this post was submitted on 09 Apr 2024
547 points (100.0% liked)

Technology

70285 readers
3189 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 
  • Big Tech has implemented passkeys in a way that locks users into their platforms rather than providing universal security
  • Passkeys were developed to replace passwords for better account security, but their rollout by Apple and Google has limited their potential
  • Proton Pass offers passkeys that are universal, easy to use, and available to everyone for improved online security and privacy.
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 74 points 1 year ago (3 children)

If I can't add your passkey to my Bitwarden vault, I'm not using your passkey.

[–] [email protected] 45 points 1 year ago (1 children)

If I can't add your passkey to my local KeepassXC database, I am not using your passkey.

[–] [email protected] 15 points 1 year ago (3 children)
[–] [email protected] 11 points 1 year ago (1 children)

Yea, I know. But my preference is for my password manager to not be cloud at all.

[–] [email protected] 5 points 1 year ago (2 children)

I don’t mean to be pedantic but self hosted isn’t cloud.

[–] [email protected] 1 points 1 year ago (1 children)

Yea, I understand, and it's a perfectly valid choice. But does that disregard people's preference to not bother with this at all?

[–] [email protected] 1 points 1 year ago (1 children)

I don’t think I understand the question.

To be clear, the alternatives are valid choices.

[–] [email protected] 1 points 1 year ago

That was a rhetorical question. What I wanted to say was basically "if it is only supported by Big Tech walled gardens and some open, selfhostable cloud password managers, I am not using such passkeys, because for me it is far more comfortable to have my password manager fully offline".

[–] [email protected] 1 points 1 year ago (1 children)

Doesn't it require cloud activation?

[–] [email protected] 4 points 1 year ago

It requires a key and id they generate.

https://bitwarden.com/help/install-on-premise-linux/

Though from the instructions, I’m not sure if the install needs continuing communication outbound to function.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (1 children)

Eh, easier to just use the same password for everything.

I use 12345, personally.

[–] [email protected] 5 points 1 year ago

Huh.. same as my luggage.

[–] [email protected] 3 points 1 year ago (1 children)

Why are us nerds like this? No one asked, please dont.

[–] [email protected] 9 points 1 year ago (1 children)

I mean, they were responding to someone who sounded like they were acting superior for self-hosting their password manager. This person chimed in with “well you can self-host Bitwarden too”. And now you’re upset because they offered a direct counterpoint, and furthered a conversation?

[–] [email protected] 2 points 1 year ago

This is a guy who planted some Cheerios because he thought they were donut seeds.

[–] [email protected] 15 points 1 year ago (1 children)

Yeah or if they only offer 2FA via SMS. Like 1) it's not even that much more secure and 2) it's just more awkward.

But I also hate how Steam and Blizzard only allow you to verify logins in their mobile app. Fucking ridiculous.

[–] [email protected] 4 points 1 year ago

It is stupid that they not only require the app to be present, but to verify each and every trade. Even those for items that drop to everyone for free. Good thing it does work in an Android VM but still - very annoying.

[–] [email protected] 4 points 1 year ago (2 children)

Bitwarden proper wants $40/year to have two users sharing passwords. You might try Vaultwarden?

[–] [email protected] 12 points 1 year ago (1 children)

That doesn’t seem unreasonable at all for not having to host your own server.

[–] [email protected] 1 points 1 year ago (1 children)

That's with hosting your own server. Unfortunately I only discovered this paywall after sending them $10 out of good will.

Of course it's open source, so it's certainly possible to break their DRM, and if it were something less sensitive I would.

I still might, but VaultWarden looks like a better alternative.

[–] [email protected] 9 points 1 year ago

Nowhere on their pricing page does it say you need to host your own server.

[–] [email protected] 9 points 1 year ago (1 children)

I pay $10/year for my wife and I, total. The $40 is if you want 3-6 people. AFAIK, you still need to pay if you self-host and use the premium features, but you can self host on the free plan as well.

$10/year for my wife and I is completely reasonable, and I'd pay the $40/year if my kids needed their own accounts. It's a fantastic service.

[–] [email protected] 3 points 1 year ago (1 children)

If you self host you need the $40 plan for two people. Seems kinda backwards, doesn't it?

Yeah, they absolutely don't make that clear or I wouldn't have gone with Bitwarden.

[–] [email protected] 2 points 1 year ago (1 children)

Really? It says it's supported for each account type. It looks like you don't even need the $10/year account anymore for sharing with one other user.

[–] [email protected] 1 points 1 year ago (2 children)

You'd think that based on your link, wouldn't you. I did.

My support ticket response:

Hi Serinus,
​There actually isnt a mistake what you are reading is the pricing page for premium individuals, which you already have. But if you check our pricing page for orgs and you are in the free org, you will see that you cannot self-host the free org, as seen here.
You can find more information here; https://bitwarden.com/help/password-manager-plans/#compare-personal-plans
I hope you find this clear and helpful.
Kind regards,
A
Follow Bitwarden on social media:

[–] [email protected] 2 points 1 year ago (1 children)

Your issue is creating an org. The free tier allows again one collection with one user. So don't create an org, share a collection.

[–] [email protected] 1 points 1 year ago (1 children)

One user can't share a collection with another user. An org is required to share.

[–] [email protected] 2 points 1 year ago (1 children)

I'll have to check. I haven't self-hosted mine yet, but I thought the collection share I do with my wife is different.

You could very well be right, which would be disappointing.

[–] [email protected] 2 points 1 year ago

If you discover anything different, I'd love to try it! Currently we're either going to share a single login (which might get odd with 2fa devices) or just use VaultWarden.