Bitwarden Makes Change To Address Recent Open-Source Concerns

[Espionage724]

Yay, good for those 4 people who use it

The fact that it's getting removed from google play store for not following Googles rules to be fully compatible to newer versions of android is alarming that developer is lazy ass and do not give a damn on updating his app, thus security vulnerabilities may also affect it and he won't give a damn. That is why i do not use apps outside play store.

This is where i agree with apple that they do not allow apps outside app store. There were talks about apple allowing sideloading, i do not know if they implemented it or not. But apps should be available from safe places only.

Meh I have a different perspective. Google's Play Store rules are outlandish and force you to support newer Android versions and intentionally restrict older versions. In my case this directly prevented me from sideloading a game to an old Android platform (game's APIs and stuff works fine on Android 7, but because of Play Store rules, the min version is 8).

I side-load a few Android apps to my phone running LineageOS 21, without Google apps. The apps are relatively minor (Duolingo, Spotify, etc), but I don't like the browser versions on my phone, and I'm certainly not entertaining Play Store to get em And in Spotify's case they want to be silly and not allow the Lite app to show up on Play Store apparently if you're in a first-world country or something along with not offering an apk, so I get double-benefits from a sideloaded modded apk with Premium

Google's walled-garden can continue to exist, while I use my phone without such limitations. I can't quite do that from iOS without running into 3rd-party app store limitations. And for me, side-loading the apps I do doesn't introduce any security concerns.

[Vistaus]

I have heard it's android app is getting deleted from google app store, because it's developer refuses to update it according to guidelines for newer android versions. So it's essentially unsupported.

And they can't release it on F-Droid?

Besides, Android is only one thing. Syncthing is also available on e.g. Ubuntu Touch.

[Vistaus]

It's better to have service made for one task then thing like nextcloud that tries to be everything at once. It's written in PHP and is very slow. I know about new php8 advances but still, nextcloud is a big pile. I know i used it for photo/video sync, calendar/contacts sync, notes, office, file storage too and i replaced them with services that were created around that task. Which turned out to be much better solution.

I do use other services for office and calendar. But still: Nextcloud is not that slow for me. Sure, the web interface could use a bit of a speed boost, but the clients are very speedy.

[mbod]

Docker is not complex at all it's just one yml file and by using simple guide written by you anyone can maintain it.

Even if you turned it on once and never update it it will still continue working.

I had nextcloud docker container running on my system for a while. it is pretty cool but I am back to VMs now.

Anyways, I will not leave my family with a linux server + vaultwarden docker with no support. That contradicts the whole idea of emergency access. In case of problems they would not even have access to the server or the docker image without the passwords - which are in bitwarden. That is a catch-22. This is not what I am looking for.

[Liarus]

I have heard it's android app is getting deleted from google app store, because it's developer refuses to update it according to guidelines for newer android versions. So it's essentially unsupported.

You have "Syncthing Fork" which is not only way better, but also development on it is planned to continue in the future, sycnthing wrappers are honestly just things you see everywhere, i use SyncTrayzor on Windows, SyncThingy on linux, and SyncthingFork on Android, KeepassXC handles dynamic file updates just fine, so i can vouch for it!

[Liarus]

How do you reliably sync+backup your passwords between multiple devices though?

Syncthing

[mbod]

It's been years Vaultwarden has "emergency access" feature

Ok. Looks like this was implemented with a release in Sept. 2021. That was after I moved to bitwarden. Too late for me.

Anyways, setting up a complex server / docker environment for emergency access that only I can maintain but not my family. With no support available when I am gone does not make sense.

[Vistaus]

Nextcloud is big pile of garbage. Just use Vaultwarden that is truly open source and gives you features that others hide behind paying wall.

Can you explain how I can store my other files with Vaultwarden? Because I'm not using Nextcloud solely for syncing my KeePass database. I use it for file storage of all of my files and syncing the database is an added benefit. I also use Nextcloud Notes for most of my notes.

I mean: I know you can store some files on Bitwarden/Vaultwarden, but it's not nearly as feature-rich as what Nextcloud offers, because Vaultwarden is aimed at passwords, not file storage.

And what would I run it on? Even if I set up a server, my electricity bill would be way higher than the 5 euros per month I pay for my Nextcloud instance.

[mbod]

Vaultwarden is very popular on the selfhosting community, it actually has a lot of users. It's very well done.

May be popular but does not support "emergency access" which is the key feature why I started to use bitwarden.
Same with keypassxc. I used that before but move to bitwarden because of the "emergency access" feature.

[stormcrow]

Because I don't want to install a file syncing service on every single device I own when I'm not going to use it for anything else. There's 0 setup or maintenance required for self-hosting vaultwarden. Just a simple docker-compose script. Vaultwarden running on a raspberri pi in the corner is super simple, easy, and only requires me to download the bitwarden client on my devices, not a separate syncing service.

There's already file synchronization systems for every device ecosystem in existence and not all of them require buy-in or vendor lock-in. Many of them are equally easy to set up, or may already be completely set up with the functional device. I get why you're doing what you're doing, but your reasoning, or at least your explanation, is seriously flawed. There's no more effort setting up things like Syncthing or even rsync or utilizing integrated native solutions than Vaultwarden. You just want to use Vaultwarden, and that's fine, but don't make it out that other solutions are too involved or complex.