this post was submitted on 13 Dec 2025
39 points (93.3% liked)

Selfhosted

62826 readers
1079 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

I use KeepassDX on family mobiles with Syncthing for copies between laptop and phones. What would i gain moving to Vaultwarden, knowing that i would never open my network to the outside world? It would be easier to manage for sure, as im having to setup phones and laotops myself in the family and worry that they do silly things like turn off syncthing. But what about offline access to passwords? Does Bitwarden mobile client keep a local copy of database until it can sync?

you are viewing a single comment's thread
view the rest of the comments
[–] rtxn@lemmy.world 38 points 10 months ago* (last edited 10 months ago) (3 children)

tl;dr: yes, credentials are cached locally. https://github.com/dani-garcia/vaultwarden/discussions/4676

The major downside to the single file storage used by Keepass is that it's easy to accidentally create a conflict between files on different devices if they're not synced immediately. Conflicting files have to be merged manually or data might be lost. I've run into this several times with Keepass + Nextcloud. In comparison, a central master database with local cache can resolve conflicts between individual records.

[–] trilobite@lemmy.ml 10 points 10 months ago (3 children)

That is another problem i face when i have the app open on desktop and phone at the same time. Its a nightmare.

[–] fizzle@quokk.au 16 points 10 months ago

I use keepassxc and syncthing and have never had this problem.

I think there's something in the settings to save after each change and reparse if there's a remote change.

[–] Azzu@lemmy.dbzer0.com 4 points 10 months ago* (last edited 10 months ago) (2 children)

Doesn't it only lead to problems if you change the same exact data on both copies to different values? It literally never happened to me, I never had a merge problem. It always just asks me to merge, I say yes, and that's it.

Oh wait I use KeepassXC not DX, dunno what the difference is

[–] Centaur@lemmy.world 4 points 10 months ago (1 children)

KeepassXC is password manager for desktop computers and KeepassDX is application for Android phones.

[–] Azzu@lemmy.dbzer0.com 3 points 10 months ago

Ah, for Android I use Keepass2Android which also seems to handle external changes perfectly.

[–] rtxn@lemmy.world 3 points 10 months ago (1 children)

The problem is that syncing between devices is not implemented in KeePass itself but through an external tool (Nextcloud, Syncthing, or whatever else). The sync client will only see the ciphertext and won't be able to tell which records have been changed, only that two different binary files have a common ancestor and are in conflict.

The most obvious solution is to lock and close the database when it's not in use (which is a good practice from a security perspective too), and to sync immediately when it is changed.

[–] Azzu@lemmy.dbzer0.com 1 points 10 months ago

Idk what to tell you, but to me the merging is definitely implemented inside keepass itself, Keepass asks me if I want to merge the external changes and does so well.

[–] elmicha@feddit.org 3 points 10 months ago

Keepass2Android can use an sftp server. If something was changed on the desktop, Keepass2Android will ask if it should merge the changes.

[–] vas@lemmy.ml 8 points 10 months ago

Technically KeePass can "merge" and has some sort of conflict resolution, but you're right that forgotten and unaddressed conflicts can lay around for unlimited time without you noticing. It's the main problem with keepass + syncthing.

[–] flux@lemmy.ml 2 points 9 months ago

On the other hand, Vaultwarden can only be updated online. While I do use it, I consider it a major downside, along with the inability to sync attachments.