose@lemmy.world · 57 pts · 79d (10 replies)

The company has long defined its values with the acronym “GRIT,” which used to stand for “Gratitude, Responsibility, Inclusion, and Transparency.” After May 4, it changed the acronym to stand for “Gratitude, Responsibility, Innovation, and Trust.”

It's not as bad as the headline seems. Transparency is still in the motto. The actual change is:

before

after

But still. Why change it at all? Why replace "inclusion" with "innovation"?

It smells like Tech Bro.

There's just no way to spin that positively, even giving them the benefit of the doubt, especially since they aren't rolling it back. Someone spent effort to make that values change, so its not an accident nor a "nothingburger".

Padit@feddit.org · 44 pts · 79d (4 replies)

Well, trust is literally the oposite of transparency. So i would call it quite bad, especially if you consider that right now i trust these guys with my credit card details, my taxID, all my passwords.

gnufuu@infosec.pub · 23 pts · 79d (2 replies)

Exactly. In cybersec, trust is someting you try to avoid or at least minimize. Trying to use it as a selling point is ridiculous.

floofloof@lemmy.ca · 3 pts · 79d (1 reply)

Or it's something you earn through transparency.

zqps@sh.itjust.works · 8 pts · 79d

That's what they are trying to communicate here, yes. But 8.5 million users didn't need to be told they need to trust the platform, they chose to. As did I with a premium plan to cover MFA and attachments.

Now with business types in charge and a hidden doubling of the fees, that's more than halfway out the window no matter what the website stands for. I'm guessing somebody decided it's time to cash in on the goodwill they built over the past decade.

brucethemoose@lemmy.world · 11 pts · 79d

That's a great point.

I don't want to trust them either. I don't want to have to.

The only "devil's advocate" argument I can think of is they're trying to appeal to enterprise clients (who would not know that and want to "trust" a security company). That would explain the "I" change: "inclusion" (sadly) sounds political, "innovation" is like corporate catnip. Bitwarden could be trying to attract big fish to fund development, having their cake an eating it.

brownsugga@lemmy.world · 15 pts · 79d

Removing 'inclusion' smells like a pivot to the right, same way DEI is a target for maga

drmoose@lemmy.world · 13 pts · 79d

I don't need my password manager to innovate anything. I would very much like it to include support for all of my tools and machines though.

u_u@lemmy.dbzer0.com · 5 pts · 78d

It's the change from "users" and "community members" to "customers" for me.

Seenitbefore@lemmy.world · 4 pts · 79d

Ty. So many comments here didn't see your post and others did but didn't read it. My take is innovation is a greater priority, and trust protocols. I'll watch but I'll wait for it to be a something burger.

HugeNerd@lemmy.ca · 4 pts · 79d

Because the "inclusive" part is already described by the first letter's "story"?

baggachipz@sh.itjust.works · 51 pts · 80d

“You either die the hero, or you live long enough to become the villain”

scytale@piefed.zip · 50 pts · 80d (2 replies)

Why does every good thing always have to go to shit. Sigh.

Footer1998@crazypeople.online · 12 pts · 80d (1 reply)

because capitalism

Resonosity@lemmy.dbzer0.com · 3 pts · 80d

This

SaharaMaleikuhm@feddit.org · 48 pts · 80d (5 replies)

Nothing good ever lasts. Guess that's entropy for you.

Saprophyte@lemmy.world · 20 pts · 80d (2 replies)

From the article

Update: After publication, an employee on the Bitwarden subreddit said that “Always free” had been restored on its pricing page, calling it an “oversight” by the marketing team. The product page for Bitwarden’s personal password manager remains unchanged.

Mac@mander.xyz · 16 pts · 79d

Don't care. Being owned by a private equity bro is enough for me ✌️

wraith@lemmy.demanufacture.org · 13 pts · 80d

Sounds someone was caught doing silly stuff... it will be interesting how this will develop in the future.

A_Random_Idiot@lemmy.world · 10 pts · 80d

i guess unregulated capitalism is inherently entropic.. since its utlimately a system that consumes itself until everything is gone and it dies and returns to background radiation.

dantheclamman@lemmy.world · 3 pts · 79d

It's the investor obsession with forever growth. It ruins everything.

nullPointer@programming.dev · 47 pts · 80d (7 replies)

hope this does not fuck up my vaultwarden hosting.

LedgeDrop@lemmy.zip · 18 pts · 80d (5 replies)

Narrator: ...but it did.

I'm amazed that vaultwarden has maintained such fantastic compatibility with bitwarden. ...but all it takes is one api with an obfuscated "signed request" to bring it all down.

MentalEdge@sopuli.xyz · 24 pts · 80d (3 replies)

No?

I get that clients might break, but the web portal running inside vaultwarden isn't gonna suddenly stop working.

Vaultwarden itself is self-contained. An API change won't do anything to it.

