I currently use KeepassXC that is synced through NextCloud. The sync isn’t very elegant, especially on my phone. So I’m looking for a new password manager, which has a native server sync support that I can self host. What do y’all recommend? I need at least a phone app and a browser integration that can autofill.

  • @[email protected]
    link
    fedilink
    911 hours ago

    Bitwarden.

    My recommendation: Don’t use Vaultwarden (self hostable server side of bitwarden. Really easy to run and use). Why? You’re not a security personal, and securing your vault isn’t your job. You might do a slight mistake that’ll lead to the compromise of your vault.

    The people at Bitwarden have their work dedicated to securing the vaults and all they do is security. And they’ll probably do it better then you. When it comes to serious matter, I prefer to trust the professionals.

    • @EpicGamer
      link
      1310 hours ago

      Doesn’t the server just hold an encrypted vault? What could go wrong when the server is compromised? Just thinking out loud I don’t know the answer

      • @herrvogel
        link
        13 hours ago

        I just don’t want any unauthorized persons anywhere near my vaults in general. I also see my vault as a critical service that requires high availability, and I know enough about system administration to know that my network and I are not qualified to provide that.

      • Sonalder
        link
        fedilink
        27 hours ago

        Security is also about backups. 3 Replicas 2 Formats 1 Offsite location

      • @[email protected]
        link
        fedilink
        210 hours ago

        Yep, that’s right. In theory you could share the encrypted DB with the public and not degrade security. (Still don’t do that though…)