top | item 25865041

(no title)

alexanderh | 5 years ago

How dependent is it on them as a service? If their website/service disappeared off the face of the earth tomorrow, would I still have access to my passwords locally?

I'm still hesitant to use any form of password management that relies on cloud services. I still like Keepass (with auto-updates disabled for security because their updater uses HTTP, of course), for my purposes. I can Sync my keepass file any number of secure ways that don't rely on a single provider.

discuss

order

bilange|5 years ago

> If their website/service disappeared off the face of the earth tomorrow, would I still have access to my passwords locally?

They provide a selfhosted alternative to their cloud service.

Not only that, there is a rust based birwarden server reimplementation that doesn't phone home (IIRC I believe the official self-hosted server needs an API key?), is compatible with all platform clients (at least for my needs). https://github.com/dani-garcia/bitwarden_rs

viraptor|5 years ago

Your passwords are cached locally on the devices. You can export your vault too. If their public service goes down (or if you don't want to use it in the first place) you can stand up your own server (there are at least 2 common implementations) and point your clients at it.

Aeolun|5 years ago

As far as I know they only sync a data blob, so you would just not get any updates.

jannes|5 years ago

Yes. Only the sync stops working when offline.