1 00:00:00,000 --> 00:00:04,800 Welcome back for another deep dive. This time we're going to check out Vault Warden. 2 00:00:04,800 --> 00:00:08,560 Vault Warden? Yeah, Vault Warden. Think Bitwarden, but the open source version. 3 00:00:08,560 --> 00:00:13,020 And you sent over some really cool stuff about this docs on GitHub, 4 00:00:13,020 --> 00:00:17,000 some info about a community server. Oh, nice. Yeah. 5 00:00:17,000 --> 00:00:19,080 My inner geek is pretty excited. 6 00:00:19,080 --> 00:00:21,920 And one of the first things that really caught my eye was that it's built on Rust. 7 00:00:21,920 --> 00:00:25,960 Rust. Yeah. You know, the programming language. Oh yeah. Yeah. And, uh, 8 00:00:25,960 --> 00:00:28,400 well for folks who maybe aren't familiar with that, 9 00:00:28,400 --> 00:00:31,560 Rust is really well known for its speed and security, 10 00:00:31,560 --> 00:00:34,200 which are both pretty important when you're talking about a password manager. 11 00:00:34,200 --> 00:00:35,720 Right. Oh, for sure. And get this. 12 00:00:35,720 --> 00:00:40,600 It's got almost all the same features as the official Bitwarden. Wow. 13 00:00:40,600 --> 00:00:44,120 And there's even a free public version you can use. Really? 14 00:00:44,120 --> 00:00:47,880 That's amazing. The fact that it's so popular. I know, right? Yeah. 15 00:00:47,880 --> 00:00:52,960 It's got like 39.5 K stars on GitHub and almost 2000 forks. 16 00:00:52,960 --> 00:00:55,960 Yeah. That's wild. Yeah. Those might be Ricky numbers. 17 00:00:55,960 --> 00:00:59,080 If we were talking about baseball, but in the open source world, 18 00:00:59,080 --> 00:01:02,560 that's a pretty clear sign that this project's got some serious momentum 19 00:01:02,560 --> 00:01:03,960 behind it. Oh, absolutely. 20 00:01:03,960 --> 00:01:07,640 When you see that kind of activity around an open source project, 21 00:01:07,640 --> 00:01:09,760 it's a really great indicator, you know, 22 00:01:09,760 --> 00:01:14,600 because open source really thrives on having a lot of different people looking 23 00:01:14,600 --> 00:01:17,360 at the code, right? More eyes, more eyes. Exactly. 24 00:01:17,360 --> 00:01:21,760 So it's kind of like crowdsourced security and continuous improvement built 25 00:01:21,760 --> 00:01:23,760 right in built right in. Yeah. Okay. 26 00:01:23,760 --> 00:01:27,720 So let's dive into what vault warden can actually do. Okay. 27 00:01:27,720 --> 00:01:33,000 The GitHub Wiki is packed with features to like a buffet. It is. 28 00:01:33,000 --> 00:01:34,320 It's a features buffet. 29 00:01:34,320 --> 00:01:38,880 You've got personal and organization vaults, two factor authentication, 30 00:01:38,880 --> 00:01:41,840 which we're going to spend some more time on later. It's super important. 31 00:01:41,840 --> 00:01:44,480 It's so important. Yeah. You've got emergency access. 32 00:01:44,480 --> 00:01:49,240 They even support things like YubiKey and the Fido two web often standard. 33 00:01:49,240 --> 00:01:51,680 Oh, wow. Not messing around. No kidding. 34 00:01:51,840 --> 00:01:54,800 That really shows that it's not just a watered down, you know, 35 00:01:54,800 --> 00:01:57,000 like a cheap knockoff version of Bitwarden. 36 00:01:57,000 --> 00:02:01,040 It's really got everything giving you most of what the official service offers. 37 00:02:01,040 --> 00:02:03,680 Yeah. All that. And it's open source. Yeah, exactly. 38 00:02:03,680 --> 00:02:05,720 And here's where it gets really interesting, 39 00:02:05,720 --> 00:02:08,160 especially for anyone out there who likes to tinker. Okay. 40 00:02:08,160 --> 00:02:12,160 One of the things that makes Vaultwarden so great for self-hosting is that it's 41 00:02:12,160 --> 00:02:15,400 super lightweight. Oh, okay. We're talking like, 42 00:02:15,400 --> 00:02:21,040 it uses about half the Ram compared to running the official Bitwarden server. 43 00:02:21,080 --> 00:02:22,760 Wow. That's efficient. Yeah. 44 00:02:22,760 --> 00:02:25,840 So you could run this on some older hardware, you know, 45 00:02:25,840 --> 00:02:28,840 a Raspberry Pi tucked away in a closet somewhere. Oh, that's great. 46 00:02:28,840 --> 00:02:30,560 Super resource efficient. 47 00:02:30,560 --> 00:02:33,800 And that efficiency actually ties into a bigger point, 48 00:02:33,800 --> 00:02:37,920 which is why people are so drawn to self-hosting in the first place. Okay. 49 00:02:37,920 --> 00:02:39,320 It's about control. Right. 50 00:02:39,320 --> 00:02:43,840 Having Vaultwarden running on your own server means you're the one calling the 51 00:02:43,840 --> 00:02:46,160 shots. You're the boss. You're the boss. 52 00:02:46,160 --> 00:02:49,920 You choose where your data is stored, who has access. Right. 53 00:02:49,960 --> 00:02:53,560 It's a big win for the privacy conscious folks out there. Absolutely. 54 00:02:53,560 --> 00:02:57,040 Now I know not everyone is comfortable with setting up their own server, 55 00:02:57,040 --> 00:03:00,960 which is where this public Vaultwarden instance you sent over comes in. 56 00:03:00,960 --> 00:03:05,200 This thing is running on a Kubernetes cluster, which I know it sounds a little 57 00:03:05,200 --> 00:03:08,040 intimidating. It does sound like a supervillains layer. Right. 