If you're gonna self host vault warden, your backup solution better be legit af
Discussion
Let's run the password manager on nostr
Shit, I didn’t consider that. I was just about to set it up. How safe do you consider saving passwords in Firefox? Except for the important ones like email and banking
I don't know much about Firefox, in general I don't trust any browser to save any passwords.
Any recommendations in this regard? I'm staring at my RPI waiting for the SD card to give out and take my passwords with it.
3 2 1 rule
3 copies
2 devices
1 off-site
I've always felt sketchy about backups, I never know if the right data is backed up! Should I just export the vault to flash drives?
No that's too sketch, it needs to be encrypted. One to a flash drive, one to the cloud.
MUST be encrypted.
Veracrypt or just an aes256 string are good starts
I’m too scared
Yeah I considered this. Decided to keep it simple and let Bitwarden handle the server side. After all, it is E2E encrypted.
Plus I'd have to use Tor on all my remote devices to access my vault if self-hosting. Start9 does not have something like Tailscale, yet...
I think you can use a cloudflare tunnel to do it.
Yes bit warden can't rug your password, but they can fuck up and lose your data or go bankrupt, still better to self host if your setup is legit
I have a cron that zips and encrypts the data folder, and sends it up to cloud storage several times a day and keeps 2 weeks of backups.
You could really screw yourself royally. You’d need to make sure you have a backup off-site too
I'm self hosting Passky and yeah if that computer takes a shit I'm screwed
Very important point. However, there is some fault tolerance distributed between the number of Bitwarden clients you have running at any given time.
For example, If your vaultwarden server has a catastrophic failure and you don't have it backed up (for whatever reason), you can use the latest sync of the encrypted local version of the vault on your phone and export the vault file.
Same applies to your browser extension etc.
Not to diminish the importance of the sentiment.
Sounds like it’s still worth it.