#vaultwarden — Public Fediverse posts

#weeklyreview 37/2026

Week 37 started with our 6th Digital Independence Day session in Templin. This time we focused on WERO as an alternative to Paypal for digital payments and Firefox Browser and eMail again. This time it was an all female audience which was also already pretty informed and using Linux on der Laptops 💪

As kiddo catched a cold I made her my infamous ginger shots of fresh ginger, fresh lemons, self-harvested honey and some carrots. Healthy and almost delicious

Tuesday I was finally able to attend our monthly old hackers Stammtisch. Due to summer break I missed two sessions. Had to rush through the city as there was a school meeting in Neukölln that I needed to attend. Fortunately our class’ parents were pretty disciplined and pragmatic and shortened the mandatory election of parents representatives in the school administrative bodies to the bare minimum. Took the Ringbahn back from Neukölln to Prenzlauer Berg. Due to the usual Berlin drama the trains were going only every 20 min and thus the platforms and trains were very full. It was still a rather warm day and everyone was stressed out at the end of their day. Yet they remained relatively calm and nobody freaked out.

Thursday the Beer & Burger crew tested the newly reopened James & June beer garden at the Karl-Marx-Allee. Really good work on the renovation (still not fully finished) there. Keeping the old GDR spirit and 1970s vibe. Food and beer was OK. We liked the Budweiser on tap in decent sized glasses 🙂

Saturday we took a spontaneous trip to IKEA to spent a voucher before it expires. Had to get some smart home stuff for the house. Finally gave in to get the smart hub to control some lights and maybe more eventually. IKEA seems to do a good job keeping their systems open and Cloud Free/Subscription free. The new systems are also support the Matter standard. The devices immediately popped up in Apple Home as well and didn’t even need any IKEA app.

Treated myself with mashed garlic/butter potatoes and fried onions for late lunch then.

Good bye 1Password, hello Vaultwarden

Due to the recent outcry in the community over 1Passwords funding of the Omacom Foundation of DHH everyone was looking into alternatives for the 1Password password manager. Consensus seems to be that a combination of Bitwarden as clients and Vaultwarden as backend is the closest one can get to a 1Password like convenience on all devices.

Bitwarden is an OpenSource password manager platform which also has a commercial offering. Vaultwarden is a rewrite of their server component and also open source.

I’ve set up my own instance of Vaultwarden and use the Bitwarden clients on iOS, macOS, Linux, Browsers and Windows now. Import of my vaults from 1Password was easy. The only caveat is, that attachments were not imported and Passkeys neither. Not too big of a problem as I had only about 30 attachments in my vault that I can manually clean up and upload to Bitwarden again. I also only had one Passkey in 1Password. So not a big deal either. I keep my passkeys usually just on my two Token2 hardware tokens.

I also spent some time to look into the backup of Vaultwarden as this is critical infrastructure for me. I’ll write about the setup in more detail in a dedicated article. Vaultwarden content is encrypted on the disk of course. I’m encrypting the backup archive for my GPG key in addition (the secret key is of course not on the machine). Then Restic will do an encrypted offsite backup every hour. That’s working so far. I’ll need to test a full restore from the backup next to verify and document the procedure.

Overall but a smooth ride so far for me. Now I just need to handhold the family members to the new system and then I can finally cancel the 1Password subscription.

#weeklyreview 37/2026

Week 37 started with our 6th Digital Independence Day session in Templin. This time we focused on WERO as an alternative to Paypal for digital payments and Firefox Browser and eMail again. This time it was an all female audience which was also already pretty informed and using Linux on der Laptops 💪

As kiddo catched a cold I made her my infamous ginger shots of fresh ginger, fresh lemons, self-harvested honey and some carrots. Healthy and almost delicious

Tuesday I was finally able to attend our monthly old hackers Stammtisch. Due to summer break I missed two sessions. Had to rush through the city as there was a school meeting in Neukölln that I needed to attend. Fortunately our class’ parents were pretty disciplined and pragmatic and shortened the mandatory election of parents representatives in the school administrative bodies to the bare minimum. Took the Ringbahn back from Neukölln to Prenzlauer Berg. Due to the usual Berlin drama the trains were going only every 20 min and thus the platforms and trains were very full. It was still a rather warm day and everyone was stressed out at the end of their day. Yet they remained relatively calm and nobody freaked out.

