Vaultwarden AI Pass
This commit is contained in:
Astra Logical
parent
919f943000
commit
70884888d9
1 changed files with 81 additions and 47 deletions
|
|
@ -1,51 +1,85 @@
|
|||
# Vaultwarden — Password Manager
|
||||
# Vaultwarden: Secure Password Management
|
||||
|
||||
**Vaultwarden** is an open-source, Bitwarden-compatible password manager. It stores passwords, passkeys, secure notes, and other sensitive data in an encrypted vault synced across your devices.
|
||||
|
||||
## Access
|
||||
|
||||
- **Web UI:** <https://vault.mynest.love>
|
||||
- **Internal (home network):** <http://vaultwarden.k3s.home.nest>
|
||||
- **API:** `https://vault.mynest.love/api` (for third-party clients)
|
||||
|
||||
## Features
|
||||
|
||||
- Store passwords, credit cards, and secure notes
|
||||
- Sync across all your devices in real time
|
||||
- Bitwarden-compatible — works with any Bitwarden client
|
||||
- WebAuthn passkey support for passwordless login to other services
|
||||
- Two-factor authentication (TOTP or WebAuthn) for the vault itself
|
||||
|
||||
## Getting Started
|
||||
|
||||
1. Open <https://vault.mynest.love> in your browser.
|
||||
2. Click **Create Account** and follow the setup wizard:
|
||||
- Choose a **Master Password** (this unlocks your vault — don't forget it!)
|
||||
- Set up **Two-Factor Authentication** (recommended: WebAuthn passkey)
|
||||
3. Once set up, you can import passwords from other managers or start adding them manually.
|
||||
|
||||
## Using with The Nest SSO
|
||||
|
||||
Vaultwarden can store the credentials for your other Nest services. For example:
|
||||
|
||||
- Save your Matrix login details in Vaultwarden
|
||||
- Store Forgejo API tokens securely
|
||||
- Keep Nextcloud passwords organized
|
||||
|
||||
> [!TIP]
|
||||
> Since The Nest uses passkey-based authentication, you won't need to save traditional passwords for most services. Use Vaultwarden primarily for services that still require password login or for storing API keys and secrets.
|
||||
|
||||
## Tips
|
||||
|
||||
- **Master Password:** This is the only password you truly need to remember. Store it securely (e.g., written on paper in a safe place) as a backup.
|
||||
- **Passkey sync:** Enable passkey sync in Vaultwarden settings to use WebAuthn for logging into other Nest services without typing passwords.
|
||||
- **Browser extension:** Install the Bitwarden browser extension for one-click login to websites that support it.
|
||||
|
||||
## Related Services
|
||||
|
||||
- [Keycloak](../technical/security-and-identity.md) — Issues passkeys used to log into Vaultwarden and other Nest services
|
||||
- [Matrix](../communication-and-security/matrix.md) — Use Matrix rooms to share secure notes or receive alerts from Vaultwarden (if configured)
|
||||
**Vaultwarden** is the official password manager hosted on **The Nest**[cite: 5]. Powered by a self-hosted implementation of Bitwarden, Vaultwarden provides an encrypted vault to safely store your passwords, passkeys, credit cards, secure notes, and two-factor authentication (2FA) codes across all your devices[cite: 5].
|
||||
|
||||
---
|
||||
|
||||
*TODO: Add screenshot of Vaultwarden vault view with a sample entry.*
|
||||
## 1. Why Use Vaultwarden over Other Password Managers?
|
||||
|
||||
With so many password management options available, here is why we encourage using Vaultwarden on The Nest:
|
||||
|
||||
* **Complete Privacy & Data Ownership:** Your passwords are encrypted and hosted locally on The Nest rather than on commercial cloud servers owned by Big Tech companies[cite: 5].
|
||||
* **True Multi-Device Syncing:** Browser-based password managers (like Chrome or Safari) lock your credentials into a specific browser or operating system. Vaultwarden syncs seamlessly across Windows, macOS, Linux, iOS, Android, and every major browser via official Bitwarden apps[cite: 5].
|
||||
* **Integrated Passkey & 2FA Support:** Store WebAuthn passkeys and built-in authenticator (TOTP) codes in one single, secure location—no need for separate authenticator apps[cite: 5]!
|
||||
* **Full Premium Feature Set:** Nest users receive full access to Bitwarden-compatible premium features (such as 2FA generation, secure attachment storage, and emergency access) at zero extra cost[cite: 5].
|
||||
* **Automatic Backups vs. Local Files:** Local password files (like KeePass or un-synced text stores) risk permanent data loss if a device is damaged or lost. Vaultwarden keeps your vault synced in real time while benefit from automated Nest backups[cite: 5].