58 00:03:08,040 --> 00:03:11,400 But it's actually a really clever way to make sure the service stays up and 59 00:03:11,400 --> 00:03:13,160 running 24 seven. Yeah. 60 00:03:13,160 --> 00:03:17,640 Think of Kubernetes like an orchestra conductor for your servers. 61 00:03:18,560 --> 00:03:23,000 They make sure the music, which in this case is your access to Vaultwarden, 62 00:03:23,000 --> 00:03:27,080 never stops. Even if one of the instruments, in this case, 63 00:03:27,080 --> 00:03:29,920 a server goes out of tune. I love that analogy. That's a good one, right? 64 00:03:29,920 --> 00:03:34,200 This is what we call high availability and it's basically essential for any 65 00:03:34,200 --> 00:03:37,600 service that you rely on for something as important as your passwords. 66 00:03:37,600 --> 00:03:40,840 So this public instance is pretty tempting, right? Yeah. I mean, 67 00:03:40,840 --> 00:03:43,800 no messing around with configurations or server updates, right? 68 00:03:43,800 --> 00:03:47,680 Just pure simple password management. Absolutely. But you know, 69 00:03:47,680 --> 00:03:51,120 with anything in life, there are always trade-offs. Oh, there always are. 70 00:03:51,120 --> 00:03:53,720 Even with the best Kubernetes setup out there, 71 00:03:53,720 --> 00:03:57,000 no online service can promise you a hundred percent uptime. 72 00:03:57,000 --> 00:04:00,360 Of course not. Things happen. You know, servers have hiccups. 73 00:04:00,360 --> 00:04:04,240 Sometimes the internet gremlins come out to play. Yeah. The internet gremlins. 74 00:04:04,240 --> 00:04:07,000 So backups, backups are key no matter what you decide. 75 00:04:07,000 --> 00:04:09,000 Backups are your best friend. Exactly. 76 00:04:09,000 --> 00:04:14,040 Whether you go the self-hosted route or you decide to use a public instance. 77 00:04:14,240 --> 00:04:18,120 Preach. Okay. So before we get too far down the rabbit hole here, 78 00:04:18,120 --> 00:04:20,280 we should address the elephant in the room, 79 00:04:20,280 --> 00:04:24,280 which is the disclaimer on the vault warden GitHub page. Okay. 80 00:04:24,280 --> 00:04:29,080 It very clearly states that this project is not officially linked to 81 00:04:29,080 --> 00:04:31,240 Bitwarden or Bitwarden Inc. Right. 82 00:04:31,240 --> 00:04:33,800 And that's super important for folks to understand. Yeah. 83 00:04:33,800 --> 00:04:39,120 So one of the maintainers actually works at Bitwarden. Oh, wow. 84 00:04:39,120 --> 00:04:41,960 Yeah. And they contribute to this project in their personal time, 85 00:04:41,960 --> 00:04:45,440 which is pretty awesome. That's cool. But at its core, 86 00:04:45,440 --> 00:04:48,320 vault warden is a community driven project. 87 00:04:48,320 --> 00:04:51,280 So it's not like you can just call it Bitwarden support if you run into a 88 00:04:51,280 --> 00:04:53,560 problem. Exactly. You're relying on the community. Yeah. 89 00:04:53,560 --> 00:04:56,800 Which depending on how you look at it can be good or bad. 90 00:04:56,800 --> 00:04:59,160 Could be a blessing or a curse, right? You know, 91 00:04:59,160 --> 00:05:03,400 the community can be incredibly helpful, super resourceful. They really can, 92 00:05:03,400 --> 00:05:05,800 but there's also no official safety net, right? 93 00:05:05,800 --> 00:05:10,240 There's no guarantee of any kind of long-term roadmap or anything like that. 94 00:05:10,400 --> 00:05:15,120 It's more like a wild, exciting ride where the destination is always changing. 95 00:05:15,120 --> 00:05:16,560 Yeah. Yeah. Cool. 96 00:05:16,560 --> 00:05:20,760 Which brings us to how the project got its name. 97 00:05:20,760 --> 00:05:25,360 So it was originally Bitwarden RS. Bitwarden RS. Yeah. The RS was for rust, 98 00:05:25,360 --> 00:05:26,800 you know, keeping it simple. Makes sense. 99 00:05:26,800 --> 00:05:29,960 But they eventually landed on Vault Warden to, you know, 100 00:05:29,960 --> 00:05:34,920 avoid any trademark problems and to make it crystal clear that this is its own 101 00:05:34,920 --> 00:05:38,240 thing. Right. Its own separate thing. Yeah. Its own beast. Totally. 102 00:05:38,680 --> 00:05:43,680 And I think that was a smart move because that clear separation helps users make 103 00:05:43,680 --> 00:05:48,400 more informed choices about which solution really fits their needs. Right. 104 00:05:48,400 --> 00:05:52,080 Right. And let's be honest, their comfort level with a little bit of risk. 105 00:05:52,080 --> 00:05:56,200 So what are your initial thoughts? What's jumping out at you so far? 106 00:05:56,200 --> 00:05:59,920 Well, one thing that I find really interesting is, uh, 107 00:05:59,920 --> 00:06:04,840 it's really how Vault Warden is kind of like a poster child for this whole 108 00:06:04,840 --> 00:06:09,120 movement we're seeing of open source alternatives popping up in the security and 109 00:06:09,120 --> 00:06:12,680 privacy world. Yeah. You know, it's not just about getting something for free, 110 00:06:12,680 --> 00:06:17,840 it's about transparency control. And I really love that community vibe. 111 00:06:17,840 --> 00:06:18,720 Totally. Yeah. 112 00:06:18,720 --> 00:06:23,040 Now we've been throwing around this term self-hosting a lot. We have, 113 00:06:23,040 --> 00:06:25,560 but for anyone listening who might be new to this whole thing, 114 00:06:25,560 --> 00:06:27,200 can you break it down for us? 115 00:06:27,200 --> 00:06:31,560 Like imagine you're explaining it to your tech challenged grandma. 