this post was submitted on 16 Oct 2025
1383 points (99.5% liked)
Microblog Memes
10834 readers
728 users here now
A place to share screenshots of Microblog posts, whether from Mastodon, tumblr, ~~Twitter~~ X, KBin, Threads or elsewhere.
Created as an evolution of White People Twitter and other tweet-capture subreddits.
RULES:
- Your post must be a screen capture of a microblog-type post that includes the UI of the site it came from, preferably also including the avatar and username of the original poster. Including relevant comments made to the original post is encouraged.
- Your post, included comments, or your title/comment should include some kind of commentary or remark on the subject of the screen capture. Your title must include at least one word relevant to your post.
- You are encouraged to provide a link back to the source of your screen capture in the body of your post.
- Current politics and news are allowed, but discouraged. There MUST be some kind of human commentary/reaction included (either by the original poster or you). Just news articles or headlines will be deleted.
- Doctored posts/images and AI are allowed, but discouraged. You MUST indicate this in your post (even if you didn't originally know). If an image is found to be fabricated or edited in any way and it is not properly labeled, it will be deleted.
- Absolutely no NSFL content.
- Be nice. Don't take anything personally. Take political debates to the appropriate communities. Take personal disagreements & arguments to private messages.
- No advertising, brand promotion, or guerrilla marketing.
RELATED COMMUNITIES:
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I transitioned everything to Bitwarden. Password manager, passkeys, and MFA code generation all in one app that works on all of my devices.
And then I started to self-host it via Vaultwarden and transferred all the data.
A friendly FYI: having your passwords and MFA in one place partially defeats the purpose
True, but the alternatives generally are either a pain in the ass or require yet another syncing service to have sensitive info just so I can access things reliably anywhere.
It is still more secure than SMS and email based options.
Besides, my vaultwarden still needs an MFA code to access in the first place, and that's handled by a separate generator.
I get that not everyone wants to set up something like Aegis in combination with e.g. Syncthing.
Of course it is still better than SMS and email, but I would recommend you check out Ente Auth and/or Proton Auth.
Both are end to end encrypted and you would at least have it in separate apps
I'm willing to accept the slight security difference in exchange for the convenience of having access on a single app 99.9% of the time.
To get into my Vaultwarden in the first place to get my info they'd first have to know my self-hosted server exists to target. And they'd need to compromise that MFA which is handled by a separate unrelated app.
That's more than enough security for nearly everyone on the planet.
Perfectly valid, everyone has their own threat model and their own standards.
Sure. But if your bitwarden is protected by a 50char password AND a yubikey, it's not that big of a tradeoff imo. That's what I do, but I have hundreds of MFA tokens and it was PAINFUL to auth a lot of the time when I was using an authenticator app.
They're exactly why I decided to accept the slight security downgrade for usability. Plus, at the time, finding a yubikey that would work with every device, desktop, laptop, mobile, etc. was impossible without dongles, kind of defeating the point. USB-C wasn't on everything then.
I do 2 accounts, one normal, one mfa. If only the extension would let you pull from both accounts at once! KepassXC still does the usability better.
Bitwarden is just so awesome
How do you like the self hosted approach? I contemplate it every so often, but I’m not sure that my sysadmin abilities (and attention) are enough to keep it secure.
The admin overhead isn't too bad as long as you have a good base, and don't try to do anything crazy. I transferred from Synology to a custom built NAS recently, and it's running TrueNAS. That supports not only docker now, but also a catalog of apps preconfigured for TrueNAS with minimal manual setup needed.
For Vaultwarden, since it needs external access, I had issues setting up various reverse proxy systems and dynamic DNS services properly. So I got cheap like $5 domain through Cloudflare, and run a Cloudflare tunnel back to my network for Vaultwarden and a couple other apps like Emby for my media.
The Cloudflare tunnel also allows me to use WARP as a VPN on my laptop and phone to route that traffic back through my home network. Which also lets me use the pi-hole on my network for my ad blocking on those devices.
I jump into the TrueNAS interface weekly to check for system and app updates, and that's about it.