this post was submitted on 15 Nov 2023
3 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
3
What is the point of vaultwarden? Is it safer or less safe than using the bitwarden app/website? (alien.top)
submitted 1 year ago by Trashrascall@alien.top to c/main@selfhosted.forum
40 comments fedilink hide all child comments
 

Not sure I understand why you'd want to self host a password manager. Bitwarden has never been breached AFAIK. How is it better or safer to keep if self hosted?

you are viewing a single comment's thread
view the rest of the comments
[–] usrdef@alien.top 2 points 1 year ago (2 children)

It's good if you like self-hosting stuff.

However, what I tell people is this:

If you know jack about security and how to lock down a machine that is running Vaultwarden, then it's useless. You should go with Bitwarden.

If you're looking to install it just to play around with, I would be very cautious about what you store there, unless you can lock the system down to where it's not accessible by the outside internet and localized only to your network.

And I have redundant backups in place in case one decides to fail, which are all encrypted with GPG and a few other measures.

If you have it installed and not accessible to anyone else but you, it's a fun project. I like using VW and BW.

The other bonus would be no one is going to look to target you specifically unless you're turned into a target.

Whereas if BW were to be breached, it wouldn't have anything to do with you.

However, BW utilizes encryption, so even if they did somehow manage to get in, they can't read your passwords.

[–] Silencer306@alien.top 3 points 1 year ago (1 children)

Alright, what minimal security do you need to lock down your vaultwarden? Wireguard, firewall, fail2ban? I’m trying to learn good security practices for my server

[–] kevdogger@alien.top 1 points 1 year ago

Honestly just install wireguard on client and they use that to remote access the server when away from lan network