- cross-posted to:
- selfhosted@lemmy.world
- cross-posted to:
- selfhosted@lemmy.world
cross-posted from: https://thelemmy.club/post/57178743
RyanL Bitwarden Employee
Hello everyone!
Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.
Bitwarden remains committed to open source security and transparency The GPLv3 OSS licensed version continues to be updated and published on GitHub All current features are available in both versions License details are on GitHub Bitwarden remains committed to a robust, free forever plan for everyoneIf you have any questions, please ask them in this thread. Thanks all!
EDIT:
Bitwarden is not going closed-source You can still fork Bitwarden No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden The free plan is here to stay permanently



I’ve been self-hosting vaultwarden for a year and this has literally never happened to me.
it happens to me once or twice a year, and to people for whom I have installed bitwarden too. official clients, bitwarden.com server.
Maybe that’s a bitwarden issue, I guess. One more point for selfhosting. Also, even if that were to happen to you, you most likely have it installed in more than one device. The chances of all sessions logging out at the same time would be extremely low.
not all devices, but multiple of them did log out roughly the same time. so, don’t rely on storing the 2FA authenticator app’s password in it.
Or just use and maintain Vaultwarden properly. All you need to do is set up watchtower along with vaultarden and you’ll always be up to date. I’ve never had this problem so yes, I will continue to store my credentials there :)
if the official, commercial servers can’t avoid this, what more could I do? I can’t even provide redundancy.
on top of that, we run vaultwarden at work. both times this year compatibility was fucked up by a client update, me and my colleagues had to completely reset the client because it bugged away so hard.
sounds like a horrible idea with any software. patch versions could be fine, perhaps, but vaultwarden does not follow semver.
You can set a custom delay for automatic updates in watchtower. Also, what does “compatibility was fucked up by a client update” mean? Compatibility between Vaultwarden and the oficial bitwarden client? I’ve been running it for more than a year and did not have any problems whatsoever. Sounds like the reset worked for you guys, but the issue wasn’t that “compatibility was fucked up”. Even if something like that were to happen, why not switch to another client temporarily? Nuking the whole thing sounds like a lazy fix.
yes, that’s what I meant. multiple people noted in the respective vaultwarden github issue.
yes. it was that. look up the vaultwarden issues, they were very popular.
well, the web client served by vaultwarden continued to work
there were no other options with the clients. simple as that. if you can’t even go to the settings what would you do? what would you do if you can, but the sync button prints failure every single time, even after updating vaultwarden to a fixed version? lazy fix my ass.
They couldn’t downgrade the clients? Sounds like that was the easiest option. You can also temporarily use something Keyguard, or why not, permanently given the latest news from Bitwarden.
Since providing sources was too hard, apparently. I think you’re referring to this issue from August for example? Issue was reported on August 20th and was fixed by September 7th. Kinda sounds like you wouldn’t have problems if you restricted updates for your users. Delay updates by a few weeks (or why not, a month) unless they’re absolutely necessary and you’re golden.
Like I said, there are options. Maybe instead of blaming Vaultwarden, you could learn from your own mistakes.