ITGuyLevi@programming.dev · 13 pts · 80d (2 replies)

Then it creates the opportunity (need) for an open sourced client, if that ever happens, I'm confident the community will come together and make one using the currently known API calls.

IPlead386@sh.itjust.works · 5 pts · 80d (1 reply)

The current (at least android) client for bitwarden is already open source (GPL 3).

LedgeDrop@lemmy.zip · 2 pts · 80d

I wasn't certain what the bitwarden clients were licensed under.

...but if they're all GPL, then yeah - it'll just get forked. Just like terraform vs opentufu. Just like MySQL vs MariaDB - it's a tale as old as time (unfortunately).

in_my_honest_opinion@piefed.social · 11 pts · 80d

Vaultwarden has a backend encrypted db and web server, with it's own API. The bitwarden clients are currently opensource so there could be a fork for the browser extension, and desktop client. Unlike 1Password, there is a good opensource base.

in_my_honest_opinion@piefed.social · 4 pts · 80d

Same

felixwhynot@lemmy.world · 44 pts · 80d

Ah shit, here we go again…

Attacker94@lemmy.world · 42 pts · 80d (21 replies)

If you're looking for alternatives and you don't care about automatic device syncing, I have been enjoying using keepassxc

9tr6gyp3@lemmy.world · 21 pts · 80d (19 replies)

If you have a cloud storage provider, and you save your keepass database to it, then you also get automatic syncing for all devices that can connect to that cloud.

redlemace@lemmy.world · -14 pts · 80d (18 replies)

Sure, i'll put my password db somewere I have zero control over, just for convenience

corvi@lemmy.zip · 40 pts · 80d (6 replies)

You would’ve already been doing that with BitWarden.

redlemace@lemmy.world · -15 pts · 80d (5 replies)

Pretty sure I don't. I don't have bitwarden.

Just keepass. On two pc's and backup to my nas.

9tr6gyp3@lemmy.world · 19 pts · 80d (2 replies)

Its like you have your own cloud storage provider.

redlemace@lemmy.world · 0 pts · 80d (1 reply)

One device on the lan ....... would not call that cloud.

9tr6gyp3@lemmy.world · 7 pts · 80d

It does a similar function though. Your devices are able to connect to it and sync a keepass db between the two. You have a solid solution IMO.

stoy@lemmy.zip · 14 pts · 80d

my nas.

Wow, talk about missing the point.

your nas is your cold storage provider

Viceversa@lemmy.world · 5 pts · 80d

Isn't the keepass db file encrypted?

kinkles@sh.itjust.works · 13 pts · 80d (5 replies)

Not everyone can self-host

redlemace@lemmy.world · 10 pts · 80d

I know. Keepass is a stand alone app. It does not need hosting.

NewNewAugustEast@lemmy.zip · 4 pts · 80d (1 reply)

You made me think about this a little bit, why couldn't someone self host?

They don't own the network, or don't even have a network to connect to. I probably vastly underestimate the people who do not control their internet connection, or simply use devices that are on cell networks.

ripcord@lemmy.world · 2 pts · 80d

There are quite a few people that have a phone and/or tablet, and no WiFi. Not many who would care about this situation, but still

in_my_honest_opinion@piefed.social · 4 pts · 80d
mnemonicmonkeys@sh.itjust.works · 3 pts · 80d

You can sync between devices securely with syncthing.

That being said, the syncthing-fork devs are refusing to get certified with Google Play (which I support) so by the end of the year you'll need a deGoogle'd phone

tabarnaski@sh.itjust.works · 8 pts · 80d

Keepassxc DB has strong encryption.

in_my_honest_opinion@piefed.social · 4 pts · 80d

Nextcloud, syncthing, sftp can all be self hosted

Asafum@lemmy.world · 2 pts · 80d (1 reply)

I'm the weirdo with the tin foil hat, but thats how I feel about ALL of these services. I don't care how secure anyone says they are.

It's incredibly inconvenient, but I have all my passwords saved as documents written in a cryptic and incomplete way so that only I know what they mean on my pc. It sucks that if I don't remember one I have to wait until I get home, but I'll never trust any of these services. EVERYTHING gets hacked eventually.

redlemace@lemmy.world · -1 pts · 80d

If you are happy with cloud services, please, go ahead. But not for me .. True. I'm having close to zero trust however safe they say it is. My choice is to have my data on my hardware that i own and control and can access 24/7.

Ps: You can't hack me, i carry around my stack of post-it's on my skin and they have medic style hand written passwords /s

Humanius@lemmy.world · 2 pts · 80d

You can selfhost your cloud storage, for instance using Nextcloud, if you want to maintain complete control

ripcord@lemmy.world · 9 pts · 80d

I do care about automatic device syncing

avidamoeba@lemmy.ca · 38 pts · 80d (2 replies)

Run.

ProtonPass is run by a non-profit if you have to move to another hosted solution.

Otherwise there's multiple self-hostable options, including plain file sync options.

