Adderbox76,

Long time Bitwarden user. Never been steered wrong. One of the few apps that I pay for premium not because I need the extra features, but because I value it enough to support the devs financially

Allero,

The backend is proprietary. Avoid.

Sgn,

Avoid why?

Allero,

Because we only know what the client does, and have no clue on the server side of things, allowing Proton to do any manipulations with the data. Not ideal when you consider it for password storage.

Sgn,

What should I use then?

Allero,

Something like Vaultwarden if you care about cloud sync, or KeePassXC if that’s not on your priority list.

refalo,

if the client is e2ee and you can control that, then why is the server relevant?

Allero, (edited )

Because non-obvious backdoors can be added to the client that break or circumvent encryption (looking at you, xz), stealing all of your passwords, and no one will be able to raise the alarm just by looking at the server code.

Open-source backend allows to generally avoid this situation, while also potentially rendering you able to self-host if you’re paranoid.

refalo,

and you can control that

Sorry, I meant “assuming one has complete control over the client source” where the remote cannot just change it on you.

Allero, (edited )

I mean they can make a sneaky update to the client that introduces such changes.

Sure, if you won’t update your client, this won’t affect you, but would potentially open you up to other security vulnerabilities.

refalo, (edited )

This was a real concern with MEGA back in the day (after Kim said you should no longer trust them) and a big reason why I prefer to use standalone client apps that I can control the source of.

warmaster,

As all things Proton.

Zetta,

Best alternative for email?

RobMyBot,

E2E Encrypted FOSS smoke signals that are only visible on a Time-Based One-Time wavelength of light are the only way.

Harbinger01173430,

Even steam proton?

warmaster,

Except anything Valve, which is awesome.

hswolf,
@hswolf@lemmy.world avatar

I use their mail system, and it’s pretty good ngl

jelloeater85,
@jelloeater85@lemmy.world avatar

I’ll take KeepassXC and KeepassDX + SyncThing, just works and I don’t have to ever rely on someone else for my most sensitive data.

Dyskolos,

This. At least until i find a better solution than syncthing. But keepass(xc) all the way.

jelloeater85,
@jelloeater85@lemmy.world avatar

I tried Google Drive, and also Seafile. the catch is that it needs to sync the files to your phones local file system. You could also do Next cloud or use Folder sync. play.google.com/store/apps/details?id=dk.tacit.an…

Dyskolos,

Problem is, i want to exclude third parties. I’d prefer a direct heavily encrypted connection directly to my server. Definitely not a cloud somewhere, especially not google & co.

Nextcloud is way too blown up and vulnerable for me. I really only need file-synching. Got servers working for the other stuff like caldav.

qpsLCV5,

i use Termux and just scp/rsync my stuff around.

ideallyi’d use Unison sync inside termux, but it hasnt been packaged and i dont know the first thing about ocaml, so it’d be hard for me to make the needed adjustments to package it.

Dyskolos,

Termux/Rsync is nice and all, but not really a comfy fire’n’forget-solution like syncthing.

And today i heard the first time of unison sync. So i have no opinion at all here, but thanks for the hint.

pineapplelover,

I’ll still stick with bitwarden, but if I were to introduce someone very tech illiterate, I would probably recommend proton

cordlesslamp,

I’m tech illiterate and been using Bitwarden for 3 years (premium), and honestly it doesn’t work very well on Android. Every time I need to enter a password, it’s completely hit-or-miss with Bitwarden. Half of the time it doesn’t even pop up. I’m using Xiaomi phone and tablet with stock rom (global version).

