• 2 Posts
  • 66 Comments
Joined 1 month ago
cake
Cake day: September 27th, 2026

help-circle





  • I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

    If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

    There are several misunderstandings here. Let me clear this up:

    While there is a server-based version of Syncthing, you need no server to get all the syncthing goodness! Syncthing is designed to work peer-to-peer. Just hook up, say, your mobile phone and your PC and the folder(s) you’ve shared will be in sync - no server needed.

    As for “working remotely”: while Syncthing can do that, I’d advise sticking to the default configuration, which means “LAN only”. As soon as both devices are on the same network and “see” each other, they’ll sync. This will cover most use cases anyhow. If you’re out and about, make changes to your database on your phone and then return home, your phone will talk to your stationary PC in the background and update the DB. For the odd case where changes are made on both devices, Syncthing will create a conflict file, i.e. you’ll have both changed databases and can merge them so you won’t lose either change. (Syncthing even supports versioning files, but that is for later.)


  • +1 for a lot of the things you said. Adding to that:

    Vaultwarden may be open source, but it puts the onus of hosting it securely on you. Whenever you think about putting something on the internet (self-hosted or not): always assess the potential fallout in case of compromise. And having your password manager breached could easily be catastrophic, costing you a lot of time, nerves and potentially even money. That’s why, in my opinion, password managers do not belong on the internet, neither commercial nor self-hosted.

    Thus I’d strongly advise to go the KeePassXD (PC) / KeePassDX (Android) + Syncthing route. Points speaking in favour of this solution:

    • entirely offline - all of your keys are in an encrypted database file on your device, and thus inaccessible to any online attacker.
    • simple, yet feature rich: KeePassXC can do a lot of what the “big guys” can - TOTP, Passkeys, built-in SSH agent, auto-fill, etc.
    • independence: unlike Bitwarden (which keeps you reliant on a subscription with a for-profit company) and Vaultwarden (which is maintained by only a handful of guys on Github), KeePass is a reasonably large project that is both impossible to enshittify and maintained by a large base of contributors.
    • Syncthing still allows you to keep all of your devices in sync, in spite of the data being “offline” technically.

    +1 for Nextcloud with calDAV and cardDAV for contact sync. Bonus points for self-hosting it (but again, think carefully which files you put on there).

    As for the VPN, I’m currently still on Mullvad, but considering the switch to IVPN or Nym.







  • Excellent advice!

    I’d like to add to the list:

    • Calendar, Contacts - Nextcloud (via cal/cardDAV)
    • Bookmark (and tab?) sync via Firefox Sync (or similar)
    • AirDrop to Syncthing
    • Check whatever other software and features she uses daily for work, communication, or leisure, and make sure it either exists on the Linux side or there’s a viable alternative, and get her used to that first

    I’d only make the switch once you’ve made sure that

    1. she knows why she’s doing this, and is determined to. Doing it because you made her is bound to lead to failure.
    2. you know all the features and software she’s used to and have tested and established a working alternative.




  • Just separate the two, e-mail and cloud storage, and you’ll be a lot more flexible.

    Posteo e-mail costs 1 EUR/month.

    As for cloud storage, either self-host or use a managed Nextcloud instance. IONOS’ offering (500GB) comes in at 6 EUR/month.

    In total, that gets you to 7 EUR/month, which is still cheaper than Proton’s unlimited package (clocking in at 10 EUR/month). On the downside, you still haven’t got a VPN at that pricing. But I’d keep that separate from mail and file storage anyway.