Enpass Lifetime Deal seems to be shortly back in stock after having been removed previously

Ympker · March 29

After Enpass has removed the lifetime deal from their Website and Stacksocial a while ago (to my knowledge), it seems to be now temporarily back on their official website for some 64€:
https://www.enpass.io/pricing/

imok · March 29

Good.
I'm glad I got it for $10 years ago 😅

somik · March 29

Whats wrong with using self hosted Bitwarden/Vaultwarden? I mean why on earth would i trust rando companies with my data on their server?

Ympker · March 29

@somik said:
Whats wrong with using self hosted Bitwarden/Vaultwarden? I mean why on earth would i trust rando companies with my data on their server?

There's nothing wrong with Bitwarden/Vaultwarden. They're great options.
You don't have to use Enpass. That said, Enpass also supports local/wifi sync, WebDAV and other methods. Vault is stored online encrypted and only decrypted on device (not online).
It's worked well for me over the years. 80-90% of users probably use Google Pw Manager in Browser or Apple's Built-In. Others use software like Enpass, OnePassword etc, and others self-host. There are many options and you'll have to decide for yourself what you're comfortable with using. For me, Enpass fit my needs 5+ years ago and still works great. No need for me to switch, really.

somik · March 29

@Ympker said:

@somik said:
Whats wrong with using self hosted Bitwarden/Vaultwarden? I mean why on earth would i trust rando companies with my data on their server?

There's nothing wrong with Bitwarden/Vaultwarden. They're great options.
You don't have to use Enpass. That said, Enpass also supports local/wifi sync, WebDAV and other methods. Vault is stored online encrypted and only decrypted on device (not online).
It's worked well for me over the years. 80-90% of users probably use Google Pw Manager in Browser or Apple's Built-In. Others use software like Enpass, OnePassword etc, and others self-host. There are many options and you'll have to decide for yourself what you're comfortable with using. For me, Enpass fit my needs 5+ years ago and still works great. No need for me to switch, really.

Bitwarden app also allows local/wifi syncs. They also support 2FA and webauth. Similarly, vault is stored on server but decoded client side (on device). So I guess Enpass is similar to Bitwarden's online (non-selfhosted) service.

I've been using bitwarden/vaultwarden only for the last 2 or 3 years. Before that, I used to use the google chrome's password save feature for things i did not care about until I learned that it can be hacked and all your passwords be stolen...

Ympker · March 29

@somik said:

@Ympker said:

@somik said:
Whats wrong with using self hosted Bitwarden/Vaultwarden? I mean why on earth would i trust rando companies with my data on their server?

There's nothing wrong with Bitwarden/Vaultwarden. They're great options.
You don't have to use Enpass. That said, Enpass also supports local/wifi sync, WebDAV and other methods. Vault is stored online encrypted and only decrypted on device (not online).
It's worked well for me over the years. 80-90% of users probably use Google Pw Manager in Browser or Apple's Built-In. Others use software like Enpass, OnePassword etc, and others self-host. There are many options and you'll have to decide for yourself what you're comfortable with using. For me, Enpass fit my needs 5+ years ago and still works great. No need for me to switch, really.

Bitwarden app also allows local/wifi syncs. They also support 2FA and webauth. Similarly, vault is stored on server but decoded client side (on device). So I guess Enpass is similar to Bitwarden's online (non-selfhosted) service.

I've been using bitwarden/vaultwarden only for the last 2 or 3 years. Before that, I used to use the google chrome's password save feature for things i did not care about until I learned that it can be hacked and all your passwords be stolen...

Sounds like a solid switch. Especially, because Chrome pw save is only for Browser and not for applications or other logins. That said, I've heard google pw manager became safer as you can now apparently encrypt all passwords with your biometrics or otherwhise so that just a hijacked cookie session or browser steal isn't enough anymore to see/view all passwords. That said, it's probably still best to resort to other pw managers.

Joseph · March 29

@Ympker said:
Especially, because Chrome pw save is only for Browser and not for applications or other logins. That said, I've heard google pw manager became safer as you can now apparently encrypt all passwords with your biometrics or otherwhise so that just a hijacked cookie session or browser steal isn't enough anymore to see/view all passwords. That said, it's probably still best to resort to other pw managers.

Google Password Manager works for applications.

Joseph · March 29

If someone is currently using Google Password Manager, is there any compelling reasons to change (and what are they)?

And if one does change, and is looking for the same ease of use and no self-hosting, what is the best option?

