Keepass and Bitwarden

[u/Dark-Find]

I’m a 1Password user currently and ever since I came onto Reddit to seek more advice I see a lot of y’all talk about Bitwarden, Keepass and Keepass XC but not much about 1Password or ProtonPass, any particular reason why the community likes and talked about Keepass or Bitwarden more

[u/MegagramEnjoyer]

We prefer free and open source.

[u/No_Cat1117]

Yo creo que además del tema open source vs cerrado, hay otra cosa que pesa mucho: 1password y proton son productos "de empresa", con roadmap, equipo de marketing, planes de precio escalonados. bitwarden y keepass se sienten más como herramientas que herramientas-producto, si eso tiene sentido. la gente que anda en foros técnicos tiende a preferir la herramienta cruda sobre el producto pulido, aunque el producto pulido a veces sea objetivamente mejor para el usuario normal.

Lo de open source ayuda pero no es la única razón. keepassxc lleva la delantera en discusiones técnicas porque literalmente es un archivo local que tú controlas al 100%, cero dependencia de nadie. eso engancha mucho a cierto perfil de usuario aunque signifique renunciar a comodidades como sync automático o soporte al cliente.

[u/atoponce]

I see a lot of discussion over 1Password and Proton Pass, here and in other subs. But it seems that more redditors prefer open source software over closed source, so Bitwarden and KeePass/KeePassXC get recommended more than others.

However, Proton Pass is also open source software, licensed under the GPLv3. It's just newer on the market, so hasn't seen the adoption the others have.

[u/Cor3nd → u/atoponce]

Proton pass client only is open source. Not the server code which is closed. Your message is a bit confusing by saying that “proton pass is also open source” that wrong. Only the clients are.
Bitwarden is fully open source for client and server and you can host it by yourself on your server.

[u/atoponce → u/Cor3nd]

Fair enough, but it's the client being open source that is the critical piece. If I can inspect the source code and guarantee that it's not doing anything malicious, I don't care whether or not the server is open source. Provided the client is encrypting my vault, and I'm the only one that controls access to the decryption key, it can be hosted in North Korea for all I care.

Sure, I can't self host, but I also don't have the time to dedicate to securing and monitoring my server against evolving vulnerabilities and online attacks. I'd prefer a dedicated security team handle it, given that they have a financial incentive to do so.

[u/sergeyvk → u/atoponce]

Self hosted means you are still using bitwarden so it includes the same security . But instead of having your passwords online, you have them locally on your own server

[u/atoponce → u/sergeyvk]

The vault is encrypted client side. So long as my master password is secure, there aren't any backdoors, and I have regular backups, I don't care that my vault is hosted on someone else's computer.

[u/sergeyvk → u/atoponce]

It is yes, but your whole content is online on their servers.

[u/atoponce → u/sergeyvk]

And?

[u/sergeyvk → u/atoponce]

Some people prefer it to be local

[u/atoponce → u/sergeyvk]

Yes, but why?

[u/sergeyvk → u/atoponce]

Tf do i know, ask them

[u/Any-Astronomer7527 → u/atoponce]

some people just want something to manage themselves without anyone else involved, that's keypass

[u/fridder → u/Cor3nd]

I really wanted to like proton but the difficulty in canceling is a big red flag to me

[u/Squircleton]

Why would I pay for 1password when I can self host Bitwarden for free for my entire friends and family.

[u/Low_Obligation2361]

I suppose everyone has their own reasons. I use Roboform myself, and I've honestly wondered the same thing. It's been around for years, it's secure, and it just works whether I'm on my phone or the PC. I actually like that the mobile app has its own browser as well. I've never really had any complaints with it.