Bitwarden's new CEO has a Private Equity background, removed 'Inclusion' and 'Always Free' from their website -- because of course he did
In the latest episode of "they will always sell you out" - they sold you out! Who would've thought.
Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can't exist without "leeching" off of Bitwarden.
Dieser Beitrag wurde bearbeitet. (Freitag, 15. Mai 2026, 21:36)
mögen das
evil_andy
Als Antwort auf German The Jackal • • •mögen das
Get_Off_My_WLAN und fistac0rpse mögen das.
Otter
Als Antwort auf German The Jackal • • •I think the original title was more helpful because it shows that this is a recent development. Maybe you can add "new CEO"?
mögen das
Get_Off_My_WLAN, FerCR, IAmLamp, fistac0rpse und deliriousdreams mögen das.
German The Jackal
Als Antwort auf Otter • • •Shortstack
Als Antwort auf German The Jackal • • •That’s troubling, I don’t like what this portends.
The new CEOs background especially suggests they’re spiffing up the company for a later sellout, why else would they pick a merger specialist for the role?
mögen das
Get_Off_My_WLAN, IAmLamp, Quantumantics, slothbear, fistac0rpse und deliriousdreams mögen das.
irmadlad
Als Antwort auf German The Jackal • • •bitwarden.com/pricing/
I kind of find the headline a bit disingenuous. However, if they do move to a non-free model, I'd still pay for it. I mean $1.65/Month USD. Sure, I don't even have to think about it.
Bitwarden Password Manager Pricing & Plans | Bitwarden
BitwardenBluegrass_Addict
Als Antwort auf irmadlad • • •yeah fuck that... fuck subscriptions ALL OF THEM. fucn these companies, ALL OF THEM.
stop giving any of these pricks any slack. none of them deserve it, nor money.
today it's 1.65... tomorrow it's 4.99... next week it's 12.99.. stop being a mindless sheep giving them any sort of leeway. you're enabling the scammers to literally scam you more, and more and more.
I'm relocating all my shit right now because we'll.. fuck em. I am loyal to NO COMPANY. none of them deserve anything but bankruptcy at a minimum.
mögen das
quirkyquark mag das.
irmadlad
Als Antwort auf Bluegrass_Addict • • •'Mindless sheep'. That's hilarious. But I get it. Nobody likes to pay for shit.
mögen das
deliriousdreams mag das.
Skeezix
Als Antwort auf irmadlad • • •irmadlad
Als Antwort auf Skeezix • • •mögen das
deliriousdreams mag das.
Skeezix
Als Antwort auf irmadlad • • •irmadlad
Als Antwort auf Skeezix • • •There are a handful of things I do not self host.
mögen das
fistac0rpse und deliriousdreams mögen das.
iamthetot
Als Antwort auf Bluegrass_Addict • • •I've cut down my subscriptions by a lot over the past few years, and I've gotten very close to what I consider a minimum. Whenever possible, I like to buy outright.
However, surely you can understand how not every product can function as a one time purchase. For something like a password manager, they are providing an ongoing service. They are storing and serving your data.
You can self host, sure, and I'm doing a lot of that lately. But not everyone has the capacity or desire to.
All that said, this leadership shakeup is concerning and I think I'll be migrating to Proton, since I already have a Duo plan.
mögen das
fistac0rpse und deliriousdreams mögen das.
Flagstaff
Als Antwort auf iamthetot • • •hellmo_luciferrari
Als Antwort auf Bluegrass_Addict • • •I am totally in line with not agreeing with everything being a subscription. And I absolutely dont agree with subscription creep.
So I minimize what I pay for. And let me say, in no means am I defending the change in Bitwarden here. I would never.
It isn't a realistic expectation to expect any hosted service to be free. Especially in capitalism. Someone will come along and fuck with pricing.
Not everyone has the time, knowledge, or finances to fund self hosting everything.
But to automatically assume everyone is a sheep for using a service that benefits them is a bit of a jump.
Yes, I myself value privacy, security, and the merits of self hosting as much as I can with my resources. And I have had conversations with people on these topics, and there are the folk that lack the understanding of the importance of the hill many of the folk like me stand on. So I have seen the wide spectrum of people who pay for services.
Wild take dude.
yAlL aRe ShEeP blah blah blah...
mögen das
deliriousdreams mag das.
TheTrueColonel
Als Antwort auf irmadlad • • •irmadlad
Als Antwort auf TheTrueColonel • • •deliriousdreams mag das.
German The Jackal
Als Antwort auf TheTrueColonel • • •phx
Als Antwort auf irmadlad • • •irmadlad
Als Antwort auf phx • • •That is totally awesome and cool bro. You'll never hear me throw shade on someone for charting their own course in life or choosing a different path. In fact, to drop a little relevant Hendrix up in here:
"I'm the one who has to die when it's time for me to die. So, let me live my life the way I want."
As long as my life doesn't interfere with your life, we'll be just jippity jippity. Rock on! Git sum! It's a big world. We can all coexist.