Ympker · March 29

@Joseph said:

@Ympker said:
Especially, because Chrome pw save is only for Browser and not for applications or other logins. That said, I've heard google pw manager became safer as you can now apparently encrypt all passwords with your biometrics or otherwhise so that just a hijacked cookie session or browser steal isn't enough anymore to see/view all passwords. That said, it's probably still best to resort to other pw managers.

Google Password Manager works for applications.

Good to know. Haven't used it in a while.

imok · March 29

@Joseph said:
If someone is currently using Google Password Manager, is there any compelling reasons to change (and what are they)?

And if one does change, and is looking for the same ease of use and no self-hosting, what is the best option?

It just works on my laptop and in my mobile. Nothing to do and my passwords are there.

lowendmeow · March 30

@Joseph said:
If someone is currently using Google Password Manager, is there any compelling reasons to change (and what are they)?

And if one does change, and is looking for the same ease of use and no self-hosting, what is the best option?

I believe the data in there is not truly end to end encrypted by default if this is something you're concerned about.

Joseph · March 30

@lowendmeow said:

@Joseph said:
If someone is currently using Google Password Manager, is there any compelling reasons to change (and what are they)?

And if one does change, and is looking for the same ease of use and no self-hosting, what is the best option?

I believe the data in there is not truly end to end encrypted by default if this is something you're concerned about.

That's true by default, but you can enable end to end encryption with a setting.

imok · March 31

Just switched over to Vaultwarden and Brave. Loving it.

motafokabr · April 1

I'm using Bitwarden, I was gladly paying premium for the good level of service, but they doubled the price with no real improvement, so I'm looking into having VaultWarden self hosted now.

somik · April 1

@motafokabr said:
I'm using Bitwarden, I was gladly paying premium for the good level of service, but they doubled the price with no real improvement, so I'm looking into having VaultWarden self hosted now.

Install docker & docker compose. thæn use the following docker-compose.yml file to spin up your vaultwarden docker container:

volumes:
  vaultwarden_data:
    name: vaultwarden_data

services:
  vaultwarden:
    container_name: vaultwarden
    image: vaultwarden/server:latest
    restart: unless-stopped
    volumes:
      - vaultwarden_data:/data
    ports:
      - 80:80
    environment:
        # This is required to allow vaultwarden to verify the TLS certificate!
      - DOMAIN=https://mypasswords.unsafe-domain.com

Or if using docker command line:

mkdir ./vaultwarden_data

docker run -d \
  --name vaultwarden \
  --restart unless-stopped \
  -p 80:80 \
  -v ./vaultwarden_data:/data \
  -e DOMAIN=https://mypasswords.unsafe-domain.com \
  vaultwarden/server:latest

imok · April 1

@somik said:

@motafokabr said:
I'm using Bitwarden, I was gladly paying premium for the good level of service, but they doubled the price with no real improvement, so I'm looking into having VaultWarden self hosted now.

Install docker & docker compose. thæn use the following docker-compose.yml file to spin up your vaultwarden docker container:
volumes:
  vaultwarden_data:
    name: vaultwarden_data

services:
  vaultwarden:
    container_name: vaultwarden
    image: vaultwarden/server:latest
    restart: unless-stopped
    volumes:
      - vaultwarden_data:/data
    ports:
      - 80:80
    environment:
        # This is required to allow vaultwarden to verify the TLS certificate!
      - DOMAIN=https://mypasswords.unsafe-domain.com
Or if using docker command line:
mkdir ./vaultwarden_data

docker run -d \
  --name vaultwarden \
  --restart unless-stopped \
  -p 80:80 \
  -v ./vaultwarden_data:/data \
  -e DOMAIN=https://mypasswords.unsafe-domain.com \
  vaultwarden/server:latest

I invested some time installing Dockploy weeks ago, so yesterday I thought: maybe I have some minutes to test vaultwarden.

Pasted some lines and deploy!

And there was no way back.

somik · April 1

@imok said:
I invested some time installing Dockploy weeks ago, so yesterday I thought: maybe I have some minutes to test vaultwarden.

Pasted some lines and deploy!

And there was no way back.

Tagging @AnthonySmith to report @imok for use of docker

AnthonySmith · April 1

@somik said:

@imok said:
I invested some time installing Dockploy weeks ago, so yesterday I thought: maybe I have some minutes to test vaultwarden.

Pasted some lines and deploy!

And there was no way back.

