Hacker News Reader

Comment by lillecarl | Hacker News Reader

I use my own domain and give each website their own e-mail address too, so I know who is breached/selling my information. For password management I use BitWarden, to which I am a paying customer of 15$ a year for their premium features (Premium features being TOTP integrated into the password manager, probably something else too that I don't use).

BitWarden is open source, both server and clients. There's even a third party implementation of the server in rust that seems to be mostly compatible. Both the official and the third party server are self-hostable.

BitWarden runs their infrastructure on Azure, uses Azure managed databases and Azure managed backups. So I'm quite comfortable having my passwords there.

The only feature I miss is that I'd like BitWarden to send me an email with all my passwords, encrypted so that I own a backup of my data too in case the worst happens.

View on HN

> I use my own domain and give each website their own e-mail address too

I wish this was a supported feature on @gmail.com domain (not the +{string} thing). I like the idea, but keep thinking that I'll be uniquely identifiable on every database, since it's almost always going to be just 1 entry for the domain I own.

A proprietary Fastmail feature generates anonymous @fastmail.com addresses for you, but I mostly use my own domain since I don't want to be locked in to one provider.

Gmail [0] ignores dots in your email handle and so you could use a different pattern of dots for each website you register at and record it in a spreadsheet or something. The first and last characters cannot be dots, and I do not think you can have two or more dots in a row, but there is no limit to how many "legal" dots you can use. Not as elegant, but definitely doable.

[0] https://support.google.com/mail/answer/7436150?hl=en

You could use your own domain, and Google's business offering maybe? I'm not sure if you could register a catch-all email then, but it would enable you to use custom domain, and Gmail's infrastructure and interface.

> There's even a third party implementation of the server in rust that seems to be mostly compatible.

Not just mostly. Vaultwarden also offers server-side features usually only found in paid Bitwarden plans.

I use keepass with the app.keeweb.info frontend and a gdrive backend. keeweb.info has totp as well. Seems pretty straight forward and its free. Make the backend file accessible by link and forward a bit.ly to it and you can pull it down anywhere you have internet. Phone app works great too. Everything works offline too if gdrive isn't your thing

Every computer I normally use will have a copy of the file in the case that I can't access my gdrive (which I don't see happening really).

> TOTP integrated into the password manager

Is this portable, like Authy does it? Last time I moved phone it was a real pain to move authenticators...

Yes, you have the same TOTP keys in both your phone and browser ext

Is exporting your passwords and encrypting the file not an option for you?

Well yes and no, I'd like it to be automatic but I have an old archive around somewhere.

Reply on news.ycombinator.com