Mister_Hangman
Als Antwort auf German The Jackal • • •baduhai
Als Antwort auf Mister_Hangman • • •Scott
Als Antwort auf baduhai • • •Flagstaff
Als Antwort auf Scott • • •RonnyZittledong
Als Antwort auf German The Jackal • • •mögen das
Quantumantics und slothbear mögen das.
tordenflesk
Als Antwort auf RonnyZittledong • • •duckshuffgoose
Als Antwort auf tordenflesk • • •IncogCyberSpaceUser
Als Antwort auf duckshuffgoose • • •slate
Als Antwort auf RonnyZittledong • • •zeitverschreib ⁂
Als Antwort auf slate • •@slate
Wasn't there some commotion a few weeks about KeepassXC and vibe coding?
@RonnyZittledong
mögen das
yessikg mag das.
Selfhosted hat dies geteilt.
Dumhuvud
Als Antwort auf zeitverschreib ⁂ • • •ChiPass
Codeberg.orgmögen das
yessikg und potatoguy mögen das.
Viceversa
Als Antwort auf Dumhuvud • • •Dumhuvud
Als Antwort auf Viceversa • • •wiccan2
Als Antwort auf Dumhuvud • • •wiccan2
Als Antwort auf Dumhuvud • • •HappyFrog
Als Antwort auf wiccan2 • • •ChiPass
Codeberg.orgDumhuvud
Als Antwort auf wiccan2 • • •blackbrook
Als Antwort auf zeitverschreib ⁂ • • •eightys3v3n
Als Antwort auf slate • • •Flagstaff
Als Antwort auf eightys3v3n • • •eightys3v3n
Als Antwort auf Flagstaff • • •Not breaking the world if two people try to modify the same entry as some file syncing solutions do.
Flagstaff
Als Antwort auf eightys3v3n • • •FreedomAdvocate
Als Antwort auf Flagstaff • • •You know why most cloud based services charge money? For stuff like this, because it’s not free to implement and maintain.
Easy and fault-proof password sharing and syncing needs software and hardware to do. You either set it up and maintain it yourself, or pay for a product that does it - like Bitwarden.
Flagstaff
Als Antwort auf FreedomAdvocate • • •captcha_incorrect
Als Antwort auf Flagstaff • • •I’d say that goes under
and
Flagstaff
Als Antwort auf captcha_incorrect • • •eightys3v3n
Als Antwort auf Flagstaff • • •It's not just that we need to be able to share credentials the once a blue moon I need to help them by logging into their account?
Flagstaff
Als Antwort auf eightys3v3n • • •eightys3v3n
Als Antwort auf Flagstaff • • •I have credentials shared with my parents passwords managers (and others) so when they ask for help with a service I can do it remotely for the services they want help with, but not their whole password manager.
I share company passwords in an organization so I can manage user accounts for things a user needs into but doesn't want to manage (I can change the Snowflake password but they can still login).
I share common passwords with everyone in the house (gate codes, door codes, etc). Then when they need to change, no one is bothered or needs to take action. Also, then anyone can change it and everyone who should have the new one, does.
Appoxo
Als Antwort auf Flagstaff • • •Licensing for instance where each user costs money and not all users need a dedicated account to look at something of which only 1% is of importance to them.
Flagstaff
Als Antwort auf Appoxo • • •Viceversa
Als Antwort auf Flagstaff • • •Flagstaff
Als Antwort auf Viceversa • • •frongt
Als Antwort auf eightys3v3n • • •Sure they do. Multiple people can have a file open at the same time. I use it for exactly this every day at work.
With KeePassXC, that is. I don't know if other flavors have different support. I use XC primarily for the browser extension.
eightys3v3n
Als Antwort auf frongt • • •And you can share only parts of your vault with someone rather than having entirely different vaults you have to switch between?
I'm assuming you mean putting the file somewhere like Google Drive, and you can access it offline even if you can't edit it offline? For feature parity with Bitwarden, obviously ideally one could edit any time and it would resolve problems when it came back online if there were any but Bitwarden doesn't allow this.
frongt
Als Antwort auf eightys3v3n • • •Yes, no conflicts. I don't know if you can only share part of vault; I just created a separate one for a separate team.
I wouldn't put it in Google Drive or anything like that. The separate sync logic will definitely cause conflicts.
I'm not worried about having access if I'm offline, because if I'm offline I'm not going to be able to log into anything anyway.
eightys3v3n
Als Antwort auf frongt • • •Like fixing my laptop and not wanting to type the new password into my phone instead of copy/paste, sync when online?
And how are you sharing a file, to multiple people anywhere in the world realtime ish, without a cloud service you or someone else hosts? Doesn't that necessitate some syncronization logic?
frongt
Als Antwort auf eightys3v3n • • •It's hosted on a local network share, so we don't need Internet access.
If can't copy paste, I just type it out.
We use a VPN to the office.
Lka1988
Als Antwort auf eightys3v3n • • •eightys3v3n
Als Antwort auf Lka1988 • • •Lka1988
Als Antwort auf eightys3v3n • • •eightys3v3n
Als Antwort auf Lka1988 • • •Flagstaff
Als Antwort auf slate • • •As they should, forever.
Why I hate passkeys | Jason Polak
jpolak (Jason Polak)mögen das
yessikg mag das.
4am
Als Antwort auf Flagstaff • • •Two articles behind a paywall, one that won’t load, and another article that says the big problem with passkeys is…people are unfamiliar with them.
If anyone tells you that Passkeys are bad, they’re a liar. Way more safe than passwords, full stop.
Just don’t let Microsoft or Apple tie them to your device. You don’t have to do that.