Thursday the Beer & Burger crew tested the newly reopened James & June beer garden at the Karl-Marx-Allee. Really good work on the renovation (still not fully finished) there. Keeping the old GDR spirit and 1970s vibe. Food and beer was OK. We liked the Budweiser on tap in decent sized glasses 🙂

Saturday we took a spontaneous trip to IKEA to spent a voucher before it expires. Had to get some smart home stuff for the house. Finally gave in to get the smart hub to control some lights and maybe more eventually. IKEA seems to do a good job keeping their systems open and Cloud Free/Subscription free. The new systems are also support the Matter standard. The devices immediately popped up in Apple Home as well and didn’t even need any IKEA app.

Treated myself with mashed garlic/butter potatoes and fried onions for late lunch then.

Good bye 1Password, hello Vaultwarden

Due to the recent outcry in the community over 1Passwords funding of the Omacom Foundation of DHH everyone was looking into alternatives for the 1Password password manager. Consensus seems to be that a combination of Bitwarden as clients and Vaultwarden as backend is the closest one can get to a 1Password like convenience on all devices.

Bitwarden is an OpenSource password manager platform which also has a commercial offering. Vaultwarden is a rewrite of their server component and also open source.

I’ve set up my own instance of Vaultwarden and use the Bitwarden clients on iOS, macOS, Linux, Browsers and Windows now. Import of my vaults from 1Password was easy. The only caveat is, that attachments were not imported and Passkeys neither. Not too big of a problem as I had only about 30 attachments in my vault that I can manually clean up and upload to Bitwarden again. I also only had one Passkey in 1Password. So not a big deal either. I keep my passkeys usually just on my two Token2 hardware tokens.

I also spent some time to look into the backup of Vaultwarden as this is critical infrastructure for me. I’ll write about the setup in more detail in a dedicated article. Vaultwarden content is encrypted on the disk of course. I’m encrypting the backup archive for my GPG key in addition (the secret key is of course not on the machine). Then Restic will do an encrypted offsite backup every hour. That’s working so far. I’ll need to test a full restore from the backup next to verify and document the procedure.

Overall but a smooth ride so far for me. Now I just need to handhold the family members to the new system and then I can finally cancel the 1Password subscription.

#weeklyreview 37/2026

Week 37 started with our 6th Digital Independence Day session in Templin. This time we focused on WERO as an alternative to Paypal for digital payments and Firefox Browser and eMail again. This time it was an all female audience which was also already pretty informed and using Linux on der Laptops 💪

As kiddo catched a cold I made her my infamous ginger shots of fresh ginger, fresh lemons, self-harvested honey and some carrots. Healthy and almost delicious

Tuesday I was finally able to attend our monthly old hackers Stammtisch. Due to summer break I missed two sessions. Had to rush through the city as there was a school meeting in Neukölln that I needed to attend. Fortunately our class’ parents were pretty disciplined and pragmatic and shortened the mandatory election of parents representatives in the school administrative bodies to the bare minimum. Took the Ringbahn back from Neukölln to Prenzlauer Berg. Due to the usual Berlin drama the trains were going only every 20 min and thus the platforms and trains were very full. It was still a rather warm day and everyone was stressed out at the end of their day. Yet they remained relatively calm and nobody freaked out.

Thursday the Beer & Burger crew tested the newly reopened James & June beer garden at the Karl-Marx-Allee. Really good work on the renovation (still not fully finished) there. Keeping the old GDR spirit and 1970s vibe. Food and beer was OK. We liked the Budweiser on tap in decent sized glasses 🙂

Saturday we took a spontaneous trip to IKEA to spent a voucher before it expires. Had to get some smart home stuff for the house. Finally gave in to get the smart hub to control some lights and maybe more eventually. IKEA seems to do a good job keeping their systems open and Cloud Free/Subscription free. The new systems are also support the Matter standard. The devices immediately popped up in Apple Home as well and didn’t even need any IKEA app.

