On: Bitwarden – Open Source Password Manager

[DavideNL]

> I run my own server

If you think it matters where the data is stored (which shouldn't matter because it should be client side encrypted), running your own server would also be a risk. Because you cannot possibly have the same resources to monitor your server/router for suspicious activity...

[SteveGoob → DavideNL]

That's true, but at the same time, there's something to be said for not storing my eggs in the huge basket with everyone else's eggs in it too.

By separating the storage of passwords, we drive down the economic interest in breaking into any one of the individual baskets.

[unethical_ban → DavideNL]

Maybe I do, maybe I don't want my passwords to be at the same target as others, maybe I don't trust the hosting provider or Bitwarden the company (which you could argue, then I shouldn't trust the software, but I can monitor its behavior).

[slenk → DavideNL]

I still think it matters where data is stored because I don't trust most companies to not have back doors.

Since its all my own equipment and I have a background in this sort of stuff, I know what I am looking for when it comes to intrusions.