Use this example as learning experience that the type of the firm you're buying a service from is very important as it changes whose interests it puts first, second and last.

9tr6gyp3@lemmy.world · 22 pts · 80d

Non-profits do not always remain non-profits, and can become for-profit entities. Being a non-profit is not a reason to move to proton IMO, but Proton should be a decent temporary option if Bitwarden becomes aggressive to the open-source ecosystem.

manysidesofmatt@lemmy.world · 10 pts · 80d

My health insurer is a non-profit but they're still a bag of money hungry dicks.

resolute_clover@sh.itjust.works · 38 pts · 80d (2 replies)

They took the VC money

architect@thelemmy.club · 0 pts · 79d

Id take it, too.

People need to understand that if they wait for everyone to do the right thing we are all going to be fucked.

sunbeam60@feddit.uk · 0 pts · 79d

They all do, eventually.

iturnedintoanewt@lemmy.world · 35 pts · 79d (5 replies)

Update: After publication, an employee on the Bitwarden subreddit said that “Always free” had been restored on its pricing page, calling it an “oversight” by the marketing team. The product page for Bitwarden’s personal password manager remains unchanged.

iuseasahibtw@ani.social · 55 pts · 79d (3 replies)

Oversight

Appoxo@lemmy.dbzer0.com · 23 pts · 79d (2 replies)

They got community checked and backtracked hard... I have always endorsed bitwarden but that is becoming worrisome. :(

Tiral@lemmy.zip · 20 pts · 79d

Yeah, you know those marketing team people. They totally went out of their way to make more work for themselves to change it with I'm sure zero instructions from higher up to do so.

architect@thelemmy.club · 10 pts · 79d

Getting hard to endorse anyone you don't personally know at this point.

Bloefz@lemmy.world · 18 pts · 79d

We're sorry we got caught

boelder@lemmy.world · 32 pts · 80d

Enshitification marches on.

jqubed@lemmy.world · 32 pts · 80d (1 reply)

I wonder how much the new choice of CEO was up to the founder versus the venture capital investors. I’m assuming the investors had the main input.

kazerniel@lemmy.world · 22 pts · 80d

And this is why every time a tech company raises venture capitalist funding, it's almost inevitably on the road to enshittification, as the ones holding the pursestrings only care about what profit they can extract from the company over the next few years.

It needs a conscious effort from companies that are small but successful to stay that way, to keep their size and business model sustainable, and their mission connected to the interests of their users. From the top of my head I know Obsidian does it this way (fully user-funded), but there are probably others too.

iuseasahibtw@ani.social · 30 pts · 80d (1 reply)

Well, it was fun while it lasted, lol.

dantheclamman@lemmy.world · 1 pts · 79d

I've long wondered when this was going to happen. Their investors must have been frustrated about the lack of revenue per user growth (eg, screwing us over with annual price hikes and removing features from free plan)

new_world_odor@lemmy.world · 26 pts · 79d (5 replies)

Ah for fuck's sake. Seems like every month I have to change something because some fucking company starts getting a taste for greed via data sucking. I'm goddamn sick of it.

spacehulk@lemmy.zip · 9 pts · 79d

Enshitification

kuerbiskernoel@feddit.org · 6 pts · 79d

That's why you use open source alternatives everywhere :) just replace one at a time when the company fails

Amir@lemmy.ml · -10 pts · 79d (2 replies)

Start using open source then

new_world_odor@lemmy.world · 14 pts · 79d

Unprompted snark from an .ml user, how surprising. I am a bigger cheerleader for open source than any of my friends or family. It's the only real path to stay free of corporate influence, greed, and spying (in regards to software). Live free or die.

Bitwarden is, by definition, open source. It has been since I started using it ~6 years ago. I'm tired of literally everything having the potential for enshittification. Nothing is safe in the long run, not even volunteer-run projects. If you think your favorite project is safe because of some "core ethos" or "guiding principles", you're just drinking the kool-aid. As long as we exist under capitalism, anything under the sun can be enshittified.

I will never give up, even if things seem even more dire than they are now. But I'm tired of having to maintain constant vigilance.

zqps@sh.itjust.works · 4 pts · 79d

Troll better.

NGC2346@sh.itjust.works · 26 pts · 80d (5 replies)

I feel like switching to self hosted vaultwarden was one of my best moves of the year

codapine@lemmy.zip · 5 pts · 80d (2 replies)

Been planning to do this just because; now it seems it's strictly necessary.

Gotta figure out how docker, containerization and all that jazz works. I have an account with hetzner but just web/sql hosting and a managed Nextcloud instance - no vps yet.

Seems like a Saturday project that I hope I can get round to.

