I'm looking to self-host a password manager and I'm torn between using Vaultwarden and Psono. From what I've seen, Vaultwarden seems easier to set up, but I've heard Psono is quite popular and has a lot of features. I'm also planning to expose it online so my family can access it, likely using a Cloudflare tunnel. Before I go ahead with this, I'd really like to hear from anyone who has experience with these options. Are there any risks I should keep in mind when exposing a password manager like this?
8 Answers
Vaultwarden has actually been tested by the German government, and they fixed major findings before publication. So, that gives me more confidence in their security compared to others that might not have gone through such audits.
We’re hosting Vaultwarden and have been really happy with how it’s functioning.
Vaultwarden is quicker to set up, but I found Psono to feel more complete once everything was up and running. It really comes down to what you're looking for in terms of usability and features.
When you self-host something that’s internet-facing, keeping everything updated is crucial. I’ve been hosting a password manager for a while, and I make sure to have regular backups and keep my infrastructure secure. For important passkeys, I’d suggest storing them elsewhere as a backup, like with Google or Samsung, just in case.
I host Psono at my place and have exposed it through a tunnel for family use. It’s been pretty stable so far, so I’d say it’s doing well in that setup.
For any service exposed to the internet, backups are essential. Make sure you're prioritizing that aspect regardless of which option you ultimately choose.
I’m currently using Vaultwarden and it’s worked really well for me. Just a heads up, I think restricting certain features for more than 10 users is a bit concerning. But overall, it’s been reliable for my needs.
I believe both Vaultwarden and Psono are solid choices. It really depends on your specific needs and preferences.
Does Vaultwarden still lack SSO auth?