Self-Host Vaultwarden | Password sharing reddit / selfhosted ---------------------------------------------------------------------- SuperCat373 · 2023-10-15 16:06 Hi there! I would like to self-host Vaultwarden on a Raspberry pi, isolated from the rest of the network (using VLANs) and only accesible via some devices locally or via VPN. My question is: ¿Can I share Vaultwarden with my family so each one has their own passwords, and would this be the safest method for keeping my passwords safe? I'm open to any suggestions. Thank you in advance. ---------------------------------------------------------------------- ddproxy · 2023-10-15 16:09 I do this, it works. Your security is based on other factors than just this install, however. ---------------------------------------------------------------------- SuperCat373 · 2023-10-15 16:10 Thanks for your answer! Could you please elaborate what other factors would make it safer? ---------------------------------------------------------------------- ddproxy · 2023-10-15 17:22 Rest of your network can be vulnerable, so hardening the host (raspberry pi) and not running any addtional services there. However, it can be reasonably secure as is due to how vaultwarden operates. However, phones or devices used to get credentials need to be secured. Those are your outliers. ---------------------------------------------------------------------- SuperCat373 · 2023-10-15 17:25 Thanks. I will also run an openmediavault in that rasberry, but with the same isolation as I said before. However, I’m not really sure on how to secure the phones. I don’t want to disturb you, answer if you can. ---------------------------------------------------------------------- justinhunt1223 · 2023-10-15 18:19 I run vaultwarden for my immediate family because I got sick of them never remembering their password for things when it was needed. Everyone has their own account, everyone is part of an organization, and there are some things that are shared between all of us (such as the Disney+ account). It works great! Don't set it up to auto fill on Web sites for starters. Malicious sites can harvest many of your passwords this way. My instance is exposed to the Internet being a reverse proxy accessible via a public url. It's a secure piece of software. ---------------------------------------------------------------------- SuperCat373 · 2023-10-15 18:22 Thanks for your answer! Wouldn’t it be better to only have access via a VPN (or locally), instead of using a public url? (I know reverse proxys are safe) ---------------------------------------------------------------------- JunglistFPV · 2023-10-15 19:43 I find the last part interesting. I thought using bitwarden uri was actually a method to prevent exactly these type of attacks. Am I wrong? Personally running Vaultwarden on the NAS along with other containers, using swag, but nothing exposed except wireguard. Still would like to know, only started using the extension recently and its very convenient. Would hate to give it up in the name if security. ---------------------------------------------------------------------- PaintDrinkingPete · 2023-10-15 19:45 Absolutely, sure…but then you have to ask if those requirements make it impractical to use. In some cases it may be difficult or troublesome to have to logon to a vpn each time one needs to grab a password. ---------------------------------------------------------------------- justinhunt1223 · 2023-10-15 19:47 You don't have to give up the extension, just don't set it to auto fill credentials. All you have to do is click the bitwarden icon and then click on the credentials to fill. It's been a while since I looked into this though, so maybe it's as vulnerable as I remember ---------------------------------------------------------------------- justinhunt1223 · 2023-10-15 19:52 You can use a VPN if you want, it's extra security. I expose all my stuff via url so I can access it from anywhere. Everything has authentication though.