Treated myself with mashed garlic/butter potatoes and fried onions for late lunch then.

Good bye 1Password, hello Vaultwarden

Due to the recent outcry in the community over 1Passwords funding of the Omacom Foundation of DHH everyone was looking into alternatives for the 1Password password manager. Consensus seems to be that a combination of Bitwarden as clients and Vaultwarden as backend is the closest one can get to a 1Password like convenience on all devices.

Bitwarden is an OpenSource password manager platform which also has a commercial offering. Vaultwarden is a rewrite of their server component and also open source.

I’ve set up my own instance of Vaultwarden and use the Bitwarden clients on iOS, macOS, Linux, Browsers and Windows now. Import of my vaults from 1Password was easy. The only caveat is, that attachments were not imported and Passkeys neither. Not too big of a problem as I had only about 30 attachments in my vault that I can manually clean up and upload to Bitwarden again. I also only had one Passkey in 1Password. So not a big deal either. I keep my passkeys usually just on my two Token2 hardware tokens.

I also spent some time to look into the backup of Vaultwarden as this is critical infrastructure for me. I’ll write about the setup in more detail in a dedicated article. Vaultwarden content is encrypted on the disk of course. I’m encrypting the backup archive for my GPG key in addition (the secret key is of course not on the machine). Then Restic will do an encrypted offsite backup every hour. That’s working so far. I’ll need to test a full restore from the backup next to verify and document the procedure.

Overall but a smooth ride so far for me. Now I just need to handhold the family members to the new system and then I can finally cancel the 1Password subscription.

#weeklyreview 37/2026

Week 37 started with our 6th Digital Independence Day session in Templin. This time we focused on WERO as an alternative to Paypal for digital payments and Firefox Browser and eMail again. This time it was an all female audience which was also already pretty informed and using Linux on der Laptops 💪

As kiddo catched a cold I made her my infamous ginger shots of fresh ginger, fresh lemons, self-harvested honey and some carrots. Healthy and almost delicious

Tuesday I was finally able to attend our monthly old hackers Stammtisch. Due to summer break I missed two sessions. Had to rush through the city as there was a school meeting in Neukölln that I needed to attend. Fortunately our class’ parents were pretty disciplined and pragmatic and shortened the mandatory election of parents representatives in the school administrative bodies to the bare minimum. Took the Ringbahn back from Neukölln to Prenzlauer Berg. Due to the usual Berlin drama the trains were going only every 20 min and thus the platforms and trains were very full. It was still a rather warm day and everyone was stressed out at the end of their day. Yet they remained relatively calm and nobody freaked out.

Thursday the Beer & Burger crew tested the newly reopened James & June beer garden at the Karl-Marx-Allee. Really good work on the renovation (still not fully finished) there. Keeping the old GDR spirit and 1970s vibe. Food and beer was OK. We liked the Budweiser on tap in decent sized glasses 🙂

Saturday we took a spontaneous trip to IKEA to spent a voucher before it expires. Had to get some smart home stuff for the house. Finally gave in to get the smart hub to control some lights and maybe more eventually. IKEA seems to do a good job keeping their systems open and Cloud Free/Subscription free. The new systems are also support the Matter standard. The devices immediately popped up in Apple Home as well and didn’t even need any IKEA app.

Treated myself with mashed garlic/butter potatoes and fried onions for late lunch then.

Good bye 1Password, hello Vaultwarden

Due to the recent outcry in the community over 1Passwords funding of the Omacom Foundation of DHH everyone was looking into alternatives for the 1Password password manager. Consensus seems to be that a combination of Bitwarden as clients and Vaultwarden as backend is the closest one can get to a 1Password like convenience on all devices.

Bitwarden is an OpenSource password manager platform which also has a commercial offering. Vaultwarden is a rewrite of their server component and also open source.