KingThrillgore@lemmy.ml · 2 pts · 80d (1 reply)

I tried for it today on an LXC at home but its proving to be a pain in the ass due to my DNS provider, DreamHost. I'll figure it out later, but this isn't as turnkey as I had hoped.

codapine@lemmy.zip · 1 pts · 77d

For anyone else in the same boat as me, this is the official Hetzner tutorial on setting up vaultwarden. I'm going to try it at the weekend. I already have the prerequisites taken care of once I order my hetzner server:

  • hetzner account and server
  • resolvable domain name
  • smtp server access

Good luck all, link is below.

https://community.hetzner.com/tutorials/how-to-set-up-vaultwarden

nutcase2690@lemmy.dbzer0.com · 3 pts · 80d

I just tried it and it took me 5 minutes, since I use yunohost Just add app, setup admin account, invite myself, then import my bitwarden.org vault (after password encrypting the json export, of course)

skeezix@lemmy.world · 1 pts · 80d

Same. But it’s an ugly UX. I liked keepassxc UX better.

grrgyle@slrpnk.net · 25 pts · 80d

Was good while it lasted. Thanks for getting me off LastPass. See ya

zebidiah@lemmy.ca · 24 pts · 79d (3 replies)

I guess it's time to move to vaultwarden sooner rather than later.... This wasn't supposed to be the weekend project, but fuck it; let's roll with it!

Jason2357@lemmy.ca · 10 pts · 79d (2 replies)

My question is move to vaultwarden, and trust they will still develop the open source client apps, or just preemptively move to another system. The UX isnt perfect, but it seems a lot easier to use than kerpassxc. Time to do some research.

dogs0n@sh.itjust.works · 4 pts · 79d (1 reply)

Very easy to migrate to vaultwarden from bitwarden I think, so I'd probably do that and hope the clients are forked if ever needed. I'd probably just live with vaultwardens web ui before swapping completely to keepassxc (because setting up keepass db sync to all devices manually doesn't sound fun).

derpgon@programming.dev · 1 pts · 79d

No personally using KeePass, but I've heard Syncthing is great to sync the database. Might wanna try to look into that.

mintiefresh@piefed.ca · 24 pts · 80d (1 reply)

ugh... This is worrying.

All good things come to an end at some point I guess.

badgermurphy@lemmy.world · 1 pts · 79d
[ removed ]
whelk@retrolemmy.com · 20 pts · 80d (3 replies)

I knew trouble was brewing when they started adding the little corporate cute waving graphics and stuff to the UI. Glad I already migrated away

minkymunkey_7_7@lemmy.world · 15 pts · 80d (2 replies)

What are u using? I just got onto Bitwarden and set up all my credentials there!

ptu@sopuli.xyz · 4 pts · 79d

I was about to and also interested

whelk@retrolemmy.com · 1 pts · 77d

I'm just using pass on Linux. Haven't figured out a good way to access my passwords through it on mobile yet, but I avoid using my smartphone when at all possible so I haven't been particularly motivated to find a solution to that

big_slap@lemmy.world · 17 pts · 80d

oh great, now I have to research what the next best alternative is

MSids@lemmy.world · 16 pts · 80d (7 replies)

Proton pass has been fine for me. I don’t care that the one Proton guy said the one thing that time, I’m out of energy and it’s good enough.

huppakee@lemmy.world · 7 pts · 80d (2 replies)

Another happy proton pass user here, i do care about what that one guy said but not enough to switch to another service. Not foss, but it's definitely a good enough thing for me.

MSids@lemmy.world · 9 pts · 80d (1 reply)

Yeah I think you said it better. If I boycotted every company that employs one person I disagree with I would be self hosting everything. Proton represents the best in privacy-focused non-Google/Microsoft hosted email and productivity services. There are numerous reasons that we should want to see them succeed if even just to take some market share from Google.

stephen01king@lemmy.zip · 4 pts · 80d

There's kind of a difference between an employee and a CEO.

whelk@retrolemmy.com · 7 pts · 80d

Proton seems okay still at the moment, but with their growing in scope and success I imagine it's only a matter of time

village604@adultswim.fan · 4 pts · 80d

It's just annoying on Android because it often struggles if there's a "remember me" checkbox. And there aren't separate fields for username and email.

Appoxo@lemmy.dbzer0.com · 1 pts · 79d (1 reply)

Are they OSS?
What do they do differently than BW?

To me, they are just another vendor that seem very corpo

MSids@lemmy.world · 2 pts · 79d

Googled it: Proton operates under a unique hybrid model. Its core services (such as Proton Mail and Proton VPN) are run by a for-profit Swiss corporation, Proton AG, but the primary voting shareholder is the non-profit Proton Foundation.

This structure was designed to permanently put people before profits and protect the company from hostile takeovers or venture capital control. While the foundation ensures the company never deviates from its privacy-first mission, Proton AG must remain profitable to be fully independent and self-sustaining without relying on subsidies.

