this post was submitted on 15 May 2026
998 points (99.1% liked)

Selfhosted

60967 readers
673 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

In the latest episode of "they will always sell you out" - they sold you out! Who would've thought.

Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can't exist without "leeching" off of Bitwarden.

top 50 comments
sorted by: hot top controversial new old
[–] RonnyZittledong@lemmy.world 262 points 2 months ago (15 children)

Jesus, I'm tired of switching password managers.

[–] MangoPenguin@lemmy.blahaj.zone 82 points 2 months ago (15 children)

KeePassXC + KeePassDX is probably the best option, with the downside of no way to sync easily (syncthing is probably the best option there)

I might switch back at some point, been getting frustrated with the bitwarden extension performance always being so poor.

[–] electric_nan@lemmy.ml 20 points 2 months ago (1 children)

Sync however you want. Syncthing, Nextcloud, Dropbox, Gdrive etc.

[–] Flagstaff@programming.dev 15 points 2 months ago (7 children)

Syncthing is the way to leave Google Drive, etc.

load more comments (7 replies)
[–] german@pawb.social 16 points 2 months ago (7 children)

Merge conflicts are a concern for KeePass, especially for those that don’t want to resolve them. Sync is difficult. AFAIK this is a very common issue with Syncthing setups.

Also, the portability from Bitwarden to KP leaves a bit to be desired, though that’s probably 90% on BW.

load more comments (7 replies)
[–] Resonosity@lemmy.dbzer0.com 13 points 2 months ago (1 children)

My first password manager was KeePassXC.

Hooked it up with Syncthing, and I've never had issues aside from the occasion database duplicate.

load more comments (1 replies)
load more comments (12 replies)
[–] slate@sh.itjust.works 30 points 2 months ago (38 children)

KeePass isn't going anywhere. They're also dragging their feet on passkey support, so you might go with KeepassXC.

[–] zeitverschreib@freundica.de 18 points 2 months ago (2 children)

@slate

Wasn't there some commotion a few weeks about KeepassXC and vibe coding?

@RonnyZittledong

[–] Dumhuvud@programming.dev 34 points 2 months ago* (last edited 2 months ago) (6 children)

Yeah, there was. It was forked because of that, actually: https://codeberg.org/ChiPass

load more comments (6 replies)
load more comments (1 replies)
load more comments (37 replies)
load more comments (13 replies)
[–] Shortstack@reddthat.com 106 points 2 months ago

That’s troubling, I don’t like what this portends.

The new CEOs background especially suggests they’re spiffing up the company for a later sellout, why else would they pick a merger specialist for the role?

[–] otter@lemmy.ca 80 points 2 months ago* (last edited 2 months ago) (1 children)

I think the original title was more helpful because it shows that this is a recent development. Maybe you can add "new CEO"?

Bitwarden scrubs ‘Always free’ and ‘Inclusion’ values from its website as longtime execs step down

In February, longtime CEO Michael Crandell moved to an advisory role, according to LinkedIn, with no announcement from the company. His replacement, Michael Sullivan, former CEO of both Acquia and Insightsoftware, touts his experience with “all facets of mergers and acquisitions” on his own LinkedIn page, including experience working with leading private equity firms.

CFO Stephen Morrison also left Bitwarden in April, replaced by former InVision CEO Michael Shenkman. Both Crandell and Morrison joined the company in 2019. Kyle Spearrin, who started Bitwarden as a fun hobby project in 2015, remains the company’s CTO.

[–] german@pawb.social 12 points 2 months ago

You're right, changed

[–] altphoto@lemmy.today 63 points 2 months ago (1 children)

Ah shit. Here we go again!

[–] osanna@lemmy.vg 29 points 2 months ago (1 children)

Can anyone say “Enshittification”!

[–] altphoto@lemmy.today 19 points 2 months ago

Enshitification coming right up!

[–] evil_andy@sh.itjust.works 56 points 2 months ago

Well, poop.

[–] silentjohn@lemmy.ml 55 points 2 months ago (2 children)

Every company is basically evil at this point.

[–] iamthetot@piefed.ca 33 points 2 months ago (1 children)

There is no ethical consumption under capitalism.

load more comments (1 replies)
[–] grue@lemmy.world 13 points 2 months ago (1 children)
load more comments (1 replies)
[–] SnotFlickerman@lemmy.blahaj.zone 50 points 2 months ago* (last edited 2 months ago) (11 children)

This is why corporate promises can never be trusted, because a new CEO can change those promises on a whim.

It's part of why despite being interested in Beeper, I never signed up for it because I had questions about if those privacy promises they made would be kept if they sold to a bigger company... which they eventually did.

