Look here's what I don't get. Having only local password store means you don't have backups. Having backups means you don't have "local-only" password store.
On the recovery page [1] they state that backups to iCloud, WebDAV and local file are possible. iCloud and WebDAV means there is the server and your passwords are safe as long as this server is not compromised. At this point I wonder how is it better than self-hosted Bitwarden?
ofc they have the authenticator app, but id personally somehow be more happy if there is not the same company there. i know its not technically an issue, maybe i am just too paranoid.
i mean, is the code for both apps on the same network? i do hope they realize by having apps for both that would make them a prime target if they have anything in the form of control over the apps, which is likely the case unless they do not provide updates in anyway. (even manually installed by users is tricky in light of third party compromises).
this seems as scary as running a CA.
if its 2 separate entities under the hood, then i think its good to mention, and to what degree they are separated, since that greatly reduces this risk.
leshenka•3h ago
On the recovery page [1] they state that backups to iCloud, WebDAV and local file are possible. iCloud and WebDAV means there is the server and your passwords are safe as long as this server is not compromised. At this point I wonder how is it better than self-hosted Bitwarden?
[1]: https://2fas.com/pass/recovery/
sim7c00•25m ago
ofc they have the authenticator app, but id personally somehow be more happy if there is not the same company there. i know its not technically an issue, maybe i am just too paranoid.
i mean, is the code for both apps on the same network? i do hope they realize by having apps for both that would make them a prime target if they have anything in the form of control over the apps, which is likely the case unless they do not provide updates in anyway. (even manually installed by users is tricky in light of third party compromises).
this seems as scary as running a CA.
if its 2 separate entities under the hood, then i think its good to mention, and to what degree they are separated, since that greatly reduces this risk.