DarkSpectrum@lemmy.world · 16 pts · 79d

Self hosting is the new battefront for the individual's right to sovereign data

dadarobot@lemmy.ml · 16 pts · 80d (5 replies)

is proton pass good?

theherk@lemmy.world · 18 pts · 80d (4 replies)

Yes. If you’re looking for a cloud solution, Proton Pass is quite good. I switched from Bitwarden about 6 months ago. Works great.

chris@links.openriver.net · 6 pts · 80d

Completely agree. I couldn’t be happier with Proton Pass.

scytale@piefed.zip · 4 pts · 80d (2 replies)

I just tried it out and imported my Bitwarden vault. Does Proton Pass really not have folders? Or is that a paid feature?

theherk@lemmy.world · 4 pts · 80d (1 reply)

They are called vaults but they are sort of a facsimile.

scytale@piefed.zip · 4 pts · 80d

Yeah I assumed as much. But then it appears there's a limit of 3 vaults for free users. I get it, beggars can't be choosers, but man, a simple folder feature like Bitwarden has for free would be nice.

m33@lemmy.zip · 16 pts · 80d

How long before they go full lastpass like in 2023 ?

#leakpass #lastpass #neverforget

reksas@sopuli.xyz · 14 pts · 79d (2 replies)

why even have "Motto" if you are just going to renege on it.

badgermurphy@lemmy.world · 13 pts · 79d (1 reply)
[ removed ]
reksas@sopuli.xyz · 6 pts · 79d

though this also points out why such things as companies having "values" is laughable and should be ridiculed if they arent clearly enforced. All they do is scam people into thinking they might not be explitative shits which shouldnt be allowed or looked kindly upon.

So many people have to switch services now and even more will just become victims of the company after it becomes more shitty. All those people could have used some other service that is less likely to go shitty, which in turn would have given it more resources to improve.

wraith@lemmy.demanufacture.org · 13 pts · 80d (1 reply)

Experienced this with 1 Password. Experienced this with Enpass in another way. Really doesn't want to experience this with Bitwarden especially because of self-hosting. Let's hold thumbs but, apparently, it was fun while it lasted...

Robust_Mirror@aussie.zone · 0 pts · 79d

I'm curious what your problem with enpass was? I got lifetime cheap back when lastpass went to hell and as far as I can tell with Wifi sync they could go out of business entirely and I could still use it.

Anberibaburia@lemmy.dbzer0.com · 13 pts · 80d (5 replies)

Where do I go if I want to move? Must have free tier and cloud sync (or when my devices are online they sync automatically). Suppose I'm gonna look into proton.

Shayeta@feddit.org · 3 pts · 80d

For the last 10 years I've been using KeepassXC file + nextcloud/cloud of your choice.

Desktop and mobile apps available. Browsers have extension for it for password fill.

It's just a password-locked file that's synced between devices. Simple, not dependant on any third party services.

CosmicTurtle0@lemmy.dbzer0.com · 2 pts · 80d (2 replies)

I use Dashlane myself. It's free tier is 10 logins which is a bit of a joke.

I like Keepass and do use it for my non-critical stuff. I sync using syncthing

Edit: Dashlane no longer offers a free tier.

Appoxo@lemmy.dbzer0.com · 1 pts · 79d (1 reply)

10 login entries or simultaneous user logins??

CosmicTurtle0@lemmy.dbzer0.com · 1 pts · 79d

They no longer provide a free tier. It was 10 login entries and I think 5 simultaneous logins.

huppakee@lemmy.world · 0 pts · 80d

I'm happy with proton but can't tell you if the free tier is good enough for you. Worth taking into consideration for sure if you ask me.

SocialMediaRefugee@lemmy.world · 11 pts · 79d

"Equity" or "Capital" = the kiss of death

wuphysics87@lemmy.ml · 11 pts · 80d

Fuuuuuuck

determinist@kbin.earth · 11 pts · 80d (8 replies)

Anyone have any idea how this affects Vaultwarden, if at all?

CountVon@sh.itjust.works · 22 pts · 80d (5 replies)

I think the short answer is that it doesn't. VaultWarden is currently open source, and no private equity organization can put the genie back in the bottle. If things get really bad then someone would likely fork the open source bits and maintain a pure open source version, in which case there would likely be a procedure to migrate existing VaultWarden installs to the purely open source successor. I don't think VaultWarden users need to be overly concerned at this point.

in_my_honest_opinion@piefed.social · 7 pts · 80d (2 replies)

The fork would have to be a browser integration as the bitwarden extensions and desktop apps are the bitwarden part. Vaultwarden as the backend self-hosted db and webapp is opensource.

Edit: bitwarden clients are not yet closed source

Sickday@kbin.earth · 4 pts · 80d (1 reply)

Seems like the clients are at least source-available? https://github.com/bitwarden/clients

in_my_honest_opinion@piefed.social · 2 pts · 80d

For now... That's what would be forked, thanks for the correction

sorghum@sh.itjust.works · 7 pts · 80d

It won't stop them from trying though. Just look at what Bambu is doing.

determinist@kbin.earth · 2 pts · 80d

I thought the same, just wanted some reassurance :))

SnoringEarthworm@sh.itjust.works · 4 pts · 80d (1 reply)

Short-term, no change.

