I currently use KeepassXC that is synced through NextCloud. The sync isn’t very elegant, especially on my phone. So I’m looking for a new password manager, which has a native server sync support that I can self host. What do y’all recommend? I need at least a phone app and a browser integration that can autofill.

  • EmbarrassedDrum@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    17
    arrow-down
    8
    ·
    11 hours ago

    Bitwarden.

    My recommendation: Don’t use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use). Why? You’re not a security personal, and securing your vault isn’t your job. You might do a slight mistake that’ll lead to the compromise of your vault.

    The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they’ll probably do it better then you. When it comes to serious matter, I prefer to trust the professionals.

    • EpicGamer@lemmy.world
      link
      fedilink
      arrow-up
      13
      ·
      10 hours ago

      Doesn’t the server just hold an encrypted vault? What could go wrong when the server is compromised? Just thinking out loud I don’t know the answer

      • herrvogel@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        2 hours ago

        I just don’t want any unauthorized persons anywhere near my vaults in general. I also see my vault as a critical service that requires high availability, and I know enough about system administration to know that my network and I are not qualified to provide that.

      • smiletolerantly@awful.systems
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        9 hours ago

        Yep, that’s right. In theory you could share the encrypted DB with the public and not degrade security. (Still don’t do that though…)