I’ve set up my own instance of Vaultwarden and use the Bitwarden clients on iOS, macOS, Linux, Browsers and Windows now. Import of my vaults from 1Password was easy. The only caveat is, that attachments were not imported and Passkeys neither. Not too big of a problem as I had only about 30 attachments in my vault that I can manually clean up and upload to Bitwarden again. I also only had one Passkey in 1Password. So not a big deal either. I keep my passkeys usually just on my two Token2 hardware tokens.

I also spent some time to look into the backup of Vaultwarden as this is critical infrastructure for me. I’ll write about the setup in more detail in a dedicated article. Vaultwarden content is encrypted on the disk of course. I’m encrypting the backup archive for my GPG key in addition (the secret key is of course not on the machine). Then Restic will do an encrypted offsite backup every hour. That’s working so far. I’ll need to test a full restore from the backup next to verify and document the procedure.

Overall but a smooth ride so far for me. Now I just need to handhold the family members to the new system and then I can finally cancel the 1Password subscription.

#weeklyreview 37/2026

Week 37 started with our 6th Digital Independence Day session in Templin. This time we focused on WERO as an alternative to Paypal for digital payments and Firefox Browser and eMail again. This time it was an all female audience which was also already pretty informed and using Linux on der Laptops 💪

As kiddo catched a cold I made her my infamous ginger shots of fresh ginger, fresh lemons, self-harvested honey and some carrots. Healthy and almost delicious

Tuesday I was finally able to attend our monthly old hackers Stammtisch. Due to summer break I missed two sessions. Had to rush through the city as there was a school meeting in Neukölln that I needed to attend. Fortunately our class’ parents were pretty disciplined and pragmatic and shortened the mandatory election of parents representatives in the school administrative bodies to the bare minimum. Took the Ringbahn back from Neukölln to Prenzlauer Berg. Due to the usual Berlin drama the trains were going only every 20 min and thus the platforms and trains were very full. It was still a rather warm day and everyone was stressed out at the end of their day. Yet they remained relatively calm and nobody freaked out.

Thursday the Beer & Burger crew tested the newly reopened James & June beer garden at the Karl-Marx-Allee. Really good work on the renovation (still not fully finished) there. Keeping the old GDR spirit and 1970s vibe. Food and beer was OK. We liked the Budweiser on tap in decent sized glasses 🙂

Saturday we took a spontaneous trip to IKEA to spent a voucher before it expires. Had to get some smart home stuff for the house. Finally gave in to get the smart hub to control some lights and maybe more eventually. IKEA seems to do a good job keeping their systems open and Cloud Free/Subscription free. The new systems are also support the Matter standard. The devices immediately popped up in Apple Home as well and didn’t even need any IKEA app.

Treated myself with mashed garlic/butter potatoes and fried onions for late lunch then.

Good bye 1Password, hello Vaultwarden

Due to the recent outcry in the community over 1Passwords funding of the Omacom Foundation of DHH everyone was looking into alternatives for the 1Password password manager. Consensus seems to be that a combination of Bitwarden as clients and Vaultwarden as backend is the closest one can get to a 1Password like convenience on all devices.

Bitwarden is an OpenSource password manager platform which also has a commercial offering. Vaultwarden is a rewrite of their server component and also open source.

I’ve set up my own instance of Vaultwarden and use the Bitwarden clients on iOS, macOS, Linux, Browsers and Windows now. Import of my vaults from 1Password was easy. The only caveat is, that attachments were not imported and Passkeys neither. Not too big of a problem as I had only about 30 attachments in my vault that I can manually clean up and upload to Bitwarden again. I also only had one Passkey in 1Password. So not a big deal either. I keep my passkeys usually just on my two Token2 hardware tokens.

I also spent some time to look into the backup of Vaultwarden as this is critical infrastructure for me. I’ll write about the setup in more detail in a dedicated article. Vaultwarden content is encrypted on the disk of course. I’m encrypting the backup archive for my GPG key in addition (the secret key is of course not on the machine). Then Restic will do an encrypted offsite backup every hour. That’s working so far. I’ll need to test a full restore from the backup next to verify and document the procedure.

Overall but a smooth ride so far for me. Now I just need to handhold the family members to the new system and then I can finally cancel the 1Password subscription.

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