- cross-posted to:
- linux@programming.dev
- selfhosted@lemmy.world
- cross-posted to:
- linux@programming.dev
- selfhosted@lemmy.world
cross-posted from: https://thelemmy.club/post/57178743
RyanL Bitwarden Employee
Hello everyone!
Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.
Bitwarden remains committed to open source security and transparency The GPLv3 OSS licensed version continues to be updated and published on GitHub All current features are available in both versions License details are on GitHub Bitwarden remains committed to a robust, free forever plan for everyoneIf you have any questions, please ask them in this thread. Thanks all!
EDIT:
Bitwarden is not going closed-source You can still fork Bitwarden No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden The free plan is here to stay permanently
You must log in or register to comment.
It’s still open source
Pretty much seen it coming when the new CEO came in and removed the words “Transparency” and “Always Free” from the official marketing.
Anyone got some better alternatives for people to try out?
I never understood the 9000iq move to give all your credentials to someone else…
That’s why I use “pass” as
password-store.
I really don’t want to have to switch password managers again.
Don’t even know where i’d switch.
Proton -> I already use Proton suite and I like the seperation, the 2 password option doesn’t work for me either. I just need a seperate password.
Keepass -> I use quite a few devices and the sync just seems like a nightmare…
Any other options? For now i’ll stick as BW is still great but will start exploring others.
Keepass X Syncthing
syncthing runs on everything and is easy to configure.
Maybe it’s changed in the year since I tried but I absolutely could not get syncthings to work on android
A little more than a year ago, Syncthing for Android had a lot of issues, there was a breaking change installed that required updates and the existing clients had issues, it has since been forked.
If you don’t need the granular security or family-friendliness it should provide.
Yes I want to say this was right before or during the chaos because I remember reading about the fork after I gave up lol
I recall having issues and bouncing off of it on my first attempt, but I’ve been using it on GrapheneOS/Pixel 8 Pro without issue for at least 2 years now.
That’s not an option for iOS users.
You could use Synctrain or maybe Möbius Sync to SyncThing-sync a folder with your phone, then use Strongbox or KeePassium or any other KeePass-compatible app to work with the file?
I use UNIX pass utility, it’s very minimal and works for me
I’ve been using Dashlane for years and love it
Why would you need to switch? Are you repackaging Bitwarden?
Because the new CEO seems to really be wanting to find revenue and this step just reaffirms in my mind that he’s likely going to start reducing features for unpaid accounts.
It’s only a matter of time. Quietly private -> publicly private -> remove features from free. It’s inescapable. The stockholder greed compels them.
Keepass.
If you are on Lemmy, theres very high probability that you also have the technical abilities required to self host Vaultwarden and stop relying on a greedy company for your most critical aspect.
I could but I don’t want. Self hosting something this important? I can’t login to any website without this software, including my email. It’s super critical.
The vault gets synced to your devices. So even if your Backend goes down you dont lose access to your passwords in an instant
So you have basically a local copy on your phone, for example, that syncs when possible?
yes, exactly. This gives you at least some time that you have to figure out what went wrong with your vaultwarden server/connection
yeah, until the client logs you out randomly. it has an increased chance when the server behaves funky.
I’ve been self-hosting vaultwarden for a year and this has literally never happened to me.
it happens to me once or twice a year, and to people for whom I have installed bitwarden too. official clients, bitwarden.com server.
Maybe that’s a bitwarden issue, I guess. One more point for selfhosting. Also, even if that were to happen to you, you most likely have it installed in more than one device. The chances of all sessions logging out at the same time would be extremely low.
The chances of all sessions logging out at the same time would be extremely low.
not all devices, but multiple of them did log out roughly the same time. so, don’t rely on storing the 2FA authenticator app’s password in it.
3-2-1 backups guys
Yeah vaultwarden and photos are the 2 things i’m too nervous to selfhost. I do selfhost basically everything else but these 2 things are too important for me to mess up that I just don’t…
I have Vaultwarden, it works with the web app and browser extensions. But is there a vaultwarden specific android app? I know technically I can use the Bitwarden app. But sometimes they update the Bitwarden app too fast for all the changes to translate into Vaultwarden and then im kinda forced to use the web app.
The web app is just a minor inconvenience to me so I continue to use it. Just wondering if there is an easier Vaultwarden specific solution for android.
How often do you update vaultwarden? This has never been an issue for me.
