It's just an encrypted blob that's uploaded, not your passwords. There's a self-hosted alternative, but even so, I'd trust them to handle server security bette

It's just an encrypted blob that's uploaded, not your passwords. There's a self-hosted alternative, but even so, I'd trust them to handle server security better since, since it's their speciality. I'd suggest adding Yubikey as 2-factor, then anyone would need that physical key to login.