116 00:06:31,960 --> 00:06:36,840 What exactly is self-hosting? Okay. So imagine you're baking a cake. 117 00:06:36,840 --> 00:06:38,360 Okay. I like where this is going. 118 00:06:38,360 --> 00:06:41,640 You could go to the store and buy one, you know, pre-made, ready to go. Right. 119 00:06:41,640 --> 00:06:45,120 Or you could bake it yourself from scratch. Yeah. You choose the ingredients, 120 00:06:45,120 --> 00:06:48,960 the frosting. You're in control. You're in control of the whole process. Exactly. 121 00:06:48,960 --> 00:06:53,240 Self-hosting is kind of like baking your own password manager cake. Okay. 122 00:06:53,240 --> 00:06:57,800 I like that. You're running the software on your own server. Okay. 123 00:06:57,880 --> 00:07:02,780 Which could be a computer that you own or like a virtual one that you rent online. 124 00:07:02,780 --> 00:07:06,800 Okay. But you're in control of the recipe, so to speak. Yeah. 125 00:07:06,800 --> 00:07:10,960 So no more relying on those big tech companies to handle your precious 126 00:07:10,960 --> 00:07:14,160 passwords. Right. But let's be real for a second. Okay. 127 00:07:14,160 --> 00:07:17,960 Doesn't self-hosting require like some serious tech skills? 128 00:07:17,960 --> 00:07:20,920 I mean, it can seem a little daunting at first. 129 00:07:20,920 --> 00:07:25,960 I'm picturing like lines of code scrolling down a dark screen, 130 00:07:26,080 --> 00:07:27,680 like in the matrix. Yeah, exactly. 131 00:07:27,680 --> 00:07:31,280 But one of the great things about Vault Warden is that they've made the self 132 00:07:31,280 --> 00:07:35,760 hosting setup surprisingly straightforward, especially if you're familiar with 133 00:07:35,760 --> 00:07:40,360 Docker, which is basically like a little container that makes running software 134 00:07:40,360 --> 00:07:45,320 super easy. Plus their documentation is excellent, really step by step. 135 00:07:45,320 --> 00:07:50,160 And the community forums are packed with helpful folks who are ready to jump in 136 00:07:50,160 --> 00:07:54,560 and help if you get stuck. Nice. Speaking of documentation. Yeah. 137 00:07:54,640 --> 00:07:58,240 I have to say, I was really impressed with how thorough it was. It's great. 138 00:07:58,240 --> 00:08:02,240 They cover everything from installing Vault Warden on different operating 139 00:08:02,240 --> 00:08:06,920 systems, like windows, Mac, Linux, the whole gang, the whole gang. Yeah. 140 00:08:06,920 --> 00:08:09,320 Just setting up something called a reverse proxy, 141 00:08:09,320 --> 00:08:11,880 which sounds kind of complicated. It sounds scary, 142 00:08:11,880 --> 00:08:15,240 but it's basically just a bouncer for your server, 143 00:08:15,240 --> 00:08:18,080 making sure only the right people get in. Got it. 144 00:08:18,080 --> 00:08:22,240 They even have guides on how to integrate with external authentication services. 145 00:08:22,640 --> 00:08:24,520 That's impressive. It's wild. 146 00:08:24,520 --> 00:08:29,120 It really is a testament to how passionate the open source community behind Vault 147 00:08:29,120 --> 00:08:30,200 Warden is. Yeah. 148 00:08:30,200 --> 00:08:34,960 They've really put in the work to make self-hosting accessible. Yeah. 149 00:08:34,960 --> 00:08:39,000 Even for folks who, you know, maybe don't have a computer science degree. Right. 150 00:08:39,000 --> 00:08:41,720 Right. And for those who want a little bit more handholding, 151 00:08:41,720 --> 00:08:45,520 there are always those third party packages out there that can simplify things 152 00:08:45,520 --> 00:08:49,280 even further. Totally. Yeah. Like if you want to order that pre-made cake, 153 00:08:49,280 --> 00:08:52,240 but still maybe add your own sprinkles. Exactly. Yeah. 154 00:08:52,400 --> 00:08:55,160 Just remember with those pre-packaged solutions, 155 00:08:55,160 --> 00:08:58,840 you might be giving up a bit of control or flexibility. 156 00:08:58,840 --> 00:09:02,360 So always do your research and make sure you understand what you're getting into. 157 00:09:02,360 --> 00:09:05,080 Always a good idea. Okay. 158 00:09:05,080 --> 00:09:09,520 Let's switch gears for a sec and talk about the big one. Security. 159 00:09:09,520 --> 00:09:15,560 How does Volt Warden stack up against the official Bitwarden when it comes to 160 00:09:15,560 --> 00:09:17,680 keeping our passwords safe? Well, you know, 161 00:09:17,680 --> 00:09:21,000 security is really the most important thing when it comes to password managers, 162 00:09:21,000 --> 00:09:25,360 right? Oh, absolutely. And Volt Warden has a bit of a secret weapon up at 163 00:09:25,360 --> 00:09:29,920 sleeve. Okay. And that weapon is Rust. Okay. Rust, the programming language. 164 00:09:29,920 --> 00:09:33,400 Yeah, exactly. Think of it like a programming language that's obsessed with safety. 165 00:09:33,400 --> 00:09:38,440 Okay. It pretty much eliminates entire categories of vulnerabilities. 