- cross-posted to:
- linuxmemes@lemmy.world
- cross-posted to:
- linuxmemes@lemmy.world
RyanL Bitwarden Employee
Hello everyone!
Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.
Bitwarden remains committed to open source security and transparency
The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone
If you have any questions, please ask them in this thread. Thanks all!
EDIT:
Bitwarden is not going closed-source
You can still fork Bitwarden
No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden
The free plan is here to stay permanently
You must log in or # to comment.
I pay for their product and its totally worth. It was $10 for the longest time and much like everything in the last few years has increased price to what it is actually worth. To be honest $20 a year is still stupid cheap and worth it to keep them developing the product. Bitwarden is also one of the few password managers that hasn’t had a user data breach.
wow, setting up vaultwarden quadlet to work with my selfhosted OIDC sso was stupid easy. Migrating my bitwarden setup to it took no time at all. The extra step was setting up some extra pocketid passkeys to be stored on non-vaultwarden hosted systems (ie. google) to prevent myself from being locked out in case vaultwarden crashes (which probably was a good idea to do regardless). Just need to add the data volume to my regular backup.
Side note: I just tried switching to KeePassXC and it seems pretty fine, except for one caveat. If you installed your browser (probs FF or Librewolf) through flatpak or snap on Linux, the browser extension will not work.
I had to change to the non-Flatpak ver of Librewolf on my Fedora PC, which sucked a little lol 😅
Have you tried fixing it using flatseal and manually changing the config folder location for the browser in keepassxc? Librewolf too, even as native package, requires that location edit
Fine to me as long as this doesnt impact Vaultwarden
Having only ever used keepass, what was the advantage of bitwarden? That you didn’t need to sync it yourself?
It’s also way easier to have shared passwords for family accounts.
That you didn’t need to sync it yourself?
and that you have to never deal with sync conflicts. It’s a huge deal for those who are using tech but not understanding it, and a convenience for the rest
That’s the main benefit yeah.
I use the send tool as well for sensitive files
All these people keep saying that Vaultwarden won’t work because it relies on bitwarden’s API but if there is an incompatibility then wouldn’t vaultwarden just be left in a functional limbo? Like it’ll still work because self hosted but no more new features in parity with official client? Or have I misunderstood the connection between the two
this year there were 2 separate updates to bitwarden clients that fucked up vaultwarden servers, because the bitwarden developers “accidentally” reused a variable name in the data that was unused for a few years. but vaultwarden forgot to remove it, and now it is used in a different way, and the clients bugged away so hard that you had to uninstall them, because even if you was fortunate to be able to get to your passwords list you could not get it to sync otherwise
There is no way I’m self hosting something this important… So now I’m not sure what to do actually.
That’s why I’m just using KeePass. It’s just an encrypted file that you can store on whatever storage you want and sync with existing solutions like Syncthing etc.
Yes it’s a bit finicky when you edit the file on multiple devices before they’ve synced but it works very well for me…
If self hosting is not an option. Ideas that come to mind:
Evaluate what it is worth to you and maybe pay for it, if they offer enough worth to you and it is affordable.
Then there are people who host it and provide it to others. Together with other apps, as a suite. Maybe that’s an option. But I suppose, donating or paying is expected here, too.
Or switch to another solution. Preferably one with an import feature.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters SSH Secure Shell for remote terminal access TLS Transport Layer Security, supersedes SSL VPN Virtual Private Network
[Thread #125 for this comm, first seen 11th Oct 2026, 04:30] [FAQ] [Full list] [Contact] [Source code]
So, Vaultwarden it is?
This seems to be clients for the end devices, which I’m worried may actually be a move towards locking out VaultWarden which will uses the BW Clients
Heh, I’m looking at you to those people that looked at me weird because I told them I was good with Keepass!
Are they still going to publish the Android client app via their own F-Droid repository?
Sure, it’s no change for self hosters currently, but it’s one more step in moving towards a more closed platform overall. I do hope more FOSS client apps end up getting made sometime soon. I’ve been using Keyguard on Android for some time, which means the recent several breaking changes in the Bitwarden apps to the Vaultwarden backend haven’t hit me as hard, but I do still use the official apps for my laptop and desktop and Keyguard isnt fully FOSS, of course. I’d love to see some forks or brand new apps one of these days that are actually fully FOSS for both mobile and browsers. I’ve thought about doing some myself, but I have too many other projects and I also don’t have a MAC or want to pay the fees to make an iPhone version. And I abandoned my Android Developer account when they started the identity nonsense, so none of my apps are on the official store anymore and Fdroid and similar may not be viable soon, so it would only really be for myself and a few others who use alternate Android OS’s.