On the plus side Bitwarden already made an official open source self-hosted version, which can be forked and/or return to the community developed Vaultwarden roots.

Meanwhile KeepassXC keeps on chugging along.

load more comments (11 replies)
[–] godsammitdam@lemmy.zip 42 points 2 months ago (8 children)

Has Vaultwarden said anything yet? I imagine that, if necessary, given that bitwarden's client is still open, at the point they choose to try and close it, we, the users, can fork it and establish it for vaultwarden, correct? Or, maybe even the vaultwarden team will think about forking it themselves and making a light client as well to pair with the current server.

But Vaultwarden can exist without "leeching" they just haven't needed to yet. That's more symbiotic than parasitic. The parasite class just took over Bitwarden after all.

load more comments (8 replies)
[–] Adderbox76@lemmy.ca 37 points 2 months ago

Goddammit. Why can't we have nice things?

[–] floquant@lemmy.dbzer0.com 36 points 2 months ago

All hail the new Chief Enshittification Officer!

[–] sloppy_diffuser@sh.itjust.works 35 points 2 months ago (1 children)

They responded on reddit and walked some of it back as an "oversight": https://www.reddit.com/r/Bitwarden/comments/1tdvnh7/comment/olznwcv/. Allegedly, I'm too lazy to verify.

[–] blarth@thelemmy.club 51 points 2 months ago (1 children)

A change that would require intent to make is not a mistake or oversight.

This sucks. I committed to Bitwarden years ago and now am going to have to switch before they lock me in the garden.

[–] german@pawb.social 35 points 2 months ago* (last edited 2 months ago) (1 children)

They also haven’t addressed the removal of inclusion and transparency from their goals.

EDIT: They did. They said it’s “less of a priority”. The article I shared has been updated. I smell corporate bullshit though. “Oversight” this, “priority shift” that, they’d have to work hard to gain any trust back.

[–] Cyber@feddit.uk 33 points 2 months ago (2 children)

My solution:

https://keepass.info/donate.html

(& yes, I'm linking to their donate page first)

[–] aesthelete@lemmy.world 25 points 2 months ago

Keep ass what though? /s

[–] hexagonwin@lemmy.today 13 points 2 months ago (6 children)
load more comments (6 replies)
[–] wickedrando@lemmy.ml 26 points 2 months ago (1 children)

i was just thinking this week with the passphrase addition how good bitwarden is and when will the other shoe drop. There it is.

load more comments (1 replies)
[–] DFX4509B@lemmy.wtf 24 points 2 months ago* (last edited 2 months ago) (1 children)

Move to KeePassXC or its recent LLM-free fork while you still can, because at some point Bitwarden is going to try to go closed-source again.

[–] MonkeMischief@lemmy.today 13 points 2 months ago (1 children)

Oh crap, how's KeePass got an LLM involved‽ Time to look into this now...

I did find https://codeberg.org/ChiPass/ChiPass , but it looks like a very new project.

[–] DisasterTransport@startrek.website 19 points 2 months ago* (last edited 2 months ago)

For once ADHD preventing me from completing a migration is a boon, I guess I'll move back to keepass

[–] goatinspace@feddit.org 17 points 2 months ago
[–] aesthelete@lemmy.world 17 points 2 months ago (1 children)

I'm going to have to just write my own one of these fucking things aren't I?

[–] BritishJ@lemmy.world 27 points 2 months ago* (last edited 2 months ago) (1 children)

KeePassXC and Vaultwarden exist

load more comments (1 replies)
[–] Mister_Hangman@lemmy.world 15 points 2 months ago (1 children)

Clue me in on why vaultwarden can’t exist without it?

[–] baduhai@sopuli.xyz 35 points 2 months ago (1 children)

It can, but vaultwarden, as it currently is, is an implementation of the server only. So if bitwarden decides to go closed source all the way, they'd haver to start either creating their own clients or fork the current bitwarden clients.

[–] scott@lem.free.as 12 points 2 months ago (1 children)

That's fine. We just treat it as a fork from this point onwards.

load more comments (1 replies)
[–] outerspace@lemmy.zip 14 points 2 months ago

Sad. Replaced everything with keepassxc + syncthing

[–] palmtrees2309@lemmy.world 12 points 2 months ago (4 children)
[–] auntieclokwise@lemmy.world 14 points 2 months ago (5 children)

No, KeePass. Fully open source, no cloud involved in any way, unless you want something to sync your data (the server only ever sees your encrypted database - all encryption and decryption is done locally). You can also host your own sync server using any of a variety of different protocols.

load more comments (5 replies)
load more comments (3 replies)
load more comments
view more: next ›