166 00:09:38,440 --> 00:09:40,840 Oh wow. Like buffer overflows, 167 00:09:40,840 --> 00:09:44,920 which are these nasty exploits that have plagued software for years. 168 00:09:44,920 --> 00:09:48,560 Not good. No, not good. So Rust helps prevent that. Yeah. 169 00:09:48,600 --> 00:09:52,440 The rest makes it much harder for those kinds of vulnerabilities to even exist. 170 00:09:52,440 --> 00:09:54,440 Okay. That's good. And on top of that, you know, 171 00:09:54,440 --> 00:09:57,120 you've got thousands of eyes constantly looking at the code. 172 00:09:57,120 --> 00:10:00,640 It's like having an army of security guards patrolling your vault. Yeah. 173 00:10:00,640 --> 00:10:04,800 If there's a weakness, someone's probably going to spot it before the bad guys 174 00:10:04,800 --> 00:10:08,640 do. That's the power of open source. Exactly. Open source security. 175 00:10:08,640 --> 00:10:11,400 It's all out in the open. Transparent. Transparent. Yeah. 176 00:10:11,400 --> 00:10:16,440 So bugs and vulnerabilities can be spotted and fixed quickly. 177 00:10:16,600 --> 00:10:20,520 Yeah. But remember whether you're on team vault warden or team bit warden, 178 00:10:20,520 --> 00:10:24,520 keeping your software updated is super important. Yeah. 179 00:10:24,520 --> 00:10:27,720 Those updates are critical. They're like security system upgrades, 180 00:10:27,720 --> 00:10:30,680 patching up any holes that might've popped up. Okay. 181 00:10:30,680 --> 00:10:32,640 So speaking of security upgrades, 182 00:10:32,640 --> 00:10:37,840 let's talk about two factor authentication or two FAs. The cool kids call it. 183 00:10:37,840 --> 00:10:42,160 Two FAs. Yeah. This is a must have for any password manager, right? 184 00:10:42,160 --> 00:10:46,280 It's like having a guard dog, A and D, a security system. Okay. 185 00:10:46,600 --> 00:10:49,800 It means that even if someone gets ahold of your password, 186 00:10:49,800 --> 00:10:53,400 they still need a second piece of information to actually get into your 187 00:10:53,400 --> 00:10:57,560 account. Right. Right. Think of it like a secret knock or a fingerprint scan. 188 00:10:57,560 --> 00:10:59,840 Yeah. An extra layer of protection. Exactly. 189 00:10:59,840 --> 00:11:02,760 So even if you accidentally fall for one of those phishing scams, 190 00:11:02,760 --> 00:11:06,920 Oh, those are nasty. They are. But with two F a, your account is still safe. 191 00:11:06,920 --> 00:11:07,960 That's good to know. 192 00:11:07,960 --> 00:11:12,240 And vault warden supports a ton of different two F a methods from those handy 193 00:11:12,240 --> 00:11:17,040 authenticator apps on your phone. Right. To those physical security keys like UB 194 00:11:17,040 --> 00:11:20,800 key. Yeah. Which are basically like little mini vaults for your digital life. 195 00:11:20,800 --> 00:11:24,400 Very cool. It really is a must have these days. Absolutely. 196 00:11:24,400 --> 00:11:27,160 I wouldn't trust a password manager without two F a. Yeah. 197 00:11:27,160 --> 00:11:30,320 It's like leaving your front door wide open with a sign that says free stuff 198 00:11:30,320 --> 00:11:34,280 inside. Exactly. And speaking of planning for the unexpected, 199 00:11:34,280 --> 00:11:38,080 let's talk about emergency access, which, you know, 200 00:11:38,640 --> 00:11:43,000 that not the most fun topic. No, but important, but it's something we should all 201 00:11:43,000 --> 00:11:47,760 think about. It's like that saying two is one and one is none. Right. 202 00:11:47,760 --> 00:11:48,360 Good one. 203 00:11:48,360 --> 00:11:52,200 You never want to rely on just one thing when it comes to something as important 204 00:11:52,200 --> 00:11:55,320 as your passwords. Yeah. Yeah. With emergency access, 205 00:11:55,320 --> 00:11:57,760 you can choose a trusted friend, family member, 206 00:11:57,760 --> 00:12:01,840 or colleague who can get into your vault if something happens to you. Right. 207 00:12:01,840 --> 00:12:04,400 Just in case. Just in case. Yeah. Yeah. You know, 208 00:12:04,400 --> 00:12:08,840 what if you win that one way ticket to Mars or accidentally spill coffee on your 209 00:12:08,840 --> 00:12:12,480 laptop and fry everything? Yeah. The digital world is full of dangers. 210 00:12:12,480 --> 00:12:16,480 It is. So it's like having a digital will for your passwords. Okay. 211 00:12:16,480 --> 00:12:19,720 Making sure those accounts don't get lost forever. That's a good way to put it. 212 00:12:19,720 --> 00:12:20,160 You know, 213 00:12:20,160 --> 00:12:24,400 I've been really impressed with how much information and documentation vault 214 00:12:24,400 --> 00:12:29,240 warden provides. Amazing. Right. But what about ongoing support? 215 00:12:29,240 --> 00:12:32,760 What happens if you run into a problem that isn't covered in the Wiki? Well, 216 00:12:32,760 --> 00:12:34,560 that's where the community comes in. Okay. 217 00:12:34,560 --> 00:12:39,280 Vault warden has a super active and helpful community forum. Okay. 218 00:12:39,280 --> 00:12:41,920 Think of it like a virtual water cooler. Okay. 219 00:12:41,920 --> 00:12:46,880 Where users can share tips, ask questions and help each other out. 220 00:12:46,880 --> 00:12:47,640 That's great. 