I find this move concerning, and wish that the Founder had looked for a new CEO that shared his values rather than a Private Equity and Mergers Expert.
Furthermore, the change to the GRIT motto is worrying. Trust is useless without Transparency when it comes to code and security.
Sure, i’ll put my password db somewere I have zero control over, just for convenience
You would’ve already been doing that with BitWarden.
Pretty sure I don’t. I don’t have bitwarden.
Just keepass. On two pc’s and backup to my nas.
Its like you have your own cloud storage provider.
One device on the lan … would not call that cloud.
It does a similar function though. Your devices are able to connect to it and sync a keepass db between the two. You have a solid solution IMO.
Wow, talk about missing the point.
your nas is your cold storage provider
Isn’t the keepass db file encrypted?
Not everyone can self-host
I know. Keepass is a stand alone app. It does not need hosting.
https://keepassxc.org/docs/KeePassXC_UserGuide#_storing_your_database
You can keep it on a USB too
You made me think about this a little bit, why couldn’t someone self host?
They don’t own the network, or don’t even have a network to connect to. I probably vastly underestimate the people who do not control their internet connection, or simply use devices that are on cell networks.
There are quite a few people that have a phone and/or tablet, and no WiFi. Not many who would care about this situation, but still
You can sync between devices securely with syncthing.
That being said, the syncthing-fork devs are refusing to get certified with Google Play (which I support) so by the end of the year you’ll need a deGoogle’d phone
Keepassxc DB has strong encryption.
Nextcloud, syncthing, sftp can all be self hosted
You can selfhost your cloud storage, for instance using Nextcloud, if you want to maintain complete control
I’m the weirdo with the tin foil hat, but thats how I feel about ALL of these services. I don’t care how secure anyone says they are.
It’s incredibly inconvenient, but I have all my passwords saved as documents written in a cryptic and incomplete way so that only I know what they mean on my pc. It sucks that if I don’t remember one I have to wait until I get home, but I’ll never trust any of these services. EVERYTHING gets hacked eventually.
If you are happy with cloud services, please, go ahead. But not for me … True. I’m having close to zero trust however safe they say it is. My choice is to have my data on my hardware that i own and control and can access 24/7.
Ps: You can’t hack me, i carry around my stack of post-it’s on my skin and they have medic style hand written passwords /s