7 ms·

Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for

by progx 5y ago

Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)

bitlevel 5y ago
Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.
- throwaway8581 5y ago
  Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.
  - sildur 5y ago
    That is why you should never ever auto-update your add-ons.
pier25 5y ago
Bitwarden is awesome. It's my current password manager after I left 1P. I spent hundreds into 1P before the subscription model, as their apps were expensive and got them on multiple OS and for family members. Then Dropbox decided (rightfully) that you shouldn't use your public folder to host websites, and 1P told their customers to either get a subscription or lose the online vault which is a critical feature of any password manager. They didn't even have the decency to offer a free year of the subscription to their current paying customers. It would have cost 1P pennies to just host the vaults on S3, but they decided to force their customers to switch to the subscription model if they wanted to have a feature they had already paid for and 1P had been advertising for years. I will never give a single cent to 1P again.
- JohnWhigham 5y ago
  You're getting downvoted, but this is all true and shouldn't be discounted. I'm in the process of migrating off 1Password after their shitty behavior of all but forcing people to migrate to the cloud.
- signal11 5y ago
  I started with 1Password 4 (non-subscription) and considered upgrading to 1Password 7 -- yes, you could buy a non-subscription copy when I checked, although it's increasingly well hidden as an option -- and in addition to Dropbox it may have supported iCloud, not sure about that. In the end I went with the subscription because I it's bought once for all my devices, and is great for family use, with UX that's easy from children to grandparents. As a bonus, the Dropbox sync issues just stopped - their own sync works much better for me. I do understand the frustration about subscriptions for everything but I'd like my password manager vendor to remain in good financial health, so I'll happily make an exception and pay regularly for my password manager. > just host the vaults on S3 That's a fairly niche audience, and it's very easy to misconfigure S3. Product development is about making hard choices, and I'm ok with 1Password choosing not to do this, just as I'm okay with them not supporting WebDAV -- YMMV. What I do wish is that 1Password would support a few cloud storage options (e.g. Google Drive, OneDrive etc) on mobile so that people who're not inclined to subscribe have an alternative, if only to squelch the inevitable complaints about subscriptions. When 1Password was a smaller company, I can see why one wouldn't want to do that as it'd take away precious dev time, but my understanding is that they have more funding now.
  - kwanbix 5y ago
    I agree on supporting your vendor, however, I think 1Password is too expensive. That is why I pay for Bitwarden. The difference is 33% less expensive (or 50% more expensive if you look it from the Bitwarden side). I think 3.33 euros per months is about a good valance.
    - bwoodruff 5y ago
      An individual 1Password membership is €2.65+VAT per month when invoiced annually. - Ben, 1Password
lukevp 5y ago
Bitwarden is awesome, and super easy to self host with Docker. Heck, you could get a $5/mo DO droplet and host bitwarden_rs along with a static site or a bunch of other things! I wouldn’t suggest this to people who are unfamiliar with hosting, Linux, docker, and how to make backups, so the self hosting is admittedly limited in appeal, but even their SaaS offering seems like a great deal!
- jacurtis 5y ago
  Bitwarden is a great alternative. But it must be mentioned that you need to be willing to accept the responsibility and burden of the operational overhead required to run it. I realize that most people tout self-hosted as a "benefit", and it might be a benefit for the demographic reading HN. But for the average person, self-hosting is far from practical. Most people can't realistically boot up a DO droplet and install Docker and Bitwarden. Heck, I am a SysAdmin as a career. I build highly available architecture all day long, but for my personal/family passwords it is honestly not something I personally want to handle. Maybe it is because I actually work in highly available architectures all day long that I am more fearful of throwing all my passwords onto a $5/mo DO droplet, that by its nature is not HA. Sure I have the expertise to lock it down, keep it secure, keep it backed up, keep it updated, etc.. But I am paying $60/yr for the VPC ($5/mo x 12 mos = $60/yr), which is the same cost as 1Password for a Family plan and is more expensive than the $36 they charge for a personal plan. So even though I am qualified to reliably self-host everything, why would I want to? Why not just pay the same amount of money for someone else to accept that burden? Plus that company is scaled up to be running their customers on far more reliable architecture systems than I would alternatively be using on my single VPC/droplet. This isn't to shit on Bitwarden. In fact i have a ton of experience with both Bitwarden and 1Password. These are easily the two best options on the market. Both have close to feature parity. You can't go wrong with either. But I would just cautiously warn people that want to self-host Bitwarden. This is a major responsibility to self-host an app that contains such critical information. Before you click install I would do a thought experiment of what would happen if you lost your Bitwarden installation, and therefore ALL of your unique passwords across the entire internet. Now ask yourself, how confident are you that you can avoid that situation. Then remember that affordable alternatives exist that take that responsibility away from you. This isn't saying that you shouldn't do it. Just that it isn't practical for most people. And I honestly don't see the draw for self-hosting a personal or family account. I would self-host a business account. But why bother with personal or family? Just get a hosted account so you don't have to play "IT Person" at home when your partner gets locked out of Netflix and can't access the password.
bognition 5y ago
Its really great to hear how far Bitwarden has come. I love that there are multiple viable competitors in this space.
benhurmarcel 5y ago
Bitwarden is a great option. It has all the features you could need, and is cheaper (and critically has a free plan). That's basically my default recommendation for most people. I know most people won't consider anything other than free. I still choose to use 1Password personally, because the higher polish and experience is worth the slightly higher price for me. Both are good options really.
veidr 5y ago
How good is Bitwarden on iOS? — curious 1Password user
- ybbond 5y ago
  Very nice! The UI is not pretty, but the UX surely is great. Bitwarden also provides true black theme for OLED. Website auto-detect key works well on Safari, but hit-and-miss on other browser (just like 1P is—or was). -- former 1Password user
InafuSabi 5y ago
I had to reduce #Lastpass importance here, when they crippled the multiple plaform usability so my natural choice was #Bitwarden. THe fact that they are open source and will not pull such a stunt as lastpass did was vital for me. Lastpass is now reduced to usage on linux machines, while bitwarden superceeds it on all platforms, even when new ones come in the future