221 00:12:47,640 --> 00:12:50,720 You might even find some of the developers hanging out there offering their 222 00:12:50,720 --> 00:12:52,120 expertise. Oh cool. 223 00:12:52,120 --> 00:12:55,920 So even though it's not official support, like you'd get with a paid service, 224 00:12:55,920 --> 00:13:00,120 there's still a whole network of folks ready to help out. Exactly. 225 00:13:00,400 --> 00:13:04,000 And that's one of the really cool things about open source projects. Okay. 226 00:13:04,000 --> 00:13:06,240 There's this sense of shared ownership, right? 227 00:13:06,240 --> 00:13:09,800 And everyone benefits from that collective knowledge and experience. 228 00:13:09,800 --> 00:13:15,240 I like that. So we've explored a ton about vault warden. We have the features, 229 00:13:15,240 --> 00:13:19,680 the ins and outs of self hosting, the security aspects, the community vibe. 230 00:13:19,680 --> 00:13:23,600 What does all of this mean for someone who's trying to decide between vault 231 00:13:23,600 --> 00:13:27,120 warden and just sticking with the official bit warden service? 232 00:13:28,200 --> 00:13:31,560 The million dollar question, although in this case, 233 00:13:31,560 --> 00:13:34,720 it might be more about peace of mind than actual dollars. 234 00:13:34,720 --> 00:13:38,600 That's a good point. It's all about figuring out what you value most. 235 00:13:38,600 --> 00:13:39,480 Exactly. 236 00:13:39,480 --> 00:13:44,280 Do you prioritize convenience and a polished user friendly 237 00:13:44,280 --> 00:13:48,040 experience? Okay. Or is it more about control transparency, 238 00:13:48,040 --> 00:13:49,520 being part of something bigger? 239 00:13:49,520 --> 00:13:52,160 So if you're the kind of person who likes things simple, 240 00:13:52,160 --> 00:13:56,320 the official bit warden service might be the way to go. Yeah. It's sleek, 241 00:13:56,320 --> 00:13:59,240 user friendly. They've got a dedicated support team. Right. 242 00:13:59,240 --> 00:14:02,640 Always there to answer your questions. Like ordering takeout, you know, quick, 243 00:14:02,640 --> 00:14:04,400 easy, and someone else does the dishes. 244 00:14:04,400 --> 00:14:06,920 But if you're more of a roll up your sleeves kind of person, 245 00:14:06,920 --> 00:14:11,800 someone who enjoys tinkering and likes the idea of having full control 246 00:14:11,800 --> 00:14:16,240 over their data. Yeah. Well, vault warden might be calling your name. 247 00:14:16,240 --> 00:14:16,880 It might be. 248 00:14:16,880 --> 00:14:21,680 And remember you don't have to be a server wizard to go the self hosted route. 249 00:14:21,680 --> 00:14:25,840 You don't. That's where the beauty of that public vault warden instincts comes 250 00:14:25,840 --> 00:14:29,720 in. Right. You can dick your toes into the self hosting cool without having to 251 00:14:29,720 --> 00:14:32,000 dive head first into the deep end. I like that. 252 00:14:32,000 --> 00:14:36,120 You get the control and the transparency without all the servers set up headaches. 253 00:14:36,120 --> 00:14:40,440 It really does seem like when it comes to managing your passwords these days, 254 00:14:40,440 --> 00:14:43,600 you can choose your own adventure. That's a great way to put it. 255 00:14:43,600 --> 00:14:47,080 And no matter which path you choose, bit warden or vault warden, 256 00:14:47,080 --> 00:14:48,600 self hosted or public instance. 257 00:14:48,600 --> 00:14:52,400 The important thing is that you're taking steps to protect your digital life. 258 00:14:52,400 --> 00:14:55,320 Absolutely. That's like wearing a seatbelt for your online accounts. 259 00:14:55,400 --> 00:14:57,600 I love that a seatbelt for your online accounts. 260 00:14:57,600 --> 00:15:01,720 So as we wrap up our deep dive into the world of vault warden, 261 00:15:01,720 --> 00:15:03,680 I want to leave you with this thought. 262 00:15:03,680 --> 00:15:09,400 How do you value the trade-off between the convenience of a commercial service 263 00:15:09,400 --> 00:15:14,240 like big warden and the control and potential privacy benefits of a 264 00:15:14,240 --> 00:15:16,440 community driven project like vault warden? 265 00:15:16,440 --> 00:15:20,120 It's a great question to think about as you're navigating this ever changing 266 00:15:20,120 --> 00:15:23,200 world of online security and data privacy. 267 00:15:23,680 --> 00:15:26,760 Choosing a password manager is a personal decision for sure, 268 00:15:26,760 --> 00:15:28,960 and there's no right or wrong answer. Right. 269 00:15:28,960 --> 00:15:33,360 But hopefully this deep dive has given you the information you need to make a 270 00:15:33,360 --> 00:15:35,800 choice that works for you. Absolutely. 271 00:15:35,800 --> 00:15:39,400 A huge thanks to our expert for joining us today. My pleasure. 272 00:15:39,400 --> 00:15:41,600 It was great to be here and to everyone listening. 273 00:15:41,600 --> 00:15:45,880 Thanks for joining us on another deep dive. We'll see you next time. 274 00:15:45,880 --> 00:15:50,520 It's really grabbing me is how vault warden is kind of like a poster 275 00:15:50,520 --> 00:15:55,040 child for this whole movement of open source alternatives, 276 00:15:55,040 --> 00:15:58,080 you know, popping up in the security and privacy world. 277 00:15:58,080 --> 00:16:03,000 It's not just about getting something for free, right? It's about transparency. 