What’s the benefit for them to change the license?
Money
What differences will exist between the two parallel versions?
Some future components will be published under the commercial license and will exist only in that build. Newly developed features will be evaluated on a case-by-case basis for which license applies to them.
source: the page linked by OP, https://community.bitwarden.com/t/published-version-update-in-app-stores/102750/4
commercial providers can’t fork and sell it and give nothing back to the OSS community.
So basically they were getting undercut by people reselling the same a services under a different name.
And not having to do R&D
No, that would GPL. The benefit for them is that some features will be paid and won’t be unlockable just by using Vaultwarden
it literally says in the post that the license change affects companies who are repackaging and reselling bitwarden, but ok.
But this is the post by bitwarden, defending their decision. AKA marketing.
Can you explain how bitwarden can be “repackaged and resold”, that would be stopped by that change?
Everybody can still fork/rename/publish the FOSS version which is continued to be available. Everybody can connect to vaultwarden…?
Everybody can still fork/rename/publish the FOSS version
Yeah, but there’s no guarantee the FOSS version will be the same as the closed one.
There is certainty that the Foss version won’t be worse than current bitwarden client. Then those will diverge. So?
The current FOSS backend used to be the center of the ecosystem. Going forward that may change. If it stops being that center and it becomes merely a token offering so Bitwarden can claim “we’re still doing FOSS” then it will become pointless.
Simply forking the backend is meaningless without the work to also drag along the entire ecosystem, or establish a new one. Forking a project takes time, effort, vision, persistence, determination.
Yeah this only makes sense if the builds start diverging from the open source code, extra features that are closed source.
Does anyone know if there’s any chance for a fork before this situation inevitably deteriorates? I dont know the license on that software enough to know if its an option.
are u gonna maintain clients?
No, I have money to pay instead. If I were able to contribute to the effort, I would have said that. Just picking fights in response to open questions today?
@Mustachius_Grumpius “The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone”
If there is no intention to put the screws to the user base, then why do it on the first place?
We all know how this game ends when venture capital gets involved.
@flop_leash_973 Where are the screws here?
Split versions is usually the first step. Many projects have done so before. Next year there will be some technical reason they can’t keep feature parity with the commercial repository, and it will drift from the OSS repository. Oops, we broke compatibility, sowwy guys. A couple of years later the OSS repository will be closed because it is a security risk. By that point the company and management would’ve drifted so far from the initial values of the project that people won’t notice. Those who cared will have jumped ship to alternatives sooner, those who noticed later will be already too deep into depending on the software that they will keep paying the subscription.
I have no evidence, but I also don’t have any doubts this is the plan.
I kinda thought the paid plan already had extra features no? Like silly ones but I swear it isn’t just donations right?
It had cloud storage, built in TOTP with autofill, and some had features like organizations and sharing
Still, this fucking sucks. Bitwarden was literally created as a ln answer to this shit happening to LastPass and Dashlane.
I get it because minio dying burned me hard but so long as it keeps operating as it does now do we need more features? I would be fine with a continuously secure version of exactly what it does now. I kinda hate feature bloat
If it’s not getting security updates and it’s not ona completely airgapped sysyem it’s a huge liability. Especially something that lives at the storage level.
Aren’t there forks being maintained? I was looking at implementing it right before it went enshitty, and I could have sworn there were alternatives…
yeah but its typical double speak
Why do you think so?
all “current” features. further down its asked about the future and they arent always clear but the fo state there wont be feature parity moving forward
@surewhynotlem @Mustachius_Grumpius
Experience…
Unfortunately, there is no historical example where this hasn’t turned predatory. It’s a tale as old as venture capital has been in software development:
- get free contributions from altruistic people doniting their time and expertise to your FOSS project that you’re selling
- make a closed-source set of extensions as optional dependencies
- slowly diverge the closed source feature set to include developer and user “must-haves” you do not contribute upstream
- slow or functionally halt open source contributions
It is an oft-repeated long con to pull off a mass heist of donated skill and time while imposing vendor lock-in on your users through a back door.
"As the poison spread through his body, the frog cried out, “Why did you sting me? You have killed us both!”
The scorpion replied, “I couldn’t help it. It’s my nature.”
I swear most of Grafana’s new features are enterprise only now
- Embrace
- Extend
- Extinguish
Yup. All CURRENT, these will start to diverge…