Medium- and long-term, Bitwarden could cut off access to their clients and go closed source.

Hopefully, Vaultwarden devs take advantage of the early warning and prepare contingencies for if when Bitwarden crosses the point of no return.

stephen01king@lemmy.zip · 2 pts · 80d

Aren't Bitwarden clients open-source?

BackgrndNoize@lemmy.world · 10 pts · 79d (1 reply)

Great I bought a paid subscription for it all this time for it to end up like this, I'm done with anything that is not self hosted now on, I'll just convert my old laptop into a home server

AvocadoCumToast@lemmy.zip · 6 pts · 79d

This. At this rate everything that has growth and not open source is just a resource to exploit.

bitwolf@sh.itjust.works · 10 pts · 79d

If things turn for the worse, hopefully Vaultwarden can fork the client as well

thoralf@discuss.familie-will.at · 9 pts · 80d

Time for a dedicated vaultwarden client?

VirtuePacket@lemmy.zip · 9 pts · 79d

Gr8. Yet another critical service soon to be gobbled up by PE. I guess I'm moving to Proton Pass.

Tramort@programming.dev · 9 pts · 79d (6 replies)

Get out now

Try keepass on self hosted sandstorm

dantheclamman@lemmy.world · 5 pts · 79d (2 replies)

Can keepass do passkeys?

mxanew@lemmy.ml · 3 pts · 79d

It does but some of my passkeys didn't work after migrating my bitwarden database

Tramort@programming.dev · 2 pts · 79d

I don't think so, but sandstorm can as of a few weeks ago (might not be in main branch yet)

ButtDrugs@lemmy.zip · 4 pts · 79d (1 reply)

I just went all in to bitwarden 🙃. Not ready to change again just yet but will be ready probably once it starts going to shit.

zqps@sh.itjust.works · 2 pts · 79d

I upgraded to premium last year. Never heard about the price increase until this article. But frankly the change in leadership is more concerning to me than that.

Bloefz@lemmy.world · 3 pts · 79d

Well, it could be forked of course. The self-hosted version at least.

Brewchin@lemmy.world · 9 pts · 80d (2 replies)

As long as they don't enshittify the mobile apps and browser extensions, I'm neither surprised nor concerned. Vaultwarden exists.

And if they do ruin the client end, I expect third-party alternative clients, or a wholly new alternative, will appear soon enough.

(Yes, yes, "b-but KeePass!" folks... I've been there.)

empireOfLove2@lemmy.dbzer0.com · 13 pts · 80d (1 reply)

As long as they don’t enshittify

lol you don't know how this works yet

Its never an if, its a when. And that when is VERY soon.

whelk@retrolemmy.com · 4 pts · 80d

I hate that I upvoted this, but it's the frustrating truth

nimrod06@lemmy.ml · 8 pts · 80d (12 replies)

Why people bother with any corporate software when it really don't provide much more than completely FOSS alternatives

LordKitsuna@lemmy.world · 27 pts · 79d (7 replies)

Bitwarden is completely FOSS, both client and server

nimrod06@lemmy.ml · 2 pts · 79d (6 replies)

Not if you are being strict with the definition of FOSS.

Appoxo@lemmy.dbzer0.com · 8 pts · 79d (5 replies)

Free and open source
Is free? Yep
Is OSS? Yep

Is it full libre? I think not, right? And I assume that is your actual issue with it?

nimrod06@lemmy.ml · 13 pts · 79d (4 replies)

FOSS is a standardized term. As the Free Software Foundation defines it:

Free and open-source software (FOSS) is software available under a license that gives users the right to use, share, modify, and distribute the software – modified or not – to everyone and provides the means to exercise those rights using the software's source code.

You are not granted right to modify or distribute Bitwarden. You can inspect and use that to build your own. That is what Vaultwarden does.

Pyrodexter@lemmy.world · 5 pts · 79d

Well, the client code is liensed GPL 3.0 and server code is licensed AGPL 3.0, and those are both FOSS licenses. There are some additional commercial components licensed under a non-FOSS source-available license, but those are not required for the basic service. I guess you can't use the Bitwarden trademark either. I would still consider Bitwarden FOSS, although with a slightly limited (but not crippling) scope of the term "Bitwarden".

Appoxo@lemmy.dbzer0.com · -1 pts · 79d (2 replies)

So you wanna say it's Source-Available, yes?

nimrod06@lemmy.ml · 9 pts · 79d (1 reply)

All I say is that it's not FOSS in the strict sense.

Jason2357@lemmy.ca · 3 pts · 79d

Neither the OSI definition, nor the FSF definition require you to allow your trademark to be used freely, nor do they require you to only host FOSS software for your FOSS software to qualify as such. The client and server software published as GPL and APL qualify as FOSS by both orgs that define the term. Vaultwarden is better for self hosting specifically because it is superior software for self hosting.

