My research led me to two open source password safes that seemed to be trustworthy and widely popular, which are Bitwarden and Vaultwarden.

With those incidents in the back of my mind, I wanted to run my own password safe locally on my Synology NAS in order to avoid sharing my secrets with a vulnerable vendor. Too often popular online password safes are targets for serious data breaches or vulnerabilities, as LastPass reported a security incident in December 2022, Keeper was the target of a vulnerability and security researches of the University of York uncovered vulnerabilities in several commercial password managers such as LastPass, Dashlane, Keeper, 1Password, and RoboForm.

Password safes along with two factor authentication (2FA) promises some help to organize those large numbers of auto-generated passwords.Īs Web based password safes became pretty popular for obvious reasons, they also represent a valuable target for hackers. With hundreds of unique, cryptic passwords to manage we all have to admit that we are overwhelmed with today’s security requirements. Run a private Vaultwarden Password Safe as Docker Container on a Synology NAS

Bitwarden docker image