Should I switch to Proton?

misc,

Try the free version and switch to premium if you like it better than bitwarden.

cordlesslamp,

In terms of “Free version”, what would be better? What would you recommend if I were to use one as Premium (daily use) and the other as Free (for backup purpose)?

misc,

Idk its up to you really try both out and go with what you like and buy a premium for what you decide to use daily .

kalistia,

Before switching you should maybe read this and wait for the native app : reddit.com/…/going_native_the_future_of_the_bitwa…

cordlesslamp,

Wow thanks, I have no idea. That’s great news. I’ll definitely wait for the native app. But in the meantime I’ll try out Proton as a “backup” just in case something bad happens to Bitwarden or my personal vault.

cyclohexane,

Which sites or apps does it not pop up? It is rare for it not to pop up for me.

pineapplelover,

Sometimes you have to long press on the password box and bitwarden might appear or a little “autofill” option may appear along in the 3 vertical dots pop up. Most of the time, Bitwarden auto pops up for me.

I feel like if you’re already using Bitwarden and you’re talking to us on Lemmy, you’re not tech illiterate.

doubletwist,

I have the same issue with Keepass2Android. I think the issue is with Android itself rather than the password app.

Natanael,

Install the keyboard autotype plugin for Keepass2Android!

NotMyOldRedditName, (edited )

Same problem on 1password.

As a mobile developer I can tell you that working with Android keyboards has been a giant fucking pain in ass since inception to today.

While I can’t speak specifically to why they both seem to have this problem, I wouldn’t be surprised if the OS is part of the problem.

I wouldn’t be shocked that if someone had it working consistently, it might be because of the most heinous hacks, or private greylisted APIs or some other nonsense.

cordlesslamp,

I do remember trying several different keyboard apps, but none works consistently enough and some don’t even work at all.

HumanPerson,

I like anysoft. The autofill thing for bitwarden sometimes takes a second but it always shows up.

helenslunch,

Proton is almost exclusively “miss” so that’s a giant no from me.

Wilzax,

Proton VPN and nothing more.

peregus,

They need to focus on providing quality services instead of quantity. The ProtonMail webmail is a shame: multiple selection lost if you click just outside the checkbox because that will open the email, emails that just after have been deketed reappear in the inbox and don’t get me started on the search 🤢!

P.s. I’ve double commented because I’ve just realized that I’ve written the other comment in Italian 😆, sorry.

Willy,

the password manager kinda sucks too. credit cards are in a category that you have to delete the name of the site you’re visiting in order to see. sometimes I question why I’m paying for the thing. lastpass was way better 10 years ago.

chemicalwonka,
@chemicalwonka@discuss.tchncs.de avatar

Don’t put all your eggs in one basket

Evotech,

Very much agree

I use protonmail and very happy with that, so much so I pay for it.

But I would not place my mail and all my secrets in the same spot.

Napain,

for the love of god use a free open source app like keepass, this is a untrustworthy company https://lemmy.ml/pictrs/image/8f7f6919-0ea3-4d26-b4bf-0a166e3245a9.jpeg

chemicalwonka,
@chemicalwonka@discuss.tchncs.de avatar

Or even better use a local password manager. People will be swallowed by so much false comfort

Napain,

keepass is local

TwinTusks,

Isn’t keepass local?

nasi_goreng,
@nasi_goreng@lemmy.zip avatar

Which F-Droid client is that?

Napain,

it’s the standard one

alyth,

Looks like the standard F-Droid client

Oh wait it’s not, F-Droid doesn’t show the file size at the top

randint,
@randint@lemmy.frozeninferno.xyz avatar

huh, my standard f-droid client does show the file size

misc, (edited )

Yeah everything except the file size showing checks out

Edit : maybe it is the new versions or beta which most of us don’t have as it is not suggested .

helenslunch,

I mean, it is as trustworthy as any for-profit company can be. KeePass is great if you have the technical knowledge and time required to set up and manage it properly.

Napain,

both of them you download and use, it requires the smae amount of technical knowledge. in fact you could argue, that proton pass takes more technical expertise since you need to set up a account online first.

helenslunch,

Sure, if you’re okay with losing all of your passwords when your phone dies. But that’s not realistic.

If you don’t you’re going to have to find a way to back them up, which is considerably more convoluted.

Helkriz,

I’ve been using Keepass like more than 5 years. And its perfect.

