Hacker News new | ask | show | jobs
by fri_sch 1643 days ago
> All of that said Bitwarden is a fantastic product and I recommend that over every other server-based password manager out there.

Do you want to share what makes you think Bitwarden is superior to other selfhosted, open-source solutions (e. g. Passbolt, Passwork, Psono)?

3 comments

So far, Bitwarden has an Android app (two of those didn't), has been security audited (I didn't see anything for those other ones), and the biggest thing is Bitwarden has a much better pricing structure around non business users. It has a free tier and plans for families/non business users, as well as business use. Those others had nothing comparable that I could see except for a limited free tier.

Feature wise (ignoring the mobile apps), some of those seem to have some comparable features like emergency access, sharing, folders, etc, but locked behind a pricing structure that makes them less useful.

So from a look at those other ones, Bitwarden is the superior product for non business/security conscious family use at least. And for business use I don't see how those other ones are better anyway.

I admit Bitwarden is probably the most advanced, but the alternatives I named above (Psono, Passbolt, Passwork) seem not that far behind and some of your research seems a bit superficial.

> Bitwarden has an Android app (two of those didn't)

That's just wrong. All three of the alternatives I mentioned have an Android app. I haven't used any of them, though.

https://play.google.com/store/apps/details?id=com.psono.pson...

https://play.google.com/store/apps/details?id=com.passwork.p...

https://play.google.com/store/apps/details?id=com.passbolt.m...

> has been security audited (I didn't see anything for those other ones)

A quick search turns up at least some auditing activity:

Passbolt: https://www.passbolt.com/incidents

Psono: https://doc.psono.com/admin/asvs/overview.html (self-audit)

Looking more closely at Passwork, they claim to have open/auditable source code, but I can't find any public code. So they are out of the game anyway.

> Bitwarden has a much better pricing structure around non business users. It has a free tier and plans for families/non business users, as well as business use. Those others had nothing comparable that I could see except for a limited free tier.

Psono's full-featured enterprise version is free for anyone with up to 10 users. I don't see any such generous offer at Bitwarden or elsewhere.

And both, Psono and Passbolt offer unlimited business tiers for only 3€ per user per month which seems to be in the range of what Bitwarden costs. I don't really see your argument for the pricing.

There is some serious thought going into Bitwarden.

For example, what happens if I get hit by a bus? Oh, they've already thought of that: https://bitwarden.com/help/article/emergency-access/

The peculiar problems faced by families, work organisations, 2fa - they've put some time into thing about every sub-problem I've come up with.

Well, just about everything. I'd love if they would let me run my own read only backup servers - ie, a server that mirrors my data stored on theirs, that my device will connect to if theirs isn't up, and that supports a read only version of the web interface.

For me, it's that you don't have to self-host it if you don't want to. You can seamlessly switch between self- and cloud-hosted.
All three of the alternative solutions I mentioned above have cloud/SaaS versions as alternative to the selfhosted tiers.