I don't know if I'd still suggest Bitwarden with the dual-licensing drama from not too long ago and the new CEO.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
I wouldn't trust Bitwarden anymore. I don't believe they've done anything bad just yet, but they recently sold out to a private equity firm and quite literally removed "transparency" from their company values. KeePassXC is your friend.
But they replaced transparency with "trust" so surely we can trust them right? /s
Apparently Gmail and proton mail block PeerTube account registration emails. I have been trying for weeks to get a PeerTube account… anyone know an email service that allows PeerTube registration emails?
I had luck with tutamail
I've been using KeePassXC with Syncthing for years and it's been great as a password manager for myself. But I don't need to share those credentials with anyone.
But I don't need to share those credentials with anyone.
Yeah, I like BitWarden because it makes sharing passwords very easy. My wife and I have a few shared accounts, and have a family vault set up. So anything we want to share just gets transferred into the family vault, and we can both easily access it. And since it even supports TOTP, we can have those directly on the shared accounts without needing to bug each other with the “hey I’m trying to log into {x}, send me your Google Authenticator code” song and dance.
Same, plus a yubikey for 2FA
Aegis is my chosen 2FA. never have been convinced on hardware keys personally.
Does keepass have a reputable browser extension or is the application itself all that's used? I think that's what moved me off Keepass initially after using it for like six years and then moving to BitWarden a few years ago
I assume the point of the extension is to have support for autofill, if that is the case, you should be aware that it is generally a bad idea to give your browser access to that info directly since they are the definition of internet connected apps. What I do instead of autofill with keepassxc is open the vault and press the copy to clipboard buttons which works essentially the same way as autofill just with a couple more clicks.
IVPN is a well-established private VPN provider, with a strong track record.
Windscribe is also of note, being part of the cross-promotional circle of agreements with other established and trusted services such as Tuta, and Addy.io
Obscura is also worth a look for the especially privacy minded approach they take to running a VPN, essentially severing the entry and exit points of your network traffic across providers so that even if Obscura or their partners were to fail a user's privacy, there wouldn't be anything lost.
Mullvad is also a longstanding and respected VPN but I believe there's been pretty severe controversy around them recently, and that should be looked into before considering them. They were essentially the gold-standard up until recently.
All of these providers have a variety of anonymous payment methods, to varying degrees of convinience and anonimity.
KeepassXC and Strongbox on iOS. using mailbox.org webdav (via rclone mount for KeepassXC) for my vault sync, plus yubikey slot 2 HMAC challenge response which works great. Not missing vaultwarden too much
You could also use Vaultwarden an open source fork of Bitwarden. It works with the official app and don’t know why you need Ente for 2FA as Bitwarden/Vaultwarden also covers that AFAIK
Vaultwarden is not a fork, it's a reimplementation of the server.
Usually the point of 2fa is to protect the account if the password is comprimised, so not keeping the password and the 2fa in the same place seems logical
For 2FA I've been using Aegis (FOSS). Dunno how it compares to Ente Auth
Thanks for that. I've moved to mailbox to, i've bought a domain and i use addy.io for aliases. I've also choosen KeepassXC to replace proton pass and i use Syncthing to keep the data of keepassxc up to date between my PC and my phone. And i think i will self host for the drive soon (waiting for black weeks to try to but a beelink s12 pro cheaper). For A2F : Aegis. Everything runs well on my Graphene OS phone. Do we really need vpn while we can use good DNS settings ?
Walt.is seems to be a promising wallet alternative even if you use a degoogled device.
I want to ditch Proton for obvious reasons but I’m really stuck on what VPN to switch to. They all seem to suck in their own special ways.
Because of people being driven away from proton I have been suggesting it more than usual, but the simplest and most correct answer if you value your own safety is mullvad.
The service speaks for itself and there is nothing that compares. Several people have replied to me when I suggest mullvad saying “what about one of the founders donations to a Swedish far right political party?” so rather than extol the many virtues of literally the best vpn service out there I will spend time explaining the thing they’re talking about.
There is a party in Sweden called orebro. It is a small political party based in the city of orebro and has varied platforms. One is a policy called remigration which broadly refers to deporting non ethnically Swedish people from the country. I am tiptoeing around explicitly calling this a far right policy because frankly Europe as a whole is trending against migration so it may reflect window shifting more than goose stepping and I am a communist and no communist nation in history has ever operated on open borders however the word remigration as a description of their platform is, let’s just say an ethnically charged dogwhistle.
The party’s other platforms are what could be called left or even schizophrenic and someone described it as “Marxist revisionist” and that’s probably true.
One of the two founders of mullvad, Daniel berntsson, donated half a million kronor to orebro.
Do you consider that policy right wing? Is it bad enough to outweigh the other platforms of the orebro party? What portion of the half million kronor donation would you consider to be going to that platform as opposed to the party’s many other platforms? What portion of that donation comes from berntssons stake in mullvad? What portion of your five dollars a month supported the party or if you take a more nuanced view, that particular policy? Is it even possible to ethically consume services under capitalism? When you pass on will the portion of this purchase that can be traced to that policy by Anubis’ accounting staff make your soul heavier than a feather?
Only you can answer those questions. I would recommend you instead answer the following question: is that enough to cause you to accept a worse quality and more unsafe service?
If it is, a similar but not equivalent service is ivpn, but as a current user of their service it is more complex, easier to screw up and has not been tested to the extent of mullvad.
Tutamail is apparently working on nextcloud integration, which I think also is a great option. It will hopefully give the ecosystem experience without the ecosystem buy in.
ELI5 why Mailbox.org instead of Tuta?
Both are good options, but ATM the tuta protocol isn't standardized which means you are relying on tuta maintaining their favorable stance on privacy, unlike other providers which still have support for IMAP and pop. ATM if you go with tuta you are committing to both their infrastructure & client whereas most other providers you don't have to use their client.
For Mailbox there's also Tuta.
For VPNs you could consider IVPN. It's Gibraltar-based.
As for document collaboration; Cryptpad.
Bitwarden is US-based; see here - "Bitwarden Inc. is incorporated in the State of Delaware in the United States of America. 8bit Solutions LLC is wholly owned by Bitwarden Inc.". That said, it's OSS and can be hosted locally.