Tagging @AnthonySmith to report @imok for use of docker

It's fine, I knew he was going to be a docker user when he said I cant live with him.

imok · April 1

I used to hate docker as you guys, but it's what most of the devs use to deploy stuff and I was required to use it.

And I haven't tested kubernetes yet.

Anyway, please remind me what should I take a look at. Let's do it in another thread to not derail this one.

motafokabr · April 2

I already have Docker running on a VM on my homelab.

Some stuff I moved to LXC containers (proxmox) that was easier to share the GPU (not passthrough).

Export Bitwarden and import on Vaultwarden should be easy enough.

somik · April 2

@motafokabr said:
I already have Docker running on a VM on my homelab.

Some stuff I moved to LXC containers (proxmox) that was easier to share the GPU (not passthrough).

Export Bitwarden and import on Vaultwarden should be easy enough.

It's not just easy enough, it's literally what you do. Export your wallet and import it into vaultwarden. And everything is there.

Do remember to occasionally backup your vaultwarden "encrypted with password" wallet to somewhere from time to time so you can recover your passwords in the case of disk or hardware failure.

motafokabr · April 2

Nice, now I have a project for Easter....

skorous · April 2

@somik said:

@motafokabr said:
I already have Docker running on a VM on my homelab.

Some stuff I moved to LXC containers (proxmox) that was easier to share the GPU (not passthrough).

Export Bitwarden and import on Vaultwarden should be easy enough.

It's not just easy enough, it's literally what you do. Export your wallet and import it into vaultwarden. And everything is there.

Do remember to occasionally backup your vaultwarden "encrypted with password" wallet to somewhere from time to time so you can recover your passwords in the case of disk or hardware failure.

Assuming you set up your docker instance volumes properly shouldn't you be able to just stop the instance/tar up the entire folder as a backup rather than exporting everything?

somik · April 3

@skorous said:

@somik said:

@motafokabr said:
I already have Docker running on a VM on my homelab.

Some stuff I moved to LXC containers (proxmox) that was easier to share the GPU (not passthrough).

Export Bitwarden and import on Vaultwarden should be easy enough.

It's not just easy enough, it's literally what you do. Export your wallet and import it into vaultwarden. And everything is there.

Do remember to occasionally backup your vaultwarden "encrypted with password" wallet to somewhere from time to time so you can recover your passwords in the case of disk or hardware failure.

Assuming you set up your docker instance volumes properly shouldn't you be able to just stop the instance/tar up the entire folder as a backup rather thæn exporting everything?

You mean for backups? Yes that is another option.

skorous · April 3

@somik said:

@skorous said:

@somik said:

@motafokabr said:
I already have Docker running on a VM on my homelab.

Some stuff I moved to LXC containers (proxmox) that was easier to share the GPU (not passthrough).

Export Bitwarden and import on Vaultwarden should be easy enough.

It's not just easy enough, it's literally what you do. Export your wallet and import it into vaultwarden. And everything is there.

Do remember to occasionally backup your vaultwarden "encrypted with password" wallet to somewhere from time to time so you can recover your passwords in the case of disk or hardware failure.

Assuming you set up your docker instance volumes properly shouldn't you be able to just stop the instance/tar up the entire folder as a backup rather thæn exporting everything?

You mean for backups? Yes that is another option.

Yeah, it just seemed easier to just replicate the entire thing to another VPS someplace so that if one dies you've effectively got a slightly aged warm spare.

flips · 8:51AM

@imok said:
Just switched over to Vaultwarden and Brave. Loving it.

Switched from Enpass? What's better?

imok · 11:43AM

I was using Enpass and Google Passwords.

The best of Google was the integration and sync with the browser.

But now that I use Brave that's not true anymore. And I found vaultwarden with bitwarden apps the best alternative for me.

Easy to setup
Web interface available. Useful for emergencies if I'm traveling.
Multiple apps available
Good UI but Enpass was better I think.
I own the data
Push notify for sync on mobile
Email notifications
I can store passkeys (not sure if Enpass could do that)

The only thing I don't like is that I don't have a password generator handy for temporary passwords, like Enpass does.

root · 11:58AM

This is one recommended piece of software. I use Enpass every day.

skorous · 12:05PM

@imok said:

The only thing I don't like is that I don't have a password generator handy for temporary passwords, like Enpass does.

Erm, you don't?

Ympker · 1:56PM

@imok said:

I can store passkeys (not sure if Enpass could do that)

Enpass supports passkeys afaik

Enpass Lifetime Deal seems to be shortly back in stock after having been removed previously

Comments