Flagstaff
Als Antwort auf 4am • • •Are you calling me a liar? That's pretty weird; it's not like I'm telling you to stick to passwords while I move to passkeys. With that said, though, get Bypass Paywalls Clean (Mozilla-only, as far as I know) and you'll never see another paywall again. I forgot about having that.
The problem is that this is where it's eventually going to lead to.
fushuan
Als Antwort auf Flagstaff • • •WhyJiffie
Als Antwort auf fushuan • • •fushuan
Als Antwort auf WhyJiffie • • •No one of the people I know that use passkeys use it from the phone, either they use a password manager, they have passwords on a physical note, on an excel file in the desktop, a physical yubikey, or bitwarden like me. That's everyone I physically know including every family member, friends and work people.
I know it's anecdotal, but you present your "wide populace" fact without giving sources too, and since I know no one that uses phone based passkeys, even if my experience is anecdotal, I say sus. Check your bias.
WhyJiffie
Als Antwort auf fushuan • • •my statement is not that many people are using passkeys today. but that if there comes a time when many people will use passkeys, they will be as careless and convenient as they are with everything else today, accepting any restrictions, because "why would anyone not use Google Passkeys? It's the most convenient thing!".
and not only that. I was talking about device locking but that's only part of the problem. isn't it that passkey receiving services can identify the client software, and decide they will only accept passkeys from x and y clients?
Lemmert
Als Antwort auf Flagstaff • • •At the very least you're misguided or don't know what you're talking about. Passkeys are not vendor locked in and of themselves.
You can make the same argument against password managers because most iPhone users that use them, use Apple's one.
qqq
Als Antwort auf Lemmert • • •They will almost certainly lead to vendor lock in. Why do you think they won't? Apple's password manager is definitely an example of vendor lock in. Many others have a simple to use export feature to CSV or something that others can understand
Edit: it could be that you don't know what the WebAuthn/FIDO2 specification says or we understand it differently? Do you know how the attestation mechanism works? That ties the key to a device or software authenticator (the software authenticator is likely going to tie it to the device somehow, possibly even via a TEE).
Web Authentication: An API for accessing Public Key Credentials - Level 2
www.w3.orgqqq
Als Antwort auf 4am • • •There is no full stop there... A password that is sufficiently long will never be cracked no matter the hashing algorithm in use. Passwords are easily transferrable and can be communicated to a third party in the event of an emergency. They also provide tunable security, where you can trade off security for convenience if you want.
Some (not all, I know) passkeys are tied to a device. Stolen device means stolen passkey, and it's potentially very difficult to recover from that. Passkeys are also locked to a certain standard, passwords have no such restrictions.
Tbh I don't understand the move for passkeys replacing passwords. They should become the second factor when a user wants additional security. They're perfect for that niche.
captcha_incorrect
Als Antwort auf qqq • • •Passkeys provide a secure way to authenticate while also being convenient. With the tradeoffs you mentioned.
I don’t like the push for only allowing some vendors to issue keys and to not allowing exporting and backups. And password should still be an option.
fatalicus
Als Antwort auf qqq • • •Password can also very easily be stolen during phishing, while passkeys are phishing resistant.
And while a hardware passkeys can be stole and used, those who steal them will still need the pin to use them, and the two major hardware passkeys options now (Yubico and Token2) both have some pin brute force protection in their firmware to slow someone down long enough for an account to be secured another way.
As for passkeys on phones, they require the pin or biometric used to unlock the phones to be used.
qqq
Als Antwort auf fatalicus • • •"Difficult to recover from" was referencing setting all of your accounts back up. I should have also included "lost" and "broken" to make that more obvious. Many hardware (most? all?) passkeys do not allow for backup and restore.
But I do see an issue with stolen hardware passkeys being used for access too if they're a primary factor. With the mitigations you mentioned hopefully holding up.
Taasz/Woof
Als Antwort auf RonnyZittledong • • •KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there)
I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor.
mögen das
potatoguy mag das.
electric_nan
Als Antwort auf Taasz/Woof • • •Flagstaff
Als Antwort auf electric_nan • • •electric_nan
Als Antwort auf Flagstaff • • •mögen das
potatoguy mag das.
Flagstaff
Als Antwort auf electric_nan • • •electric_nan
Als Antwort auf Flagstaff • • •Flagstaff
Als Antwort auf electric_nan • • •fatalicus
Als Antwort auf Flagstaff • • •Flagstaff
Als Antwort auf fatalicus • • •Solid question; there are only third-party apps. A recent discussion in !syncthing@lemmy.ml led me to most recently adopt BasicSync, which is incredibly low-profile and is probably the closest thing we can get to it.
However... if you want to get as pure as possible, you can apparently run Syncthing's Linux version directly in Termux on Android without the need for a dedicated Android app. There are also entire alternatives to Syncthing like syncspirit (which can also be run through Termux and which I'm considering trying as well).
BasicSync | F-Droid - Free and Open Source Android App Repository
f-droid.orgrecursivethinking
Als Antwort auf fatalicus • • •tremble5218
Als Antwort auf Taasz/Woof • • •23849767
programming.devGerman The Jackal
Als Antwort auf Taasz/Woof • • •Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups.
Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW.
mögen das
dandi8 mag das.
elmicha
Als Antwort auf German The Jackal • • •eli
Als Antwort auf German The Jackal • • •I've been using KeePass with Syncthing for 5+ years now and I think I've only had a sync issue once in all this time.