VirtuePacket@lemmy.zip · 12 pts · 79d (3 replies)

It is FOSS.

And securely hosting a password manager that is accessible over WAN links is beyond the capability of most users.

nimrod06@lemmy.ml · 0 pts · 79d (2 replies)
  1. FOSS includes distributive right. Bitwarden is not.
  2. I agree self hosting maybe hard, but one could always go for KeepassXC with any generic cloud storage.
Bluewing@lemmy.world · 5 pts · 79d (1 reply)

What generic cloud storage do you trust?

hamid@crazypeople.online · 3 pts · 79d

It is an encrypted file using AES-256 so unless your threat model is state actors dedicating a data center to brute forcing it, it's probably ok mostly anywhere.

Takios@discuss.tchncs.de · 8 pts · 80d

Glad I didn't let myself get talked into switching to Bitwarden from my boring KeepassXC setup...

DarrinBrunner@lemmy.world · 8 pts · 80d (4 replies)

This was the headline that finally prompted me to figure out why KeePass wasn't working on Librewolf.

(KeePass doesn't work with the flatpak version of Librewolf, you need to install it through terminal.)

resolute_clover@sh.itjust.works · 1 pts · 80d

It does work with some effort, even the flatpak version. I recall finding a github issue about it and then with some trial and error, it works.

nimrod06@lemmy.ml · 1 pts · 80d (2 replies)

I figured you have to layer the browser on the system. The KeePassXC can stay flatpak. That's how it worked for me. You always want to have one browser layered, anyways.

DarrinBrunner@lemmy.world · 3 pts · 80d (1 reply)

I don't know what this means, "... one browser layered..." I suppose I can search it... sigh, something else to figure out.

nimrod06@lemmy.ml · 1 pts · 80d

That means you want one browser to be not flatpak, in most distros the default is Firefox, but it's up to you to change.

PearOfJudes@lemmy.ml · 7 pts · 79d

I use proton pass because I our a subscription to proton unlimited and proton pass lets me hide my emails by making a forwarded email which is helpful.

pseud@lemmy.zip · 7 pts · 80d (5 replies)

The standard unix password manager, people.

There's almost no password manager to it.

Evotech@lemmy.world · 8 pts · 80d (4 replies)

Mobile?

dafta@lemmy.blahaj.zone · 3 pts · 80d
pseud@lemmy.zip · 3 pts · 80d (1 reply)

Yes.

Or Termux, if you insist.

Or just save the 3 passwords you actually need on the phone into Firefox password manager, or Vanadium, or whatever.

Evotech@lemmy.world · 2 pts · 79d

3 passwords. Optimistic

forgetful_fox@lemmy.world · 1 pts · 80d
[ removed ]
motruck@lemmy.zip · 7 pts · 79d

This is not great but the strength of vaultwarden on the back of the bitwarden brand will give us forked clients as soon as they stop allowing self-hosters to set their instance.

victorz@lemmy.world · 6 pts · 80d

Goddammit.

shapis@lemmy.ml · 5 pts · 80d

Moved to proton pass a while ago. Bitwarden support is just shit.

jjlinux@lemmy.zip · 5 pts · 79d

I guess I won't be recommending Botwarden to normies anymore.

spaghettiwestern@sh.itjust.works · 5 pts · 80d

Let the enshittification begin.

wltr@discuss.tchncs.de · 5 pts · 80d (6 replies)

I use Pass, and I’m tired of laughing at all these posts. Now I’m just ‘oh, again, what a surprise!’

My passwords are gpg-encrypted and stored in a git repository. The only improvement I can do is to migrate to my own server instead of GitLab (which I setup like a decade ago), but there’s some inertia as GitLab just works for now. And I see no real point of doing so.

The structure is open, but you can encrypt it with the external tools if needed. I have zero understanding of the attack vector when my password file name is Gmail or Proton or Server/1. Good luck doing something with it.

ripcord@lemmy.world · 9 pts · 80d (1 reply)

I use Pass, and I'm tired of laughing at all these posts

Shut up, nerd

wltr@discuss.tchncs.de · -4 pts · 80d

Yeah, I’m not that loud as the other guys who keep praising some obviously stupid solutions like 1Password or I don’t know, BitWarden. And then one day … surprise surprise!

Keepass’ derivatives may be worth a look, but I don’t like it either. For most people a built-in solution iPhones provide is actually better than all this shit. If you’re on Android, good luck. Write your own if you don’t like pass.

Peruvian_Skies@sh.itjust.works · 4 pts · 80d (3 replies)

Is there an Android solution that works with Pass?

