this post was submitted on 15 Mar 2026
81 points (94.5% liked)

Selfhosted

58044 readers
1056 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

What do you use for syncing your password manager between your Android phone and your PC? Apparently Nextcloud doesn't support two-way syncing on Android for some reason, and Syncthing-Fork is still untrustworthy since the disastrous handover. The AI generated profile picture of researchxxl doesn't exactly inspire confidence either, neither does his GitHub bio:

Hi! My name is Jonas and I like to use my coding skills from games and modding to continue work on the Syncthing for Android wrapper.

Everything about this person screams vibe coder.

Bitwarden is an alternative, but I don't like how non-standard it is. It's cumbersome to manage and backup, meanwhile the KeePass format is just a file that I can backup wherever and however I want and there are many frontends to choose from.

Have you solved this?

top 50 comments
sorted by: hot top controversial new old
[–] bitwolf@sh.itjust.works 46 points 2 weeks ago (1 children)

Vaultwarden handles the syncing for me.

However I do export backups on both my phone and laptop just in case.

[–] versionc@lemmy.world 4 points 2 weeks ago (1 children)

Do you do it manually into e.g. protected json, or to a normal zip (the former doesn't support attachments as far as I know)? Or have you found a way to do it automatically? One con that I've read about this is that backups from one version is not guaranteed to work on another version. Thanks.

[–] Luminous5481@anarchist.nexus 10 points 2 weeks ago (2 children)

Well with Vaultwarden any synced device is a complete backup. So you don't need to worry about version issues.

load more comments (2 replies)
[–] RodgeGrabTheCat@sh.itjust.works 25 points 2 weeks ago (8 children)

On Android I use KeePassDx Syncthing-Fork. The handover was rough but the maintainer of the Play version joined researchxxl's team. Many on the Syncthing forum seem to have accepted research which is good enough for me. Also, KeePass's database in encrypted so no danger there.

load more comments (8 replies)
[–] Luminous5481@anarchist.nexus 23 points 2 weeks ago (1 children)

I use Vaultwarden. Each synced device is a backup, so there's no real need to keep anything further than that, but I do keep one backup of the server files anyway.

[–] versionc@lemmy.world 5 points 2 weeks ago (1 children)

Yeah, that's a good point. There are still a few cons though:

  1. If the server goes down (or your internet connection goes down), you can't add entries to your database. Local changes aren't allowed.
  2. Bitwarden doesn't support supplementing your passphrase with a key file.
  3. The Bitwarden clients aren't enitrely FOSS as far as I understand, the SDK used has a non-free license.

There are pros and cons in both alternatives, and there is unfortunately not a perfect solution. I like the idea and philosophy behind the KeePass format, so the increase in syncing complexity is worth it (for now at least).

[–] JasSmith@sh.itjust.works 5 points 2 weeks ago

Vaultwarden is FOSS (GPL).

It's true re adding passwords while the server is offline, but my server runs 24x7 and it's never down for more than a few minutes. If it goes down, I fix it. I also backup the encrypted DB regularly to cloud, so there is little risk of data loss. I am a very satisfied Vaultwarden user. Especially because it allows password sharing with my family. Everyone has an account.

[–] roofuskit@lemmy.world 15 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Vaultwarden with the Bitwarden Android app and browser extension for my desktop. I already have a solid system for backing up the important data for all my docker containers. As soon as I added it, it was automatically added to that process.

My spouse has an account so if I die she can gain access to my passwords with a simple request. That's function is important to me.

load more comments (1 replies)
[–] hanrahan@slrpnk.net 14 points 2 weeks ago

bitwarden

seems odd you say how cumbersome it is to manage and backup (not an issue I've faced though) and yet you are using some cumbersome alternative ?

[–] ilmagico@lemmy.world 13 points 2 weeks ago (9 children)

I use KeepassDX syncing via Nextcloud, works flawlessly. I also used to use Keepass2Android, also works very well.

Can you elaborate on the "nextcloud doesn't support 2-way syncing on android" statement? I can sync my Keepass database back and forth without issues.