Then we will shit … the enshitification exodus goes on
Yeah, keyguard is pretty good
Yes because using a different then normies app also means technical skills. In fact, haven’t your PhD diploma came along when you signed up for your Lemmy account?
It just blows my mind how so many comments use the term ‘purchase’ as if this new enshitification step still allowed for the dictionary meaning of the word.
I used to suggest bitwarden to everyone, now it’s basically ‘start using KeePass, keep a copy of your db in a USB drive in your safe, have fun’.
The fact that bitwarden raised 100 millions from venture capitalists for “acceleration” and small changes towards a closed license for premium features is a steady step towards enshittification.
The writing is on the wall and every announcement like that is a step further into enshittification to provide value for shareholders at the expense of thrle consumer base.
I still haven’t switched yet because life is going fast and I didn’t come around to do my backup file server yet, but I would suggest anyone reading this to look for an alternative because it will get worst.
Yep, have been using KeyPass or KeyPassX for at least a decade now and just syncing across all machines (via syncthing). 100% reliable in my experience.
That was written in the sky…
Open-Source is literally used as marketing tool for the under dogs until they reach a critical mass of users.
People were fighting on social media, defending the product, suggesting it, “it’s open source”, people were doing the marketing for them.
No wonder why people feel like they got raped, after all the hard work they have done for them…
But at least they didn’t contribute code, did you? Not me, because I am old enough to never use such products, it’s a classic rug pull, bait and switch.
Open source doesn’t mean it’s good, it must be hold by a bunch of strangers in T-shirt, not in full suite…
Corpo in disguise…
That’s quite the disappointment. Probably need to prepare to switch away from bitwarden or at least research options for open source clients for my vaultwarden backend.
Someone can correct me, but this change seems to be targeting people who are repackaging bitwarden and selling it. It does feel like we are trending the wrong direction though.
If you read their announcement carefully you’ll find things like
All current features are available in both versionsWhich strongly implies that the different versions will start to diverge over time. Then at one point they will just be like maah it’s not worth putting more work into the open source thing, we’ll focus on building new cool features yada yada yada. And this is how all the open to partly open to closed source rug pulls worked in the last years.
(If you want to do this the worst way possible like MinIO you also squash / delete the Git history the moment you announce you’re only working on closed source)
Minio also deleted the repos altogether about two weeks ago.
Yeah well, didn’t know this. I’m still running some old minio instances on my home server. Need to check if the docker images are still around otherwise I urgently need a backup plan…
Fucking hell, why didn’t they at least leave the old code available 😭
I tried to stand up a notesnook instance to test a couple days ago and it kept failing because minio doesn’t exist anymore.
They really fucked a lot of people.
what is even out there? I pay for proton and bitwarden. but I just dont trust them
Before Bitwarden / Vaultwarden I went with Keepass (it was some fork don’t remember the exact name KeepassXC probably) synced via Nextcloud. It’s not as convenient as Bitwarden plus at least back then it didn’t support passkeys. So yeah, I don’t know what is actually out there. Honestly I don’t think it’s super urgent to start hunting for alternatives but probably we should have at least some ideas in case the Bitwarden team does some weird moves.
Bitwarden’s front-end (Apps, Extensions) must be hard forked before it is too late.
Does this mean I will, or won’t be able to install the FOSS version through GitHub? Trying to stop repackagers from selling your project is one thing, but killing the source available installs would be another.
According to their forum it is to prevent repackers
“bitwarden apps will be the commercially licensed builds.” I don’t understand how this is going to change anything.
I self-host vaultwarden. I use the official Bitwarden app, it works swimmingly. Going the self-hosted route you get enterprise features (I don’t use em).
Doesn’t the licensing stuff connect with the backend not the app?
The commercial licensing is on the clients. You must switch to the Github versions immediately or proprietary code will be installed.
Sigh… I hope this isn’t the first move of enshitifying bitwarden. I read the comments/replies and hope this is benign but I’m now nervous
Fantastic. I’m tired of having to change password managers. DashLane, Keepass, LastPass, etc., they all end up shooting their own foot somehow.
What happened to keepass?
It has become Keep Ass.
Cool quip, doesn’t answer the question
Keepass is open and has many implementations. It’s the only remaining cross-platform and fully local password manager, even supporting passkeys.
Rest in Peace :(
So, will you still be able to use the builds with the free license? Does that mean that the App Store builds will be locked down?
