• LordKitsuna@lemmy.world
    link
    fedilink
    arrow-up
    38
    arrow-down
    1
    ·
    1 year ago

    If we didn’t already have the perfect option that is bitwarden I would probably go for this. But there’s really no reason to switch away from bitwarden to this. It’s open source, gets regularly publicly audited, and nothing ever leaves your device unencrypted. So even if they had their data center broken into and all machines stolen physically I wouldn’t have to worry about my passwords

      • asap@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        To add onto what Andromxda said, SimpleLogin is included with your Proton account (might be paid accounts only).

        Use it with a custom domain - it’s amazing and if Proton Mail ever shuts down you won’t have to migrate any of your logins because they’re already on your own domain.

  • Cyborganism@lemmy.ca
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    1
    ·
    1 year ago

    I’m very skeptical about online cloud-based password managers. I don’t trust that at all. I still prefer to use a local off-line password manager like KeePassXC.

    • mino@lemmy.ml
      link
      fedilink
      arrow-up
      3
      ·
      edit-2
      1 year ago

      What is your threatmodel here?

      The problem for me with completely self hosting it is that it’ll be relatively hard to get my backup, availability and sync requirements satisfied without a lot of effort.

      Whereas I trust encryption in theory enough to hand my encrypted data to anyone. If the implementation is properly audited then I also trust that.

      Most of my passwords are for accounts with 2fa anyway so even if both the storage leak and the encryption turn out to be subpar my threatmodel is still not violated.

    • ikidd@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      If self-hosting makes you feel better about it, Vaultwarden exists for the Bitwarden client.

    • krysel@lemmy.ml
      link
      fedilink
      arrow-up
      7
      ·
      1 year ago

      It‘s probably not but if you are in their ecosystem you might as well use it.

      • cyberwolfie@lemmy.ml
        link
        fedilink
        arrow-up
        13
        ·
        1 year ago

        An alternative is to keep your eggs somewhat separated so that you don’t end up in a locked in situation if their services deteriorate over the years, giving you an easier escape in that scenario.

      • asap@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        I’m in their ecosystem but specifically don’t use it, as it seems extraordinarily unsafe to put my passwords behind the same authentication that I use just to check my email.

    • cygnus@lemmy.ca
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      If you have a paid plan you can generate SimpleLogin aliases directly when generating a login on a webpage. It’s a very nice feature.

        • cygnus@lemmy.ca
          link
          fedilink
          arrow-up
          1
          ·
          1 year ago

          I didn’t know that! Although I don’t pay for SL, I get it as part of my Proton sub.

          • asap@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            Yes, me too. I was pointing out that SL can be used without Proton Pass.

    • krash@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      1 year ago

      One thing protonpass does better then the competition is exporting your passkeys that is generated within it. AFAIK, bitwarden supports creating and authenticating with passkeys, but you cannot export them.

      • Hugin@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        I do use wireguard. Mostly because the proton app for linux is so bad.

        Look into how they have you setup port forwarding on linux using the official app. They want you to open a terminal and keep a looped script running as long as you are using it.

        Not only that but when I was testing it the script would start erroring out after about 5 min requiring a restart.

        • crispy_kilt@feddit.de
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          edit-2
          1 year ago

          I know, I use port forwarding. I simply improved the script for my needs and put it in a systemd service. It’s been working well for some time now.

          Also, most other providers don’t allow port forwarding at all. Proton is being nice here.

          • Hugin@lemmy.world
            link
            fedilink
            arrow-up
            2
            ·
            1 year ago

            Right you can use a custom script as a service to make it do what it’s supposed to do. but for an app that’s for an advertised feature of a paid service it’s a complete shit show.