Binzy_Boi,

Neat, I'm personally gonna keep with KeepassDX, but it's good knowing that there's some more variety popping up in the mobile market.

fine_sandy_bottom,

For me keepassxc is a dramatic improvement over a centralised service.

ReakDuck,

I use both and am afraid that I will lose the passwords in Proton Pass as Its a service they can restrict me of.

I should startto copy some accountd that I dont have yet in keepass but keepass is still the master holder

IllNess,

I’m not really sure what happens if Proton bans your account for any reason but Proton Pass does have offline access. I assume if you turn off internet access, you can still get all your passwords.

ryannathans,

Is that not the same risk vith bitwarden too

circular,

Bitwarden has a really nice CLI that lets you backup your vault easily. I personally run bw export --format json --raw every few week so if for some reason I lose the “cloud” access, I can still migrate to self hosted or a different password manager. (Or you may choose to self-host to begin with)

ryannathans,

Great to know!

ReakDuck,

The danger with self hosting is that police can always steal everything from you.

Felt weird hearing story of my ex that the german customs office just stole their Laptop and Phone. She couldn’t show me pictures and she hadn’t any backups or smth.

I am afraid this could happen to me too when they suspect something but are wrong at the end. At the entire time I will not have access to my drives of my server and maybe they accidentally break them. Not sure if they will believe me that its a raid 1, I can imagine them stealing everything without questioning.

chebra,
@chebra@mstdn.io avatar

@ReakDuck @circular

If you follow the 3-2-1 backup strategy then this should not be a problem. Backups are an essential part of self-hosting.

ReakDuck,

I wonder how to comfortable sync a 2TB drive and take it with you.

Additionally. I dont do backups. I only sync devices. Except for Phone pictures which are uploaded and deleted from the phone. I think there should be a second device that keeps data

chebra,
@chebra@mstdn.io avatar

@ReakDuck

> I dont do backups

Well then... there is nothing good coming out of that decision. Good luck, lol.

ReakDuck,

I wonder how I should design backups as large as 2TB. I would love to have something outside of my Home that does backups, but doing this remotely seems overkill.

But you are giving me the potential to think about it and redesign my insecure data that may dissappear someday.

chebra,
@chebra@mstdn.io avatar

It all depends on how much you treasure that 2TB of data. If you cannot afford to lose it, then you don't really have any other option. All I'm saying is that self-hosting and backups go hand in hand. Self-hosting without backups is just asking for trouble. But what you are talking about sounds more like 2TB of old photos, that's not really self-hosting. Just get a second 2TB drive and copy it there. This thread started with talks about password managers and their backups - those aren't 2TB.

peregus,

Hanno iniziato da un po’ di tempo a fornire troppi servizi, dovrebbero focalizzarsi di più a sistemare quelli che hanno. La webmail di Protonmail è un abominio: perdita di selezione multipla aprendo un’email, email che ricompaiono subito dopo averle cancellate, ricerca…stendiamo un velo pietoso!

ErilElidor,

Just give me a Linux client for proton drive please. I’m tired of manually uploading/downloading files 😐

Blisterexe,
herrcaptain,

Very cool! Thank you for this.

qaz,

I tried this before and it was very unreliable when used with WebDAV.

helenslunch,

This works with Proton?

JohnWorks,

On their GitHub:

Supported cloud providers Celeste can currently connect to the following cloud providers:

Dropbox Google Drive Nextcloud Owncloud pCloud Proton Drive WebDAV

That’s pretty cool all things considered I didn’t think a 3rd party client could be made for drive

helenslunch,

Neat!

helenslunch,

So I installed this and gave it a whirl. I was hoping it would work like the proprietary accounts in Linux where it would integrate into the OS but alas, it appears it’s just a folder sync.