Granted I do make sure I only use the database on one device at a time (so not making edits on desktop and my phone at the same time) and I'm using XC and DX clients not the OG KeePass program.
I'm curious what is causing sync issues to make it "common", I use my db every day.
German The Jackal
Als Antwort auf eli • • •Yeah, it’s not an uncommon use case to accidentally or even intentionally edit the database on two online devices - I do it all the time when I want a new login to be used on my laptop right after I signed up for some new website on my PC, and the laptop just happens to have an “unpushed” change from last evening, or I edit the new login’s metadata, or whatever.
With this, I’d have to keep a mental model of the versioning of each database and avoid even touching my phone like the plague if KeePass is open on my computer.
It’s not that big of a deal, it’ll probably be a problem once every few months, but it’s annoying to keep track of and worth talking about.
eli
Als Antwort auf German The Jackal • • •Hmm, I'll have to play around with it a bit more then to see if I can trigger it.
My only gripe is the browser autofill. Sometimes it triggers correctly and sometimes it doesn't. I've noticed if I let KeePass add in a new login itself after I've manually entered it then it's much more receptive to suggesting that login correctly going forward. So I'm tempted to create a brand new database and login everything manually so KeePass will create the database entries itself to fix my gripe.
SeductiveTortoise
Als Antwort auf German The Jackal • • •Lka1988
Als Antwort auf German The Jackal • • •It's really not that much of an issue. I sync my database between several devices, some of which are only used occasionally. Rarely do I ever have a merge conflict.
If you're editing the database on multiple devices before they have a chance to sync with each other, maybe stop doing that. That's what causes merge issues.
Taasz/Woof
Als Antwort auf German The Jackal • • •Elaina
Als Antwort auf Taasz/Woof • • •auntieclokwise
Als Antwort auf Taasz/Woof • • •Taasz/Woof
Als Antwort auf auntieclokwise • • •That's a neat one, although it doesn't look like KeePass supports passkeys yet, at least I don't see it in the feature list.
auntieclokwise
Als Antwort auf Taasz/Woof • • •Taasz/Woof
Als Antwort auf auntieclokwise • • •auntieclokwise
Als Antwort auf Taasz/Woof • • •Placeholders - KeePass
Dominik ReichlTaasz/Woof
Als Antwort auf auntieclokwise • • •This is for OTP not Passkeys it seems?
How do you go about loading plugins on the Android version for sync with your setup?
auntieclokwise
Als Antwort auf Taasz/Woof • • •I don't usually use plugins on the Android version. I don't use the Android much, actually, just due to my use patterns. There's actually several different KeePass Android apps. KeePass is open source and the database format is documented. So anybody can make a program that uses the same database. The one I use is Keepass2Android, seems to be one of the popular ones. Looks like it also can natively generate TOTP. Apparently it has some sort of plugin system, but I've never needed to use it because it can pull my password database out of my Google Drive natively.
You need to specify what kind of passkey to be more specific. There's several different algorithms. HOTP and TOTP are very widely used. It's what Google Authenticator and the like use. If you have something very proprietary, like the old RSA keys, that probably can't be emulated by any software. Or they could, but you can't get the secret to be able to do that.
Resonosity
Als Antwort auf Taasz/Woof • • •My first password manager was KeePassXC.
Hooked it up with Syncthing, and I've never had issues aside from the occasion database duplicate.
Flagstaff
Als Antwort auf Resonosity • • •Lka1988
Als Antwort auf Taasz/Woof • • •Taasz/Woof
Als Antwort auf Lka1988 • • •I ended up using Keepass2Android and just pointing it at my webdav server, it seems to work pretty well!
On desktop it's already taken care of since I put the DB in my folders that already sync via Syncthing.
Lka1988
Als Antwort auf Taasz/Woof • • •🇸🇵🇪🇨🇺🇱🇦🇹🇪🇷
Als Antwort auf RonnyZittledong • • •Don't forget to stay hydrated.🍉🍉🍉🍉🍉
Als Antwort auf 🇸🇵🇪🇨🇺🇱🇦🇹🇪🇷 • • •roofuskit
Als Antwort auf 🇸🇵🇪🇨🇺🇱🇦🇹🇪🇷 • • •Lka1988
Als Antwort auf roofuskit • • •roofuskit
Als Antwort auf Lka1988 • • •Lka1988
Als Antwort auf roofuskit • • •Lka1988
Als Antwort auf 🇸🇵🇪🇨🇺🇱🇦🇹🇪🇷 • • •FreedomAdvocate
Als Antwort auf RonnyZittledong • • •aeiou_ckr
Als Antwort auf FreedomAdvocate • • •bordam
Als Antwort auf RonnyZittledong • • •Pass: The Standard Unix Password Manager
www.passwordstore.orggoatinspace
Als Antwort auf German The Jackal • • •Snot Flickerman
Als Antwort auf German The Jackal • • •This is why corporate promises can never be trusted, because a new CEO can change those promises on a whim.
It's part of why despite being interested in Beeper, I never signed up for it because I had questions about if those privacy promises they made would be kept if they sold to a bigger company... which they eventually did.
On the plus side Bitwarden already made an official open source self-hosted version, which can be forked and/or return to the community developed Vaultwarden roots.