278 00:16:03,000 --> 00:16:06,760 It's about control. It's about this, this awesome community vibe. 279 00:16:06,760 --> 00:16:11,160 It really highlights how people are thinking about protecting their digital 280 00:16:11,160 --> 00:16:15,400 lives these days. It's like saying, Hey, I don't just want to trust a black box. 281 00:16:15,400 --> 00:16:18,760 I want to know what's going on. I want to understand how it works. 282 00:16:19,040 --> 00:16:22,800 And I want to be part of a community that's actively making things better. 283 00:16:22,800 --> 00:16:27,680 Totally. Now we've been throwing around this term self-hosting quite a bit. 284 00:16:27,680 --> 00:16:31,840 We have, but for anyone listening, who might be new to this whole thing, right? 285 00:16:31,840 --> 00:16:33,520 Can you kind of break it down for us? 286 00:16:33,520 --> 00:16:37,200 Like imagine you're explaining it to your tech challenged grandma. 287 00:16:37,200 --> 00:16:40,320 What exactly is self-hosting? 288 00:16:40,320 --> 00:16:44,320 Okay. So imagine you're baking a cake. Okay. I like where this is going. 289 00:16:44,320 --> 00:16:47,480 You could go to the store and buy one pre-made and ready to go. Right. 290 00:16:47,880 --> 00:16:52,240 Or you could bake it yourself from scratch, choose all the ingredients, 291 00:16:52,240 --> 00:16:54,920 the frosting, everything. Yeah. You're in control. 292 00:16:54,920 --> 00:16:57,320 You're in control of the whole process. Exactly. 293 00:16:57,320 --> 00:16:59,120 That's kind of what self-hosting is like. 294 00:16:59,120 --> 00:17:02,720 It's like baking your own password manager cake. I like that analogy. 295 00:17:02,720 --> 00:17:05,640 You're running the software on your own server. Okay. 296 00:17:05,640 --> 00:17:09,440 Whether that's a computer you own or like a virtual one that you rent online. 297 00:17:09,440 --> 00:17:13,560 Okay. But you're in control of the recipe, so to speak. Got it. 298 00:17:13,560 --> 00:17:17,990 So no more relying on those big tech companies to handle your precious passwords. 299 00:17:17,990 --> 00:17:18,040 Right. 300 00:17:18,040 --> 00:17:22,840 But let's be real. Doesn't self-hosting require some serious tech skills? 301 00:17:22,840 --> 00:17:27,760 It can seem daunting. I'm picturing like lines of code scrolling down a dark screen. 302 00:17:27,760 --> 00:17:29,800 Like the matrix. Yeah, exactly. 303 00:17:29,800 --> 00:17:34,160 But the cool thing about Vault Warden is that they've actually made the self-hosting 304 00:17:34,160 --> 00:17:37,200 setup surprisingly straightforward. Oh, really? 305 00:17:37,200 --> 00:17:39,360 Especially if you're familiar with Docker. Okay. 306 00:17:39,400 --> 00:17:44,200 Which is basically like a little container that makes running software super easy. 307 00:17:44,200 --> 00:17:48,320 Okay. Plus their documentation is excellent. Good. Very step by step. 308 00:17:48,320 --> 00:17:51,680 That's good. And their community forums are packed with helpful people who are 309 00:17:51,680 --> 00:17:56,480 ready to jump in if you get stuck. Nice. Right. Speaking of documentation, 310 00:17:56,480 --> 00:17:59,880 I was super impressed with how thorough it was. It's great. 311 00:17:59,880 --> 00:18:03,880 They cover everything from installing Vault Warden on different operating systems 312 00:18:03,880 --> 00:18:08,280 like Windows, Mac, Linux, the whole gang. Yeah, the whole gang. 313 00:18:08,320 --> 00:18:12,360 To setting up something called a reverse proxy. Ooh, 314 00:18:12,360 --> 00:18:14,880 which sounds kind of complicated, 315 00:18:14,880 --> 00:18:17,480 but it's basically like a bouncer for your server, 316 00:18:17,480 --> 00:18:20,040 making sure only the right people can get in. Okay. 317 00:18:20,040 --> 00:18:24,400 They even have guides for integrating with external authentication services. 318 00:18:24,400 --> 00:18:26,920 Wow. That's impressive. It's wild. 319 00:18:26,920 --> 00:18:30,800 It really shows how much the open source community cares about this project. 320 00:18:30,800 --> 00:18:31,520 Yeah. 321 00:18:31,520 --> 00:18:35,840 They've put in a lot of work to make self-hosting accessible for people who 322 00:18:36,240 --> 00:18:38,560 maybe don't have a computer science degree. Right. 323 00:18:38,560 --> 00:18:40,920 And for those who want a little more handholding, 324 00:18:40,920 --> 00:18:44,880 there are always those third party packages out there that can simplify things 325 00:18:44,880 --> 00:18:47,880 even further. Totally. It's like ordering that pre-made cake, 326 00:18:47,880 --> 00:18:52,280 but you still get to add your own sprinkles. Just remember with those prepackaged 327 00:18:52,280 --> 00:18:56,240 solutions, you might be giving up some control or flexibility. Okay. 328 00:18:56,240 --> 00:18:59,320 So always do your research, make sure you know what you're getting into. 329 00:18:59,320 --> 00:19:01,000 Good advice. All right. 330 00:19:01,000 --> 00:19:05,120 Let's shift gears for a second and talk about the big one. Security. Okay. 331 00:19:05,360 --> 00:19:10,000 How does Vault Warden stack up against the official Bitwarden when it comes to 332 00:19:10,000 --> 00:19:11,720 keeping our passwords safe? 333 00:19:11,720 --> 00:19:12,160 Well, 334 00:19:12,160 --> 00:19:15,560 security is really the name of the game when it comes to password managers. 