News for hackers. Stuff that matters.
Re:Bitwarden: Avoid at all costs (outage issue) by yogenpro on Friday September 09, 2022 @03:25PM (#32783731)
I've been using Bitwarden's clients (browser extension, mobile apps, desktop apps) with a self-hosted vaultwarden [1] server. It's marginally free if you are already self-hosting other stuff. I'm hosting it on a raspberry pi 4b at home and exposing it to public Internet through Cloudflare zero trust (also free). Had no problems so far.

[1] https://github.com/dani-garcia/vaultwarden, note that it's different from Bitwarden's official server (https://bitwarden.com/help/install-on-premise-linux/), uses less CPU/memory, and enables premium features like TOTP for free.

Re:Bitwarden: Avoid at all costs (outage issue) by password4321 on Friday September 09, 2022 @05:11PM (#32784973)
Vaultwarden "is the way" if you need a polished iOS client, almost too good to be true now that VC's are involved.
Re:Bitwarden: Avoid at all costs (outage issue) by alyandon on Friday September 09, 2022 @04:42PM (#32784671)
Added bonus - even if the client extensions/app stopped working you can still log into the vaultwarden web UI to access your secrets.
Re:Bitwarden: Avoid at all costs (outage issue) by Szpadel on Friday September 09, 2022 @07:56PM (#32786285)
vaultwarden is awesome, just make sure you have some reliable automated backup (preferably cloud) for disaster recovery.
Re:Bitwarden: Avoid at all costs (outage issue) by dugmartin on Saturday September 10, 2022 @07:34AM (#32789700)
I have a similar setup but using a $5/month VPS that I also host a few other personal/family apps on. It works really well but I’m wondering how long the api will stay open and accessible given their recent huge VC investment.
Re:Bitwarden: Avoid at all costs (outage issue) by Technetium on Saturday September 10, 2022 @09:04AM (#32790243)
It's not going anywhere, that's part of what the investment is to further, per their post.
Re:Bitwarden: Avoid at all costs (outage issue) by elashri on Saturday September 10, 2022 @03:26AM (#32788619)
Iam curious how you made the clients connect to the server behind CF zero trust. have you white-listrd a path or so for them?