Meanwhile KeepassXC keeps on chugging along.
mögen das
Quantumantics und slothbear mögen das.
northernlights
Als Antwort auf Snot Flickerman • • •Snot Flickerman
Als Antwort auf northernlights • • •youcantreadthis
Als Antwort auf Snot Flickerman • • •Snot Flickerman
Als Antwort auf youcantreadthis • • •Wow, usually people lose their shit and complain that Element is too complex and that me and the devs are being assholes asking them to use it... You know kind of like all the people here on the Fediverse who think we need to make it bigger and bring in everyone from everywhere and that the devs and users who defend them are awful for not focusing on user interface first and making it less confusing to choose a server...
Anyway, thanks for being on team reasonable, because I'm with you on this 100%, but I can't change how little people want to learn anything sadly so I make compromises with people who cant or wont learn how to do things. It sucks, people really don't seem to understand that security and convenience are a balance, and every time people argue for shit to be easier they're actually arguing for everything to be less secure. You sacrifice security for convenience, every time, and the opposite happens because you can sacrifice convenience for increased security measures. Security has to be complex by nature to be effective, and the core of Matrix is being a secure, encrypted protocol, which they have already actually put a ton of work into making easier for fucking normies. Yet, it's never enough for people. Always screams of "It's too complex! I hate thinking!"
youcantreadthis
Als Antwort auf Snot Flickerman • • •Snot Flickerman
Als Antwort auf youcantreadthis • • •youcantreadthis
Als Antwort auf Snot Flickerman • • •youcantreadthis
Als Antwort auf Snot Flickerman • • •WhyJiffie
Als Antwort auf youcantreadthis • • •element was very buggy a few years ago. the new clients are just now starting to get feature parity, and in my experience calls are still quite unstable, requiring your server to have some specific additional setup (which most public registration instances don't have), besides that not a lot of clients have implemented yet MatrixRTC calls. even the client list on matrix.org is only showing whether a client supports the former calling system.
so for the layman it's definitely not production ready yet. and even for new tech literate users some of the things are still challenging to figure out.
youcantreadthis
Als Antwort auf WhyJiffie • • •gsv
Als Antwort auf northernlights • • •John
Als Antwort auf German The Jackal • • •iamthetot
Als Antwort auf John • • •wheezy
Als Antwort auf iamthetot • • •grue
Als Antwort auf John • • •Since Dodge v. Ford Motor Co (1919), if not earlier.
See also: reclaimdemocracy.org/corporate…
Our Hidden History of Corporations in the U.S. ⋆ Reclaim Democracy!
staff (Reclaim Democracy!)Lka1988
Als Antwort auf grue • • •irmadlad
Unbekannter Ursprungsbeitrag • • •mögen das
fistac0rpse, yessikg und deliriousdreams mögen das.
TORFdot0
Als Antwort auf German The Jackal • • •Grandwolf319
Als Antwort auf German The Jackal • • •irmadlad
Unbekannter Ursprungsbeitrag • • •I assure you, I am fully cognizant of what for-profit corporations do. It's one of the reasons I turned off the TV over two decades ago. There just wasn't any ROI for me.
deliriousdreams mag das.
deathbird
Als Antwort auf German The Jackal • • •I could care less that he removed inclusion, if that was all it was. But it got replaced by "innovation", which coming from a guy who proudly lists his private capital ventures sounds like a dog whistle for figuring out how to fuck over customers.
Bad portents all around.
Stupendous
Als Antwort auf German The Jackal • • •Flagstaff
Als Antwort auf Stupendous • • •Yes, I use KeePassDX as well.
That's not good enough. Stay entirely offline. Keep your own stuff in sync via Syncthing and Syncthing-Fork daisy chains, especially if they're small files.
GitHub - Kunzisoft/KeePassDX: Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
GitHubCargon
Als Antwort auf Flagstaff • • •Flagstaff
Als Antwort auf Cargon • • •Lka1988
Als Antwort auf Cargon • • •ripcord
Als Antwort auf Stupendous • • •akwd169
Als Antwort auf German The Jackal • • •akwd169
Unbekannter Ursprungsbeitrag • • •sloppy_diffuser
Als Antwort auf German The Jackal • • •Reddit - Please wait for verification
djasonpenney (reddit)mögen das
deliriousdreams mag das.
blarth
Als Antwort auf sloppy_diffuser • • •A change that would require intent to make is not a mistake or oversight.
This sucks. I committed to Bitwarden years ago and now am going to have to switch before they lock me in the garden.
German The Jackal
Als Antwort auf blarth • • •They also haven’t addressed the removal of inclusion and transparency from their goals.
blarth
Als Antwort auf German The Jackal • • •godsammitdam
Als Antwort auf German The Jackal • • •Has Vaultwarden said anything yet? I imagine that, if necessary, given that bitwarden's client is still open, at the point they choose to try and close it, we, the users, can fork it and establish it for vaultwarden, correct? Or, maybe even the vaultwarden team will think about forking it themselves and making a light client as well to pair with the current server.
But Vaultwarden can exist without "leeching" they just haven't needed to yet. That's more symbiotic than parasitic. The parasite class just took over Bitwarden after all.