Aside from that I run into the same limitations I run into in the browser where file transfers just fail…

Sticking to OwnCloud and Immich for now…

spraynpray,

deleted_by_author

  • Loading...
  • Blisterexe,

    i tried it recently, and it worked, it may have broken since then though

    herrcaptain,

    Yeeeeees. If you’re orienting your company as the privacy-alternative it’d be great to emphasize support for the main privacy-oriented OS. I get that developers don’t grow on trees, but this seems like a pretty crucial feature that should be prioritized.

    I mean, I recently switched to Proton knowing what I was getting into, but I’d really like to see this happen soon.

    helenslunch,

    On the one hand, yes.

    On the other, they’re still a for-profit company and Linux users still make up a small portion of their customers.

    Duamerthrax,

    They likely have a larger portion of Linux users then other companies though.

    helenslunch,

    Meaningless information from a business perspective

    Duamerthrax,

    I don’t think you have the insider information to really make that call.

    helenslunch,

    The only “Insider information” I have is a public interview with the CEO on a Linux creator’s channel.

    Fake4000,

    Proton is great but I do feel wary from putting all my eggs in one basket again.

    Cossty,

    I was just about to write this… Proton is cool, but I only use mail from them. All my other services are independent from each other, and soon I will be self hosting most of them.

    pulverizedcoccyx,

    I’m switching from privatevpn to protonvpn just for the port forwarding with wireguard within a terminal, no stupid GUI app. Quite pleased with the service, they do VPN well.

    anonymouse,

    Same, staying with bitwarden for now

    MarinoLupo,

    Same, staying with keepass for forever

    fluckx,

    Same. Although the simplelogin integration seems nice.

    sudneo,

    I discovered not too long ago that Bitwarden has the same integration! bitwarden.com/…/add-privacy-and-security-using-em…

    You need to configure it on each device though, and you need to generate an API key first.

    Pechente,

    Bitwarden also has better features for now like more solid URL matching (handy if you have a bunch of services on subdomains of the same domain name).

    cmgvd3lw,

    Hey what type of URL matching do you use for achieving this? BW suggest me all the entries for a domain and doesn’t differentiate sub domains.

    Pechente,

    I don’t have Bitwarden installed right now but I believe they had a parameter called „starts with“ or something? That has always been solid for me.

    mholiv,

    You have to set each entry under the same domain to to match against “host” and you’re set.

    qaz,

    I use “Host” matching to only target specific subdomains.

    MagneticFusion,

    Waiting for Calendar and Drive to be fully open sourced. I can’t find the source code anywhere.

    Atemu,
    @Atemu@lemmy.ml avatar

    Drive is under a different org:

    github.com/ProtonDriveApps/android-drive

    MagneticFusion,

    Im aware. But they are all under Proton. So I’m hoping to eventually see it.

    camr_on,
    @camr_on@lemmy.world avatar

    How does it compare to vaultwarden/bitwarden?

    FoD,

    I don’t think protonpass has auto fill even on browser extension.

    Or maybe I’m too stupid to figure it out. I ran side by side against bitwarden which I love. Could not figure out a way that didn’t make me manually c/p the creds.

    barbara,

    When it launched the apps were more modern than bitwarden. If bitwarden hasn’t improved since, then it’s still the same

    asbestos,
    @asbestos@lemmy.world avatar

    Bitwarden’s interface hasn’t changed a bit and it’s a pity

    Asudox, (edited )
    @Asudox@lemmy.world avatar

    It’s about to get Material You

    JackGreenEarth,

    Weren’t they planning to change it from Microsoft’s Android UI, it’s just taking a while, as they have to rebuilt it from scratch? I thought I saw something about that.

    anonymouse,

    Correct, they announced it two months ago: androidpolice.com/bitwarden-app-about-prettier/

    9tr6gyp3,

    Whats wrong with it?

    AFC1886VCC,

    Bitwarden is excellent but i have a few nitpicks on Android.

    I wish I could change the “Username” field to “Email address” because it kind of annoys me having email addresses under usernames. I’d also like to add things to favourites or folders without having to go into edit mode on every entry individually. Same with adding notes. The app has trouble following the system theme and doesn’t always autofill reliably for me, meaning I sometimes have to go into the app and copy/paste my passwords manually.