Miaou@jlai.lu · 4 pts · 80d (1 reply)

On fdroid there is, but this is a fork from some "random" person after the original dev abandoned the project.

https://f-droid.org/packages/app.passwordstore.agrahn

Peruvian_Skies@sh.itjust.works · 1 pts · 80d

Thanks

wltr@discuss.tchncs.de · 0 pts · 80d

As the other reply goes. I am not sure I even care whether the app is updated, I believe some software can stay finished if it’s simple enough.

billwashere@lemmy.world · 4 pts · 79d (2 replies)

So does this affect vaultwarden at all?

Jason2357@lemmy.ca · 4 pts · 79d

Vaultwarden benefits from the development ideas in Bitwarden server, and especially the client app ecosystem that I am sure costs a small fortune to maintain. To go alone, vaultwarden will have a lot of work ahead of them and need to maintain a development community capable of maintaining the whole thing.

BugKilla@lemmy.world · 1 pts · 79d

It will as there is not an VW official OS client nor browser plugin. It is undoubtedly a fucked state of affairs.

1984@lemmy.today · 4 pts · 79d

Always happens eventually. You can run Vaultwarden yourself if you have a homelab you trust so passwords never disappears.

TheFeatureCreature@lemmy.ca · 4 pts · 80d

Looks like I'm moving over to something else now.

okmko@lemmy.world · 4 pts · 80d (1 reply)

Fucking shit it's time to migrate again isn't it?

fuck_u_spez_in_particular@lemmy.world · 2 pts · 79d

There's vaultwarden, I don't think it's difficult to migrate to that.

xnx@piefed.social · 4 pts · 80d

I learned about alias vault recently and it seems to check all the boxes i would need. Self hostable and automatic sync and maintained with apps on all platforms https://www.aliasvault.net/

hperrin@lemmy.ca · 4 pts · 80d (4 replies)

I wonder if Vaultwarden is safe.

Dialectical_Specialist@quokk.au · 1 pts · 80d (3 replies)

I'm also curious of this, but I also don't fully understand what everyone is assuming is going to happen next? I don't like this but why is everyone saying run now?

atrielienz@lemmy.world · 9 pts · 80d (1 reply)

At a best guess it's because up until now Bitwarden was conducting public audits.

This meant people could check their work and also highlight problems if they were found.

That's part of being fully transparent.

Changing that language may mean changing that transparency and that's bad because it means the public will have a harder time holding the company accountable if something is wrong.

in_my_honest_opinion@piefed.social · 6 pts · 80d

It's the first step in going closed source. Time to fork.

hperrin@lemmy.ca · 3 pts · 80d

Basically nothing survives private equity. So a CEO who’s all about private equity is a dead canary in a coal mine.

John_CalebBradberton@lemmy.world · 3 pts · 79d

How good or bad is a move to Proton Pass?

WorldsDumbestMan@lemmy.today · 3 pts · 78d

I swear, equity is literaly just pure evil, allowed to thrive only due to lack of force opposing it.

pwxd@lemmy.zip · 3 pts · 78d

Great. Now I have to move all of my password to another services because of a stupid decision made by a company.

Solrac@lemmy.world · 3 pts · 80d (3 replies)

WHERE is this CEO from?

M33@piefed.world · 1 pts · 78d (2 replies)

Oracle?

Solrac@lemmy.world · 1 pts · 77d (1 reply)

Seriously? That would means potential ties to the genocidal creeps

M33@piefed.world · 2 pts · 77d

That just remind me how good stuff can go horribly wrong in the hands of such great persons. Like Oracle’s CEO years ago.

wuphysics87@lemmy.ml · 2 pts · 80d

It's still glp though so how shitty can it be?

webkitten@piefed.social · 2 pts · 80d (1 reply)
[ removed ]
Footer1998@crazypeople.online · -4 pts · 80d

Canada is part of five eyes and is functionally a US vassal. There's little difference between a Canadian tech company and an American tech company.

This also goes for most NATO countries

sudoMakeUser@sh.itjust.works · 2 pts · 80d (2 replies)

I have also been getting popup ads every time I login now. It started a few months ago. Annoying but I'm using their hosting service so I can't really complain.

ripcord@lemmy.world · 3 pts · 80d (1 reply)

I have been giving them $20 per year because nothing is free

oppy1984@lemdro.id · 2 pts · 80d

Same, I have the yearly subscription not because I use the features but because I want to support the project.

I'll leave the subscription for now, but the second they start LastPassing things up I'm cancelling the subscription.

Also my start 9 has VaultWarden as an official app, I just haven't seen the need to get it setup, now I do. I guess I know what I'm doing this weekend....

4grams@awful.systems · 1 pts · 79d
[ removed ]
Tenderizer@aussie.zone · 1 pts · 77d

I just installed Bitwarden because 979 2FA started refusing to show my codes unless I set up a password and fingerprint (and fails when I try anyway). Now to find something else I guess.

FreddiesLantern@leminal.space · 1 pts · 80d

Edit: wrong comment section ¯\_(ツ)_/¯