German The Jackal
Als Antwort auf godsammitdam • • •Not to my knowledge. As far as forks go, that’s true. However, Vaultwarden would need to become an independent team, and even if they don’t take over maintaining the client, someone else would need to become independent. While it can work, it can also lead to very nasty, longstanding bugs or security issues due to scale, budget, and effort. I see this a lot with Apple apps for example - smaller developers understandably don’t want to deal with Apple’s crap and costs, and everyone suffers in the end.
If you look at the current state of the cybersecurity world, it’s not kind to open-source developers. AI-generated BS is dredging up vulnerabilities on all sides. So security is also a big concern. Someone like Bitwarden has a lot of budget to swing.
Vaultwarden itself is incredibly good, but not perfect:
~~nvd.nist.gov/vuln/detail/CVE-2…
Edit: Bad example, point is security is a concern with a smaller team.
godsammitdam
Als Antwort auf German The Jackal • • •You're right. And that's why more of us need to contribute and spread the word of projects to support them.
Honestly, FOSS is our last bastion against this consumerist hellscape. I'm working on learning to build my own discord-like front end on matrix specifically for gaming. But I'm just one guy. We've all gotta pick where we place our effort and support those around us similarly.
Vaultwarden taking over bitwarden, should they shut doen as open source, I think would be entirely worthy. But it might need more people to either help vaultwarden or maintain it on their own, you're right.
To me, seeing and learning about all of these projects gives me hope. All of these people and communities working to build things out of passion and dedication, because they care and want to provide value to others. No profit motive necessary. We just need to be there to support them as we've tied capital to our survival currently.
German The Jackal
Als Antwort auf godsammitdam • • •True dat. The more people know every corporation, even the most “wholesome chungus Reddit karma 100” ones ONLY care about squeezing profits out of you, the better off we’re going to be in the future.
Check out and contribute to gomuks. It’s the go-to power user Matrix client as I’ve learned. I recently developed a theme for it to make it look more like Cinny, which itself is a bit of a Discord UI Clone. I don’t actually use gomuks, but it really needed a nice theme.
gomuks css - We have Cinny at the mall
css.gomuks.appFreedomAdvocate
Als Antwort auf German The Jackal • • •Anyone that doesn’t understand that companies exist to make profit needs to be studied at this point. You have to wonder how they even function in the world.
People don’t go work 9-5 for the fun of it and for free, do they? No, a company and/or customers pay them. Without that payment step there’s no job and there’s no product/service.
If you don’t think the company deserves your money, find another free service and use that until they start charging. Rinse and repeat - or just be an adult and pay for services and work that you like and use.
German The Jackal
Als Antwort auf FreedomAdvocate • • •Are you genuinely unable to comprehend the concept of a company not doing evil things to make profit? You do realise I paid for it up until this point right? Thanks captain obvious for telling me I can stop paying for things.
I was fine with a price hike, I realise that paid users are subsidizing free ones and everything is getting more expensive. What I’m not fine with is the deception, shitty marketing, removal of “DEI-like” language, and a sudden clear lack of morality in the company. They lost my trust, anyone with a brain shouldn’t trust them either with their most precious online secrets.
And you call yourself a freedom advocate, then advocate for textbook enshittification which always leads to the removal of freedom lol, what a shill
mögen das
dandi8 mag das.
FreedomAdvocate
Als Antwort auf German The Jackal • • •You think that people are going to lose “freedom” with Bitwarden making changes? Are you serious?
They’re not doing anything “evil” lol. Inclusivity should not be a main focus of a password storage company lol. That makes no sense.
You shouldn’t have had “trust” in a company to begin with. That’s on you.
quips
Als Antwort auf godsammitdam • • •godsammitdam
Als Antwort auf quips • • •It doesn't exist yet 😅 as I said, still learning and trying to avoid using AI as a lot of vibe coded discord clones popped up. I did compile a list (which probably needs updating)
github.com/DukePantarei/discor…
GitHub - DukePantarei/discord-alternatives-wishlist: A community driven comparison and wishlist of features for an ideal privacy-first client to provide an alternative to Discord
GitHubFmstrat
Als Antwort auf German The Jackal • • •Why not? No reason mobile apps and browser extensions can't be forked.
German The Jackal
Als Antwort auf Fmstrat • • •pawb.social/comment/22239133
German The Jackal
2026-05-16 00:03:37
Fmstrat
Als Antwort auf German The Jackal • • •Well, yes, Vaultwarden would need more support, but that happens pretty frequently when a major provider enshitifies. Look at Godot, Lemmy, etc.
As for the CVE linked, BitWarden itself has many more: app.opencve.io/cve/?vendor=bit…
CVEs aren't an indication of poor quality. Speed to resolution is. It's not often devs themselves are finding CVEs, it's the community.
At the core, regardless of what a C suiter does to the marketing, the state of the FOSS repos is what matters. Since they already walked back the "always free" comment this whole debate may be moot, so time will tell. Hopefully the rest of the company and the public sway them to continue to support it properly themselves.
Bitwarden CVEs and Security Vulnerabilities - OpenCVE
app.opencve.ioGerman The Jackal
Als Antwort auf Fmstrat • • •WhyJiffie
Als Antwort auf Fmstrat • • •Fmstrat
Als Antwort auf WhyJiffie • • •zipjo
Als Antwort auf German The Jackal • • •deadcade
Als Antwort auf German The Jackal • • •Hoping for another Moonlight/Sunshine moment! Already running Vaultwarden, rbw, and Keyguard. Just need a simple FOSS browser extension for autofill and editing entries.
