KeePass + Syncthing

Completely local vault in sync with however many endpoints you need

Is that a FOSS thing? Never done that before. Are there decent guides for getting it set up?

It’s FOSS and easy to set up. KeePass simply stores everything in a file and you use Syncthing to sync this file between devices. Syncing is optional, if you just need you password on desktop you don’t need it.

KeePass has pretty bad UX when compared with Bitwarden though. Bitwarden/Vaulwarden is the best solution IMHO but it’s really difficult to set up.

Thanks for the overview; I’ve got some research to do it looks like.

Syncthing is great, but can be a bit of a pain in the ass to set up. I wish they’d make that process easier, and maybe also support sharing the ignore file between the hosts…

KeePass honestly sucks for the most part. I love local vault and hope something better comes along, but KeePass UI constantly gives me issues. I’ve tried KeePassXC and that is what I use still, but being limited to opening a single entry at a time. Additional properties are a pain. It’s author not even understanding the need for using the desktop session for the CLI (requires passing password via the terminal to or having separate key file). KeeShare not working on Android. So many things that Bitwarden/Vaultwarden solves much better and quicker. Sad that Bitwarden/Vaultwarden didn’t make a local SQLite client that doesn’t rely on a server.

Bitwarden

Vault Warden if they’re interested in self hosting.

Like $10/year… Stupid cheap for piece of mind and haven’t had a data breach yet.

Why do you even use these? I never understood the point.

It’s so that you can have unique, randomized, rotating passwords for every service you have. Also, they auto fill fields for you, and can save you from spoofed URLs if you’re not paying attention. Highly recommend getting one. Bitwarden is good.

And they help you remember a shop if you forgot it.
Good for digital hygiene.

So that every service I use can have a randomly generated, unique password. Therefore if one of them gets hacked and my password leaked, brute-forced, or decrypted, it won’t affect any other service.

Plus it stores passkeys and handles 2fa code generation, keeping them synced on all my devices, and ensures I never have to remember specific passwords because they’re all safely stored in heavily encrypted vaults guarded by the only single password I do have to remember. Also it notifies me if any of my information is in any breaches, or if I could do better to secure my account.

Trust me when I say, it’s safer, simpler, and smoother way to manage things.

Unique passwords and MFA in the one package. Cross platform so I can use on phone and PC. Costs like $10/year. Also locks the credential and passkey to set URLs so phishing attacks are harder.