by progx 5y ago

bitlevel 5y ago

Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.

throwaway8581 5y ago
Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.
- sildur 5y ago
  That is why you should never ever auto-update your add-ons.

pier25 5y ago

Bitwarden is awesome. It's my current password manager after I left 1P. I spent hundreds into 1P before the subscription model, as their apps were expensive and got them on multiple OS and for family members. Then Dropbox decided (rightfully) that you shouldn't use your public folder to host websites, and 1P told their customers to either get a subscription or lose the online vault which is a critical feature of any password manager. They didn't even have the decency to offer a free year of the subscription to their current paying customers. It would have cost 1P pennies to just host the vaults on S3, but they decided to force their customers to switch to the subscription model if they wanted to have a feature they had already paid for and 1P had been advertising for years. I will never give a single cent to 1P again.

JohnWhigham 5y ago
You're getting downvoted, but this is all true and shouldn't be discounted. I'm in the process of migrating off 1Password after their shitty behavior of all but forcing people to migrate to the cloud.
signal11 5y ago
I started with 1Password 4 (non-subscription) and considered upgrading to 1Password 7 -- yes, you could buy a non-subscription copy when I checked, although it's increasingly well hidden as an option -- and in addition to Dropbox it may have supported iCloud, not sure about that. In the end I went with the subscription because I it's bought once for all my devices, and is great for family use, with UX that's easy from children to grandparents. As a bonus, the Dropbox sync issues just stopped - their own sync works much better for me. I do understand the frustration about subscriptions for everything but I'd like my password manager vendor to remain in good financial health, so I'll happily make an exception and pay regularly for my password manager. > just host the vaults on S3 That's a fairly niche audience, and it's very easy to misconfigure S3. Product development is about making hard choices, and I'm ok with 1Password choosing not to do this, just as I'm okay with them not supporting WebDAV -- YMMV. What I do wish is that 1Password would support a few cloud storage options (e.g. Google Drive, OneDrive etc) on mobile so that people who're not inclined to subscribe have an alternative, if only to squelch the inevitable complaints about subscriptions. When 1Password was a smaller company, I can see why one wouldn't want to do that as it'd take away precious dev time, but my understanding is that they have more funding now.
- kwanbix 5y ago
  I agree on supporting your vendor, however, I think 1Password is too expensive. That is why I pay for Bitwarden. The difference is 33% less expensive (or 50% more expensive if you look it from the Bitwarden side). I think 3.33 euros per months is about a good valance.
  - bwoodruff 5y ago
    An individual 1Password membership is €2.65+VAT per month when invoiced annually. - Ben, 1Password