[–] digger@lemmy.ca 3 points 2 weeks ago

I am also using KeepassDX and Nextcloud. I've had this setup for years and never had an issue with syncing.

load more comments (8 replies)
[–] clifmo@programming.dev 11 points 2 weeks ago (2 children)

Vaultwarden, no question. When I used KeePass, I had Synology Drive which worked well to sync.

load more comments (2 replies)
[–] 30p87@feddit.org 10 points 2 weeks ago

KeePass2Android:

1000068180

[–] Creat@discuss.tchncs.de 10 points 2 weeks ago (1 children)

If you're using a keepass database, Keepass2Android can natively sync with many cloud options including self hosted and generic ones, even without specific "companion" apps. That's what I use. In my case, it's backed by my NextCloud, but it used to be Google drive before.

Just also sync the file on your PC, merging changes from different clients is part of the keepass database format and "just works".

Also VaultWarden works great if your can self host it, but I prefer keepass for a variety of features and integrations.

load more comments (1 replies)
[–] portnull@lemmy.dbzer0.com 10 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I just switched back to vaultwarden. My vaultwarden data is backed up as part of my nightly backups. Desktop and android use bitwarden clients. Seeing as https://codeberg.org/small-hack/open-slopware/src/branch/main states keepassxc is using AI to create PRs. Otherwise you could see how seafile might work for you to sync your keepass db. If you are on android with termux you can run syncthing in termux which also works and avoids the issue with the syncthing fork

[–] determinist@kbin.earth 5 points 2 weeks ago

i self host, and back up, vaultwarden, and use bitwarden in browser and android.

[–] Adderbox76@lemmy.ca 10 points 2 weeks ago

Bitwarden.

Paid. Not because I need the added paid features, but because I value it and want to show my appreciation for the developers.

[–] Appoxo@lemmy.dbzer0.com 9 points 2 weeks ago (1 children)
[–] mrmule@sh.itjust.works 3 points 2 weeks ago (1 children)

I use Bitwarden too. I now use the paid version (which is incredibly cheap) but I was able to sync between Android and PC without the paid for version iirc

[–] Appoxo@lemmy.dbzer0.com 4 points 2 weeks ago (1 children)

The only (known to me) perk of the paid version is the encrypted storage (and probably the org feature).

So yeah. I see it more of a donation/appreciation than a service fee.
But the recent peice increase stung a bit.

load more comments (1 replies)
[–] teawrecks@sopuli.xyz 9 points 2 weeks ago (1 children)

I use Nextcloud + KeepassDX on android and KeepassXC on PC. Have never had an issue. Changes on desktop/phone are propagated virtually immediately across devices.

[–] antbricks@lemmy.today 2 points 2 weeks ago

Same here. There was a window of a couple of months when some NC background process wasn't running reliably in Android, but that got fixed (a year ago?) and it's been rock solid before and since.

[–] kokonmiikka@lemmy.zip 8 points 2 weeks ago

Selfhost Vaultwarden. Browsers Bittwarden extensions and Android with Keyguard app.

[–] Jakeroxs@sh.itjust.works 8 points 2 weeks ago

Vaultwarden

[–] fizzle@quokk.au 8 points 2 weeks ago (1 children)

Syncthing-Fork is still untrustworthy since the disastrous handover

Maybe I'm OOTL on this?

I thought everyone concluded that it was poorly communicated but ultimately no indication of any foul play.

[–] Cyber@feddit.uk 4 points 2 weeks ago

Correct.

That conversation has finished, the dust has settled and syncthing-fork is fine.

[–] themachine@lemmy.world 8 points 2 weeks ago

I use keepass2android and "sync" via its native WebDAV support with my nextcloud instance as the source. Been working great forever.

[–] sturmblast@lemmy.world 6 points 2 weeks ago

Keepass + syncthing = win

[–] mhzawadi@lemmy.horwood.cloud 6 points 2 weeks ago

I migrated out of keypass and into vaultwarden, not looked back since.

[–] sbeak@sopuli.xyz 6 points 2 weeks ago* (last edited 2 weeks ago)

Personally, I use Keepass with syncthing and it works fine enough. If you don't really trust the new person behind Syncthing-Fork, you could always install the older version before the handover (I think before v3.4?).