For context, Moonlight was created first as a FOSS Nvidea gamestream client. Then Sunshine was created as a FOSS server implementation. Later, Nvidia dropped "official" support, now the two projects are a FOSS stack built atop a formerly proprietary protocol.
Ulrich
Als Antwort auf German The Jackal • • •cow
Als Antwort auf German The Jackal • • •youcantreadthis
Als Antwort auf German The Jackal • • •FreedomAdvocate
Als Antwort auf youcantreadthis • • •Many of us already pay for it because it’s an amazing service that we appreciate and are happy to pay for.
Not everyone is a cheapskate who thinks they deserve other people’s hard work to not be rewarded.
mögen das
deliriousdreams mag das.
Jul (they/she)
Als Antwort auf German The Jackal • • •Hanrahan
Als Antwort auf Jul (they/she) • • •Jul (they/she)
Als Antwort auf Hanrahan • • •FreedomAdvocate
Als Antwort auf German The Jackal • • •No one is being “sold out” lol. Anyone using the free tier has had a great run with an amazing service without paying a cent. Can’t complain about that.
I already pay for Bitwarden as it’s a great service that brings a lot of value. I’m happy to pay for it, and have zero anger at a company wanting to make money from their product.
Others might disagree, but companies can’t exist without making money. It’s insane that there are somehow still people that don’t understand how business works.
My work just started giving out 6 sponsored family licenses per employee which is awesome, so I’ll actually get to stop paying for it for a while.
gusgalarnyk
Als Antwort auf FreedomAdvocate • • •Buddy, I don't know if you've been living under a rock but everything a venture capitalist touches is enshittifying. You think any of these companies you're reading headlines about are suffering to keep their doors open? When google locks down android or X starts including ads in Grok they're doing it to keep the lights on? You think if Bitwarden started cutting free services and charging more the average employee is going to get a proportional raise to the new profits?
No. We're not upset because we dont understand that a company needs to make money. We're upset because we have basic pattern recognition skills and we understand the nature of late stage capitalism on wealth inequality (at least intuitively). This (likely) isn't some smart business person coming in to balance the books, this is (likely) some rich asshole whose job is to kill the golden goose and sell it for parts before anyone catches on that you need it alive to produce eggs.
mögen das
dandi8 mag das.
FreedomAdvocate
Als Antwort auf gusgalarnyk • • •You only have the world you live in thanks to capitalism. Without calitalism things like Bitwarden wouldn’t even exist.
Companies exist to make profit. Investors want profit, that’s why they invest. That’s why these products exist in the first place.
There’s no better system than capitalism, and complaining about “late stage capitalism” and blaming everything on it is dumb.
pocker_machine
Als Antwort auf FreedomAdvocate • • •There are profits that grow over time, keeping their promises, without harming customers, and with values at the core of the company.
Then there are profits gained immediately by cutting corners in many places, ignoring damage to reputation, and driven by greed.
These kind of news point to the second case and we all thought bitwarden was the first kind.
altphoto
Als Antwort auf German The Jackal • • •osanna
Als Antwort auf altphoto • • •altphoto
Als Antwort auf osanna • • •DFX4509B
Als Antwort auf German The Jackal • • •MonkeMischief
Als Antwort auf DFX4509B • • •Oh crap, how's KeePass got an LLM involved‽ Time to look into this now...
I did find codeberg.org/ChiPass/ChiPass , but it looks like a very new project.
ChiPass
Codeberg.orgDFX4509B
Als Antwort auf MonkeMischief • • •About KeePassXC’s Code Quality Control – KeePassXC
keepassxc.orghexagonwin
Als Antwort auf DFX4509B • • •adarza
Als Antwort auf hexagonwin • • •Lka1988
Als Antwort auf DFX4509B • • •Yeah, I'm no fan of slopcoding either, but this policy addresses those who contribute AI-generated code; it is most certainly not "our devs are shipping AI slopcode".
Seems a lot here missed this part:
Linus Torvalds does the same thing with the Linux kernel. He gets AI-generated slopcode submissions all the time. They're reviewed by real people, and like most submissions Linus gets, sloppy work is rejected, AI and human alike.
WhyJiffie
Als Antwort auf Lka1988 • • •palmtrees2309
Als Antwort auf German The Jackal • • •auntieclokwise
Als Antwort auf palmtrees2309 • • •palmtrees2309
Als Antwort auf auntieclokwise • • •MonkeMischief
Als Antwort auf auntieclokwise • • •@palmtrees2309@lemmy.world
Yep. Seconding this!
KeePass + Syncthing is the best.
Back up the database(s) regularly. (Syncthing can also retain
xnumber of versions and things like that, but also do your own 3-2-1 backups.)You can use something as simple as a Pi, or an old laptop, or even an old phone if you get creative, as an always-on syncthing server to keep them synchronized. KeePassXC even has a fancy integration with Firefox, so all you gotta do is unlock your database and click autofill on websites.
Edit: lmao seriously, not like I care but what's there to downvote about this? 😂
auntieclokwise
Als Antwort auf MonkeMischief • • •eli
Als Antwort auf MonkeMischief • • •Yup, been doing this combo for 5-6 years now.
I use KeePassXC on desktop and KeePassDX on Android. No issues whatsoever.
