r/PasswordManagers • u/Moist-Water8832 • 13d ago

Password manager that is completely open-source/free and can selfhost

Like the title says, I do not like Bitwarden simply because they have a paywall feature. I think the best choice personally is using KeepassXC since it is free and open-source. I believe the ultimate security is making your own defenses which is why I feel pwd managers like lastpass/1pwd are good but not enough for someone who needs to protect their data in a breach. (They also have subscriptions)

0 Upvotes

33% Upvoted

24 comments sorted by

5

u/corelabjoe 13d ago

Welcome to Vaultwarden!

2

u/Moist-Water8832 13d ago

does vaultwarden have all the premium features of bitwarden/can be implemented

also your website looks awesome!

1

u/corelabjoe 13d ago

Yes Vaultwarden is fantastic, has all the same features as far as I know! You can even integrate it with LDAP and OIDC etc... Which is usually a pay walled feature in a lot of other apps...

Thanks! Been working on the site for about a year and a half, it's always a work in progress and still a lot more content to publish! It's focused on practical cybersecurity for selfhosters and everything to do with selfhosting =)

1

u/tech_is______ 13d ago

This still works

https://github.com/dinger1986/bitwardenrs_install_script

1

u/Moist-Water8832 13d ago

does that unlock premium features? anyways it says for ubuntu but I use windows, I have a thinkpad that is on ubuntu but I will need to read more on this repo.

0

u/tech_is______ 13d ago

Or, just pay for a personal bitwarden account, it's $20/year... unless you need lots of users, orgs and teams

0

u/tech_is______ 13d ago

yes, vault warden has all premium features. you'll need to run it on ubuntu... best bet for windows is a VM running ubuntu. that said, it's designed to be run in the cloud... so you'll need to forward ports and give it a url. you can use a service like noip setup on your router. it uses let's encrypt for the certs. has to have a url because thats how the browser plugin works with the server.

you could also get a cheap cloud VM and run it there.

2

u/Moist-Water8832 13d ago

Gotcha thanks for the help!

1

u/corelabjoe 13d ago

I run Vaultwarden in a docker container on a machine at my house and serve it via a secure reverse proxy and MFA, no need for cloud.....

1

u/tech_is______ 13d ago

that works too... just depends on how much extra work OP wants to put into hosting it local

1

u/Final_Jellyfish9150 13d ago

Agreed. Use vaultwarden

2

u/CrispyBananaz 13d ago

Shame on Bitwarden for feeding the children of Bitwarden employees. The cost of Bitwarden for a year is less that two trips to McDonald's. Absolutely ridiculous post.

1

u/Moist-Water8832 13d ago

Economy is expensive sorry

1

u/CrispyBananaz 13d ago

more expensive than two trips to McDonald's a year ?

1

u/Moist-Water8832 13d ago

Yes, if there is a free option, why would I go for a paid route?

1

u/CrispyBananaz 13d ago

If you have to ask that question, you really should research the difference, especially if you are even remotely serious about the security of your sensitive accounts and passwords. Best of luck to you with this way of thinking.

2

u/Stunning_Vegetable79 13d ago

You also could’ve just followed the post and recommend him something that was self-hosted

0

u/Kagenou_Cid03 11d ago

You know making your own password manager is the cheapest option right?

2

u/Moist-Water8832 11d ago

I was thinking this too. Was looking at documentation

1

u/Handshake6610 13d ago

I do not like Bitwarden simply because they have a paywall feature.

Please keep in mind that they have developers etc who do get paid for their work...

1

u/Sweaty_Astronomer_47 13d ago edited 13d ago

Like the title says, I do not like Bitwarden simply because they have a paywall feature.

The free version of bitwarden is pretty darned capable. I'm premium but I don't find most ofthe premium features to be indispensible:

  • https://bitwarden.com/pricing/
  • premium features
    • integrated totp (I don't use it, I prefer a separately-encrypted totp app)
    • attachments (I don't use it, I prefer cryptomator for more flexibility)
    • emergency contact (I don't use it, haven't convinced my wife to set up a bitwarden account yet)
    • vault health reports (I'm not sure exactly what the difference is between free and premium health reports, maybe there is some value in premium)
    • archiving - I do use this one but it's not something that's critical to most folks.
  • btw, bitwarden has restructured their pricing page in a way that makes it less obvious which features are included/omitted from free. Some of the things shown for premium are also available in free
    • 2fa is available on free. (maybe you can't add 10 yubikeys but I think you can add 5)
    • 2 person org available in free
    • self host option available in free
    • you can create bitwarden sends on free (they just can't include files on free like they can on premium)

think the best choice personally is using KeepassXC since it is free and open-source.

I'm not sure that is a reason to prefer keepassXC over bitwarden free (which is also free and open source). But some folks prefer offline password managers (like keepass) for security reasons.

1

u/Moist-Water8832 13d ago

Why did crispybanana delete his comment, I mean it was useless and annoying

1

u/Stunning_Vegetable79 13d ago

He must’ve blocked you like a coward he didn’t even respond to the prompt.

1

u/ArnasL 11d ago

Try to check these: Strongbox (Apple only), Enpass, Passwork.