lukevp 5y ago

Bitwarden is awesome, and super easy to self host with Docker. Heck, you could get a $5/mo DO droplet and host bitwarden_rs along with a static site or a bunch of other things! I wouldn’t suggest this to people who are unfamiliar with hosting, Linux, docker, and how to make backups, so the self hosting is admittedly limited in appeal, but even their SaaS offering seems like a great deal!

jacurtis 5y ago
Bitwarden is a great alternative. But it must be mentioned that you need to be willing to accept the responsibility and burden of the operational overhead required to run it. I realize that most people tout self-hosted as a "benefit", and it might be a benefit for the demographic reading HN. But for the average person, self-hosting is far from practical. Most people can't realistically boot up a DO droplet and install Docker and Bitwarden. Heck, I am a SysAdmin as a career. I build highly available architecture all day long, but for my personal/family passwords it is honestly not something I personally want to handle. Maybe it is because I actually work in highly available architectures all day long that I am more fearful of throwing all my passwords onto a $5/mo DO droplet, that by its nature is not HA. Sure I have the expertise to lock it down, keep it secure, keep it backed up, keep it updated, etc.. But I am paying $60/yr for the VPC ($5/mo x 12 mos = $60/yr), which is the same cost as 1Password for a Family plan and is more expensive than the $36 they charge for a personal plan. So even though I am qualified to reliably self-host everything, why would I want to? Why not just pay the same amount of money for someone else to accept that burden? Plus that company is scaled up to be running their customers on far more reliable architecture systems than I would alternatively be using on my single VPC/droplet. This isn't to shit on Bitwarden. In fact i have a ton of experience with both Bitwarden and 1Password. These are easily the two best options on the market. Both have close to feature parity. You can't go wrong with either. But I would just cautiously warn people that want to self-host Bitwarden. This is a major responsibility to self-host an app that contains such critical information. Before you click install I would do a thought experiment of what would happen if you lost your Bitwarden installation, and therefore ALL of your unique passwords across the entire internet. Now ask yourself, how confident are you that you can avoid that situation. Then remember that affordable alternatives exist that take that responsibility away from you. This isn't saying that you shouldn't do it. Just that it isn't practical for most people. And I honestly don't see the draw for self-hosting a personal or family account. I would self-host a business account. But why bother with personal or family? Just get a hosted account so you don't have to play "IT Person" at home when your partner gets locked out of Netflix and can't access the password.

bognition 5y ago

Its really great to hear how far Bitwarden has come. I love that there are multiple viable competitors in this space.

benhurmarcel 5y ago

Bitwarden is a great option. It has all the features you could need, and is cheaper (and critically has a free plan). That's basically my default recommendation for most people. I know most people won't consider anything other than free. I still choose to use 1Password personally, because the higher polish and experience is worth the slightly higher price for me. Both are good options really.

veidr 5y ago

How good is Bitwarden on iOS? — curious 1Password user

ybbond 5y ago
Very nice! The UI is not pretty, but the UX surely is great. Bitwarden also provides true black theme for OLED. Website auto-detect key works well on Safari, but hit-and-miss on other browser (just like 1P is—or was). -- former 1Password user

InafuSabi 5y ago

I had to reduce #Lastpass importance here, when they crippled the multiple plaform usability so my natural choice was #Bitwarden. THe fact that they are open source and will not pull such a stunt as lastpass did was vital for me. Lastpass is now reduced to usage on linux machines, while bitwarden superceeds it on all platforms, even when new ones come in the future