If you really don't trust syncthing at all, you could just manually back it up. New passwords aren't made every day, so you could just copy the passwords database over between your devices whenever there's a change. That's what I did before I heard about syncthing, and is what I do with my music still, since I don't regularly update what music I listen to.

[–] Smash@lemmy.self-hosted.site 5 points 2 weeks ago

Passwords Nextcloud app

[–] BozeKnoflook@lemmy.world 5 points 2 weeks ago (4 children)

I use passwordstore.org which is basically a bash script that wraps GPG; but there is an Android client as well.

Everything is stored in encrypted files tracked by git. Files are synchronized by git/SSH to a server I run.

[–] versionc@lemmy.world 3 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I actually used pass many years ago and I quite enjoyed it, except for the fact that the entry names are presented in clear text. You'd also have to manage your GPG secret which I'm not a fan of (in fact, my password manager is how I usually manage GPG and SSH keys in the first place). On the other hand, I guess you should keep a key file on each device on top of a passphrase even if you use a KeePass database, so I guess that point is moot. There are also no good way to include attachments. At that point Vaultwarden feels more convenient, but the more I'm thinking about it, the more I'm warming up to the idea. We'll see, maybe I'll give it a shot again.

Thanks for sharing your thoughts!

Edit: I did some quick research and I found this video:

https://www.youtube.com/watch?v=j-qBChKG15Y

It brings up some pretty important security concern that still seem to be relevant.

load more comments (1 replies)
load more comments (3 replies)
[–] Nighed@feddit.uk 4 points 2 weeks ago

Keypass with the vault loaded onto a free OneDrive account.

Just back it up occasionally.

[–] IratePirate@feddit.org 4 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I share your sentiment about Syncthing-Fork and the botched handoff to researchxxl. I have yet to implement the Termux-based workaround that allows me to use Syncthing from the browser without the Android app / wrapper. It looks pretty clean as it's just pure Syncthing with a little starter script.

[–] MalReynolds@slrpnk.net 2 points 2 weeks ago (1 children)

For say a keypass db you don't need even that, Just sshd gets you rsync on your computer with cron or systemd timer / service... Personally I just use an old version of Syncthing-Fork though, security implications for local network are minimal.

load more comments (1 replies)
[–] kokesh@lemmy.world 3 points 2 weeks ago

Keepass for Android, my database is stored on OneDrive. Easy access on my win pc and android (KPA has built in sync for many cloud storage providers)

[–] s38b35M5@lemmy.world 3 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I don't update my Keepass db often enough to need syncing. Maybe every other week or so I just pull the latest backup from my desktop from backblaze b2 to my phone, or if I change something on the phone, I send a copy to myself using signal "note to self." Then I manually merge the databases.

Pretty low-tech.

[–] versionc@lemmy.world 4 points 2 weeks ago (3 children)

Yeah, I have a tendency to modify my database quite often. I often make new accounts, add attachments, modify passphrases on older accounts, etc. I modify it several times a week. I might be an outlier, and in that case I understand why people don't consider this to be a huge problem haha.

load more comments (3 replies)
[–] oktux@lemmy.sdf.org 3 points 2 weeks ago (5 children)

OpenCloud seems promising. It's a fork of ownCloud from former developers of ownCloud, lighter weight than NextCloud, it uses flat files to store data rather than a DB, and it has an Android client on F-Droid (and Google Play).

load more comments (5 replies)
[–] Kazel@lemmy.dbzer0.com 2 points 2 weeks ago
[–] Whooping_Seal@sh.itjust.works 2 points 2 weeks ago

I still think a syncthing client of some form is ideal. As someone else mentioned there is the option of using the Syncthing Tray devs experimental android build. To avoid issues with sync-conflicts / maintain high-availability access to the most recent file, I sync the databse to a raspberry pi with the encryption option selected (not that the pi is untrusted per se, but it is a device that doesn't need access to the file, it just serves the most recent changes to other devices since often my laptop / phone / desktop are not all on at the same time).

load more comments
view more: next ›