    Other than that, the UI is just a bit ugly compared to some other password managers,

    ayaya,
    @ayaya@lemdro.id avatar

    Try Keyguard, it is open source and much nicer than the regular Bitwarden app. Do not use the version from the Play Store though, get it directly from Github.

    starman,
    @starman@programming.dev avatar

    It’s not open source. Only source available unfortunately.

    ayaya,
    @ayaya@lemdro.id avatar

    I did not realize that. That explains why it’s not on F-Droid. Really unfortunate but at least it can still be publicly audited.

    kratoz29,

    Huh, this is the first time I heard about this, thanks for sharing!

    Do not use the version from the Play Store though, get it directly from Github.

    Why? I use Vaultwarden with Bitwarden from the Playstore is there anything wrong with it?

    starman,
    @starman@programming.dev avatar

    There is no guarantee that play store build contains the same code as GitHub repository. Ideally you’d need to compile apps yourself.

    But most of the time stuff like vaultwarden is trustworthy enough.

    ayaya,
    @ayaya@lemdro.id avatar

    The version on the Play Store requires a “premium” subscription for some features but the Github release gets those for free.

    kratoz29,

    Ah, I see, thanks for the heads up.

    AFC1886VCC,

    Thank you, I will have a look at this!

    MangoPenguin,
    @MangoPenguin@lemmy.blahaj.zone avatar

    What do you feel it’s missing? It’s a tad slower than I’d like but otherwise works quite well.

    Blisterexe,

    a new client is on the way btw www.youtube.com/watch?v=-rVQOESKbbA

    Cris_Color,
    @Cris_Color@lemmy.world avatar

    Do you know if there’s a new interface coming for android as well?

    Thanks for sharing, thats exciting!

    Asudox,
    @Asudox@lemmy.world avatar

    The new client will use Material You.

    Cris_Color,
    @Cris_Color@lemmy.world avatar

    Thats dope! I’ll be looking forward to it, thanks for sharing your knowledge of what’s going on ☺️

    Apollo2323,

    There is nothing wrong with it. Why people always want things to be changing? What really important feature are you missing?

    VelociCatTurd,

    And what better person to answer that question than Mr. Bitwarden himself:

    reddit.com/…/going_native_the_future_of_the_bitwa…

    hackitfast,
    @hackitfast@lemmy.world avatar

    Looks like everything is essentially in the same spot UI wise, but with a native application that hopefully gets moving a lot faster.

    I’ve noticed that currently on Bitwarden, for auto fill it takes 6-7 seconds just to get authenticated with fingerprint and fill in the username and password field. That should hopefully be down to like 2 or 3 seconds.

    xionzui,

    A few for me:

    • Automatically updating entries with app or URL information if they didn’t match and you had to manually search for them. You have to copy the URL, leave the browser, open the app, search for the entry again, and manually add the URL in the current version.
    • Better defaults in the app like which group you log in to or which collection new entries are added to. Keeping all your entries added to a shared collection is a constant chore right now.
    • Better keyboard functionality. It’s basically impossible to navigate with a keyboard on PC right now. Keepass has a global auto type hotkey which made it so you hardly even had to open the app.
  • All
  • Subscribed
  • Moderated
  • Favorites
  • opensource@lemmy.ml
  • PowerRangers
  • magazineikmin
  • InstantRegret
  • hgfsjryuu7
  • Durango
  • Youngstown
  • slotface
  • everett
  • thenastyranch
  • rosin
  • kavyap
  • khanakhh
  • mdbf
  • DreamBathrooms
  • anitta
  • vwfavf
  • ethstaker
  • tacticalgear
  • cubers
  • ngwrru68w68
  • modclub
  • cisconetworking
  • osvaldo12
  • GTA5RPClips
  • normalnudes
  • tester
  • Leos
  • provamag3
  • All magazines