• 12 Posts
  • 268 Comments
Joined 1 month ago
cake
Cake day: September 27th, 2026

help-circle





  • I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

    If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

    There are several misunderstandings here. Let me clear this up:

    While there is a server-based version of Syncthing, you need no server to get all the syncthing goodness! Syncthing is designed to work peer-to-peer. Just hook up, say, your mobile phone and your PC and the folder(s) you’ve shared will be in sync - no server needed.

    As for “working remotely”: while Syncthing can do that, I’d advise sticking to the default configuration, which means “LAN only”. As soon as both devices are on the same network and “see” each other, they’ll sync. This will cover most use cases anyhow. If you’re out and about, make changes to your database on your phone and then return home, your phone will talk to your stationary PC in the background and update the DB. For the odd case where changes are made on both devices, Syncthing will create a conflict file, i.e. you’ll have both changed databases and can merge them so you won’t lose either change. (Syncthing even supports versioning files, but that is for later.)







  • c/Europe
    

    laughs about

    Trump
    

    Here’s your relevance. Is it highly relevant? No, it’s not. But particularly in times where paedo fascists seem to dominate every feed, it’s good to have a little laugh sometimes to remind ourselves that all this doomscrolling isn’t healthy. That, while despicable, these people are not evil itself. That they’re pathetic little parasites that will, eventually, be removed.




  • +1 for a lot of the things you said. Adding to that:

    Vaultwarden may be open source, but it puts the onus of hosting it securely on you. Whenever you think about putting something on the internet (self-hosted or not): always assess the potential fallout in case of compromise. And having your password manager breached could easily be catastrophic, costing you a lot of time, nerves and potentially even money. That’s why, in my opinion, password managers do not belong on the internet, neither commercial nor self-hosted.

    Thus I’d strongly advise to go the KeePassXD (PC) / KeePassDX (Android) + Syncthing route. Points speaking in favour of this solution:

    • entirely offline - all of your keys are in an encrypted database file on your device, and thus inaccessible to any online attacker.
    • simple, yet feature rich: KeePassXC can do a lot of what the “big guys” can - TOTP, Passkeys, built-in SSH agent, auto-fill, etc.
    • independence: unlike Bitwarden (which keeps you reliant on a subscription with a for-profit company) and Vaultwarden (which is maintained by only a handful of guys on Github), KeePass is a reasonably large project that is both impossible to enshittify and maintained by a large base of contributors.
    • Syncthing still allows you to keep all of your devices in sync, in spite of the data being “offline” technically.

    +1 for Nextcloud with calDAV and cardDAV for contact sync. Bonus points for self-hosting it (but again, think carefully which files you put on there).

    As for the VPN, I’m currently still on Mullvad, but considering the switch to IVPN or Nym.