Bitwarden Makes Change To Address Recent Open-Source Concerns

[phoronix]

Phoronix: Bitwarden Makes Change To Address Recent Open-Source Concerns

Following the recent concerns over Bitwarden potentially moving further away from open-source given SDK changes that appeared, Bitwarden has now further addressed the situation to ease the community concerns...

https://www.phoronix.com/news/Bitwarden-Code-Cleared-Up

[Espionage724]

Cool news!

I'll just stick with KeePassXC

[Kjell]

I'll just stick with KeePassXC

How do you reliably sync+backup your passwords between multiple devices though?

[Espionage724]

How do you reliably sync+backup your passwords between multiple devices though?

I keep my main file on my NAS; if I update it locally, I immediately back it up to my NAS shortly afterwards. I don't often add "serious" passwords to it though nowadays (did the bulk of em years ago) and lately just generate quick stuff in Firefox

My main computer has my main file and thus any up-to-date changes. I even-rarer need an updated DB file on my phone, but occasionally copy it from my PC whenever I'm doing general pic backups or something. On my phone I use KeePassDX (bio/fingerprint log-in and easy copy/paste credentials into Firefox/games/etc).

And whenever I feel like signing into cloud Drive stuff I occasionally sync it there

That's 5 places I can get my DB file from and if I add any really-important credentials to my DB I'll likely spend a few mins to manually sync everywhere (most timely is just the browser Cloud stuff and sign-in 2FA )

I haven't been in any situation where I needed my DB on a non-personal device (and very likely wouldn't copy it to one) but I'm pretty much good to go anywhere as long as I have either my PC or phone, and can copy the DB from my phone to a device with any KeePass-compliant client if I had to.

[jKicker]

Good as I've been a happy user for 3 years now. I mean they do have to support themselves somehow so there is always going to be a bit of tension with opensource community but they make it possible to deploy bitwarden privately with their opensource server or one can go with vaultwarden. So that is always possible and quite simple (did that but reverted back to bitwarden itself as it just works).

[pWe00Iri3e7Z9lHOX2Qx]

I keep my main file on my NAS; if I update it locally, I immediately back it up to my NAS shortly afterwards. I don't often add "serious" passwords to it though and lately just generate quick stuff in Firefox

My main computer has my main file and thus any up-to-date changes. I even-rarer need an updated DB file on my phone, but occasionally copy it from my PC whenever I'm doing general pic backups or something.

And whenever I feel like signing into cloud Drive stuff I occasionally sync it there

That's 5 places I can get my DB file from and if I add any really-important credentials to my DB I'll likely spend a few mins to manually sync everywhere (most timely is just the browser Cloud stuff and sign-in 2FA

I haven't been in any situation where I needed my DB on a non-personal device (and very likely wouldn't copy it to one) but I'm pretty much good to go anywhere as long as I have either my PC or phone, and can copy the DB from my phone to a device with any KeePass-compliant client if I had to.

While I'm glad that works for your needs, manually copying password database files around sounds like a terrible workflow for what I would want. I've done the KeePass + KeePassXC + KeePassDX (or other Android clients) + cloud provider sync many times before settling on BitWarden. The unfortunate reality is that most of the KeePass clients aren't anywhere near as powerful / flexible as the original KeePass on Windows. It's synchronization engine with triggers and scripting allows you to do pretty much anything, combined with the fact that it supports a bunch of network protocols out of the box (e.g. WebDAV).

[User29]

How do you reliably sync+backup your passwords between multiple devices though?

through my self hosted nextcloud

[Daktyl198]

Bitwarden has always been "open-core", in that most of it's features are open source but the more enterprise-leaning features are source-available. Bitwarden doesn't try to hide this at all, but has always made the open-source parts able to be built without the source-available code included. The SDK being required by the open-source code was a bug, and is now fixed. Everything is back to the way it was before.

I still love my self-hosted vaultwarden setup combined with bitwarden's amazing clients (browser extensions and phone apps). It'll take more than this for me to switch to something less convenient.

[Scotty_Trees]

Still using BitWarden!

[oleid]

While I'm glad that works for your needs, manually copying password database files around sounds like a terrible workflow for what I would want.

The KeePass application for Android can sync via SSH. And for my PCs I use syncing. Thus, the sync is automatic