335 00:19:15,560 --> 00:19:20,760 And Vault Warden has a kind of secret weapon. Okay. It's built using Rust. 336 00:19:20,760 --> 00:19:23,840 Okay. Rust, the programming language. Yeah, exactly. 337 00:19:23,840 --> 00:19:28,200 Think of Rust as this programming language that's obsessed with safety. Okay. 338 00:19:28,200 --> 00:19:33,200 It pretty much gets rid of entire categories of vulnerabilities like buffer 339 00:19:33,200 --> 00:19:37,320 overflows, which are these nasty little exploits that have been causing problems 340 00:19:37,320 --> 00:19:42,080 for years. Yeah. Those are bad. They're bad news. And with Rust, 341 00:19:42,080 --> 00:19:44,480 they're much less likely to happen. Okay. 342 00:19:44,480 --> 00:19:47,920 Plus you've got thousands of people looking at the code all the time. Right. 343 00:19:47,920 --> 00:19:50,000 More eyes. More eyes. Exactly. 344 00:19:50,000 --> 00:19:52,640 It's like having an army of security guards protecting your vault. 345 00:19:52,640 --> 00:19:55,760 So if there's a weakness, someone's going to spot it. Chances are. Yeah. 346 00:19:55,760 --> 00:19:58,080 Someone's going to catch it before the bad guys do. 347 00:19:58,080 --> 00:20:01,160 That's the beauty of open source. It is open source. 348 00:20:01,160 --> 00:20:04,640 Security means everything's out in the open. Total transparency. Yeah. 349 00:20:04,640 --> 00:20:09,360 So bugs and vulnerabilities can be found and fixed quickly. But remember, 350 00:20:09,360 --> 00:20:12,360 whether you're a team vault warden or team bit warden, 351 00:20:12,360 --> 00:20:15,600 keeping your software up to date is super important. 352 00:20:15,600 --> 00:20:19,960 Those updates are critical. They're like security system upgrades. Right. 353 00:20:19,960 --> 00:20:23,400 They patch up any holes that might shown up. Okay. Speaking of security upgrades, 354 00:20:23,400 --> 00:20:26,520 let's talk about two factor authentication or two FA. 355 00:20:26,840 --> 00:20:31,160 This is a must have for any password manager, right? 356 00:20:31,160 --> 00:20:35,480 It's like having a guard dog and the, a security system. Okay. 357 00:20:35,480 --> 00:20:38,760 I like that. So even if someone somehow gets your password, 358 00:20:38,760 --> 00:20:41,760 they still need something else to get into your account. Okay. 359 00:20:41,760 --> 00:20:44,200 It's like a secret knock or a fingerprint scan. 360 00:20:44,200 --> 00:20:48,280 So even if you fall for one of those phishing scams, those are the worst, 361 00:20:48,280 --> 00:20:52,440 but with two FA, your account is still protected. That's good to know. 362 00:20:52,480 --> 00:20:57,360 And vault warden supports a ton of different two FA methods from those 363 00:20:57,360 --> 00:21:01,120 authenticator apps on your phone, right? To those physical security keys, 364 00:21:01,120 --> 00:21:04,800 like Yubi key, which are like tiny little vaults for your digital life. 365 00:21:04,800 --> 00:21:08,920 I like that. It's really non-negotiable these days. Isn't it? Pretty much. 366 00:21:08,920 --> 00:21:11,560 I wouldn't trust a password manager without two FA. Yeah. 367 00:21:11,560 --> 00:21:14,520 It's like leaving your front door wide open with a sign that says free stuff 368 00:21:14,520 --> 00:21:15,840 inside. Exactly. 369 00:21:15,840 --> 00:21:18,800 And while we're talking about planning for the unexpected, 370 00:21:18,800 --> 00:21:21,280 we should touch on emergency access. 371 00:21:21,760 --> 00:21:25,320 It's not the most fun topic, right? But it's important. It is. You know, 372 00:21:25,320 --> 00:21:28,960 it's like that saying two is one and one is none. Right. Yeah. 373 00:21:28,960 --> 00:21:32,960 You never want to rely on just one thing when it comes to the something as 374 00:21:32,960 --> 00:21:37,320 crucial as your passwords. Exactly. Yeah. So with emergency access, 375 00:21:37,320 --> 00:21:41,280 you can choose a trusted person, a friend, family member, 376 00:21:41,280 --> 00:21:45,320 colleague who can get into your vault if something happens to you. Right. 377 00:21:45,320 --> 00:21:47,040 Just in case. Just in case. Yeah. 378 00:21:47,040 --> 00:21:51,520 You win that one way ticket to Mars or you spill coffee on your laptop and 379 00:21:51,520 --> 00:21:55,520 fry the whole thing. All sorts of digital dangers out there. Exactly. 380 00:21:55,520 --> 00:21:58,560 It's like having a digital will for your passwords. I like that. 381 00:21:58,560 --> 00:22:01,320 Making sure those important accounts don't disappear. You know, 382 00:22:01,320 --> 00:22:05,320 I've been super impressed with all the information and documentation that vault 383 00:22:05,320 --> 00:22:08,520 warden provides. Great. But what about ongoing support? 384 00:22:08,520 --> 00:22:11,280 What happens if you run into a problem that isn't covered in the Wiki? 385 00:22:11,280 --> 00:22:13,360 Well, that's where the community really shines. 386 00:22:13,360 --> 00:22:16,800 Vault warden has this amazing community forum. Okay. 387 00:22:16,800 --> 00:22:19,280 Think of it like a virtual water cooler. All right. 