I do have a NAS so that's my "always on" device for Syncthing. Everything syncs up within like 10-15 seconds when a device connects.
I also use a key file as a pseudo 2FA that I keep on a flash drive, so you'd need my master password and my key file to unlock the database.
ttyybb
Als Antwort auf auntieclokwise • • •mlg
Als Antwort auf palmtrees2309 • • •I hate to break the news but the issue with Bitwarden is that the client sucks total ass, and there are no drop in 3rd party replacements for the browser plugin.
Been running Vaultwarden for a while now and even though the sync implementation is nice and clean, it's just not worth the end user experience.
This is really dumb when compared to literally every other password manager, open source and enterprise which does a much better job of actually being a password manager and not a glorified encrypted text file.
I'm eventually going to switch back to KeePassXC and just suggest setting a master password with Firefox's builtin password manager for everyone else who just wants a painless user experience and not have to deal with syncing vaults.
WhyJiffie
Als Antwort auf mlg • • •Lka1988
Als Antwort auf palmtrees2309 • • •BW news dropped, so you're going to move to something that still requires the BW app?
Circular logic, friend. Ditch everything related to BW. Move to a truly open password manager like KeePass (including its various forks).
lechekaflan
Als Antwort auf German The Jackal • • •Once again, enshittification by the fucking suits.
Early on I decided to use only KeePass for full personal control instead of an online service. Didn't regret making that decision.
qwestjest78
Als Antwort auf German The Jackal • • •Decronym
Als Antwort auf German The Jackal • • •Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
5 acronyms in this thread; the most compressed thread commented on today has 12 acronyms.
[Thread #295 for this comm, first seen 16th May 2026, 03:30]
[FAQ] [Full list] [Contact] [Source code]
Decronym: A simple Reddit bot
Gisthttps://startrek.website/u/DisasterTransport
Als Antwort auf German The Jackal • • •SayCyberOnceMore
Als Antwort auf German The Jackal • • •My solution:
keepass.info/donate.html
(& yes, I'm linking to their donate page first)
Donate - KeePass
Dominik Reichlhexagonwin
Als Antwort auf SayCyberOnceMore • • •SayCyberOnceMore
Als Antwort auf hexagonwin • • •Personally, I use a plugin for passphrases and - last time I looked - the other forks didn't handle them.
Does keepassxc support plugins now?
On my phone, I use KeePassDX from F-Droid and KeePassDroid (Not sure if that's being maintained at the moment?)
The main point is; we need to support open source developers, so pick an open-source solution and contribute, donate, etc.
KeePassDX
www.keepassdx.comfatalicus
Als Antwort auf SayCyberOnceMore • • •Lka1988
Als Antwort auf hexagonwin • • •When someone says "use KeePass", we generally mean ”use an app based on KeePass".
Personally, I use the OG KeePass (work laptop), KeePass XC (all personal machines), Keepass2Android (personal Pixel), and Keepassium (work iPhone).
Whichever one you use is entirely subjective. Also, XC wouldn't exist without the OG KeePass, so maybe don't be a tribal weird-ass over it.
youmaynotknow
Als Antwort auf Lka1988 • • •I've been wanting to move to KeePass from my current vaultwarden. What's the most seamless way to synchronize the DB across GrapheneOS and Arch?
I trust Syncthing for syncing files, but it kind of feels insufficient for an actual encrypted database.
What works for you for syncing?
Lka1988
Als Antwort auf youmaynotknow • • •The encrypted database is a file. Syncthing handles it perfectly fine. KeePass' protocol has versioning and merge support built right in, so all of the KeePass variants work great with each other without issues over Syncthing.
Just make sure you're not editing the database on multiple machines at the same time - that'll cause merge conflicts.
youmaynotknow
Als Antwort auf Lka1988 • • •aesthelete
Als Antwort auf SayCyberOnceMore • • •WorldsDumbestMan
Als Antwort auf German The Jackal • • •floquant
Als Antwort auf German The Jackal • • •wickedrando
Als Antwort auf German The Jackal • • •Lka1988
Als Antwort auf wickedrando • • •Keepass (all variants and forks) has a passphrase generator, been built-in for years.
The writing is on the wall for BW, and has been for quite some time now.
Hemingways_Shotgun
Als Antwort auf German The Jackal • • •aesthelete
Als Antwort auf German The Jackal • • •BritishJ
Als Antwort auf aesthelete • • •captcha_incorrect
Als Antwort auf BritishJ • • •monotux
Als Antwort auf captcha_incorrect • • •captcha_incorrect
Als Antwort auf monotux • • •rounding_error
Als Antwort auf German The Jackal • • •Lka1988
Als Antwort auf German The Jackal • • •WhyJiffie
Als Antwort auf Lka1988 • • •gergo
Als Antwort auf Lka1988 • • •Lka1988
Als Antwort auf gergo • • •zeroConnection
Als Antwort auf German The Jackal • • •outerspace
Als Antwort auf German The Jackal • • •asdfasdfasdf
Als Antwort auf German The Jackal • • •lavander
Als Antwort auf German The Jackal • • •I am confused. Aren’t their clients open source? How many milliseconds will take till 100s folks will fork it?
Their server is useless and Vaultwarden is already a superior option
While I agree that they are a “at risk” company, I don’t think the software itself is at risk
AverageEarthling
Als Antwort auf German The Jackal • • •