388 00:22:19,320 --> 00:22:23,080 Where users can share tips, ask questions, help each other out. 389 00:22:23,080 --> 00:22:26,640 You might even find some of the developers hanging out there offering their 390 00:22:26,640 --> 00:22:28,680 expertise. Oh, that's cool. 391 00:22:28,680 --> 00:22:33,200 So even though it's not official support, like you'd get from a paid service, 392 00:22:33,200 --> 00:22:37,040 there's still this whole network of people who are there to help. 393 00:22:37,040 --> 00:22:39,880 So it's like crowdsourced support. Exactly. 394 00:22:39,880 --> 00:22:43,080 And that's one of the best things about open source projects in general. 395 00:22:43,080 --> 00:22:48,200 There's this shared sense of ownership and everyone benefits from the 396 00:22:48,200 --> 00:22:51,920 collective knowledge and experience of the community. I like that. All right. 397 00:22:51,920 --> 00:22:56,080 So we've talked a lot about Vault Warden. We have the features, 398 00:22:56,080 --> 00:22:59,040 the ins and outs of self-hosting, the security, the community. 399 00:22:59,040 --> 00:23:03,840 What does all of this mean for someone who's trying to decide between going with 400 00:23:03,840 --> 00:23:07,720 Vault Warden and sticking with the official Bitwarden service? 401 00:23:07,720 --> 00:23:11,520 Ah, that's the million dollar question. Right. But in this case, 402 00:23:11,520 --> 00:23:14,400 it might be more about peace of mind than actual dollars. 403 00:23:14,400 --> 00:23:18,120 It's all about figuring out what you value most. Exactly. Yeah. 404 00:23:18,160 --> 00:23:23,160 Do you value convenience, a really polished user-friendly experience? 405 00:23:23,160 --> 00:23:26,960 Okay. Or is it more about control, 406 00:23:26,960 --> 00:23:30,360 transparency, being a part of something bigger? 407 00:23:30,360 --> 00:23:33,080 So if you're the kind of person who likes things simple, 408 00:23:33,080 --> 00:23:38,000 the official Bitwarden service might be the way to go. Yeah. It's sleek. 409 00:23:38,000 --> 00:23:39,200 It's easy to use. 410 00:23:39,200 --> 00:23:42,720 There's a dedicated support team standing by to answer all your questions. 411 00:23:42,720 --> 00:23:47,400 It's like order and takeout. Okay. Quick, easy. Someone else does the dishes. 412 00:23:47,520 --> 00:23:51,320 But if you're, you know, more hands-on, if you like to tinker, 413 00:23:51,320 --> 00:23:54,920 you like the idea of having full control over your data. Okay. 414 00:23:54,920 --> 00:23:58,360 Well, Vault Warden might be right up your alley. It might be. Yeah. 415 00:23:58,360 --> 00:24:02,080 And remember you don't have to be a server whiz to go the self-hosted route. 416 00:24:02,080 --> 00:24:05,600 Right. Right. That's where that public Vault Warden instance comes in. Yeah. 417 00:24:05,600 --> 00:24:08,760 It's like dipping your toes in the self-hosting pool. Okay. 418 00:24:08,760 --> 00:24:11,960 Without having to do a cannonball into the deep end. I like that. 419 00:24:11,960 --> 00:24:14,400 You get that control, you get that transparency, 420 00:24:14,400 --> 00:24:16,360 but without the headache of setting up your own. 421 00:24:16,520 --> 00:24:20,000 It seems like these days when it comes to managing your passwords, 422 00:24:20,000 --> 00:24:22,080 it's like you get to choose your own adventure. 423 00:24:22,080 --> 00:24:25,920 That's a great way to put it. But no matter which path you choose, 424 00:24:25,920 --> 00:24:29,920 Bitwarden or Vault Warden, self-hosted or public instance. Right. 425 00:24:29,920 --> 00:24:33,200 The important thing is that you're taking steps to protect yourself online. 426 00:24:33,200 --> 00:24:36,800 Absolutely. It's like wearing a seatbelt for your online accounts. 427 00:24:36,800 --> 00:24:40,000 I love that analogy, a seatbelt for your online accounts. 428 00:24:40,000 --> 00:24:44,440 So as we wrap up our deep dive into the world of Vault Warden, 429 00:24:44,880 --> 00:24:46,280 I want to leave you with this thought. 430 00:24:46,280 --> 00:24:50,880 How do you value the trade-off between the convenience of a commercial service 431 00:24:50,880 --> 00:24:51,720 like Bitwarden, 432 00:24:51,720 --> 00:24:57,180 and the control and potential privacy benefits of a community driven project 433 00:24:57,180 --> 00:24:58,020 like Vault Warden? 434 00:24:58,020 --> 00:25:02,360 It's a question we're thinking about as we all navigate this ever evolving world 435 00:25:02,360 --> 00:25:04,640 of online security and privacy. For sure. 436 00:25:04,640 --> 00:25:07,440 Choosing a password manager is a personal decision. It is. 437 00:25:07,440 --> 00:25:10,800 And there's really no one right answer. Everyone's different. 438 00:25:10,840 --> 00:25:15,320 Everyone's got different needs and priorities, but hopefully this deep dive has 439 00:25:15,320 --> 00:25:18,120 given you the info you need to make an informed choice. 440 00:25:18,120 --> 00:25:22,000 Absolutely. A huge thanks to our expert for joining us today. 441 00:25:22,000 --> 00:25:23,040 You as my pleasure. 442 00:25:23,040 --> 00:25:26,640 And to everyone listening, thanks for joining us on another deep dive. 443 00:25:26,640 --> 00:25:27,720 We'll see you next time.