|
||||
|
||||
---
|
||||
|
||||
## 2. Getting Started & Account Setup
|
||||
|
||||
1. **Check Your Inbox:** When your Nest account is created, you will receive an invitation email containing a registration link[cite: 5].
|
||||
2. **Set Your Master Password:** Click the invite link to create your account and set a strong **Master Password**[cite: 5].
|
||||
3. **Save Your Master Password:** This password encrypts your entire vault[cite: 5]. Make sure to write it down or store it in a safe place[cite: 5]!
|
||||
|
||||
> [!WARNING]
|
||||
> **Important:** Because Vaultwarden uses zero-knowledge encryption, administrators **cannot** view or reset your Master Password if you forget it[cite: 5]. Always keep a physical backup of your Master Password in a secure location[cite: 5]!
|
||||
|
||||
*If your invite link has expired before setup, simply reach out to an administrator on Matrix to request a new invitation[cite: 5].*
|
||||
|
||||
---
|
||||
|
||||
## 3. How to Migrate Your Passwords into Vaultwarden
|
||||
|
||||
Moving your existing credentials from Chrome, Firefox, Apple Passwords, 1Password, or LastPass into Vaultwarden is quick and easy!
|
||||
|
||||
### Step 1: Export Credentials from Your Current Manager
|
||||
Export your saved passwords as an unencrypted **CSV** or **JSON** file from your current browser or password manager settings.
|
||||
|
||||
### Step 2: Import Your File into Vaultwarden
|
||||
1. Log in to the Vaultwarden Web Console at [vault.mynest.love](https://vault.mynest.love)[cite: 5].
|
||||
2. In the top navigation bar, click **Tools**, then select **Import Data**.
|
||||
3. Choose the format corresponding to your old manager (e.g., *"Chrome (csv)"* or *"1Password (csv)"*).
|
||||
4. Select your exported file and click **Import Data**.
|
||||
|
||||
### Step 3: Clean Up
|
||||
> [!CAUTION]
|
||||
> **Security Reminder:** Once your import is complete, immediately delete the exported `.csv` or `.json` file from your device and empty your Trash/Recycle Bin. Export files contain your passwords in plain text!
|
||||
|
||||
---
|
||||
|
||||
## 4. Connecting Your Apps & Devices
|
||||
|
||||
Vaultwarden uses standard **Bitwarden** client applications[cite: 5]. When signing in to any Bitwarden extension or app for the first time, click the **Gear Icon (Settings)** on the sign-in screen and set your **Server URL** to:
|
||||
|
||||
`https://vault.mynest.love`[cite: 5]
|
||||
|
||||
### Recommended Downloads:
|
||||
* **Browser Extension:** Install the **Bitwarden** browser extension (Chrome, Firefox, Edge, Safari) for one-click password auto-fill on websites[cite: 5].
|
||||
* **Mobile Apps:** Download **Bitwarden** from the iOS App Store or Google Play Store to enable system-wide password and passkey auto-fill on smartphones[cite: 5].
|
||||
* **Desktop App:** Available for macOS, Windows, and Linux for quick access to your vault off-browser[cite: 5].
|
||||
|
||||
---
|
||||
|
||||
## 5. Integrating with The Nest
|
||||
|
||||
While The Nest relies primarily on **passwordless passkeys** managed via Keycloak SSO for logging into services like Matrix or Forgejo[cite: 5], Vaultwarden is an essential companion:
|
||||
|
||||
* **Passkey Vaulting:** Vaultwarden can securely store and sync passkeys used for both Nest services and external websites[cite: 5].
|
||||
* **Credential Organization:** Safely store API keys, personal notes, credit cards, or recovery codes for all your digital accounts[cite: 5].
|
||||
|
||||
> [!TIP]
|
||||
> **Passkey Auto-Fill:**
|
||||
> If you use the Bitwarden browser extension or mobile app, enable passkey support in the extension settings to sign into Nest services with a single click[cite: 5]!
|
||||
|
||||
---
|
||||
|
||||
## 6. Service Endpoints & Related Services
|
||||
|
||||
| Component | URL | Purpose |
|
||||
| :--- | :--- | :--- |
|
||||
| **Vaultwarden Web UI** | [vault.mynest.love](https://vault.mynest.love) | Web vault, import tools, and account settings[cite: 5] |
|
||||
|
||||
### Related Nest Documentation:
|
||||
* **[Keycloak Identity](../technical/security-and-identity.md):** Powers central passkey logins across The Nest[cite: 5].
|
||||
* **[Matrix Chat](../communication-and-security/matrix.md):** Get in touch with an administrator if you need help with your vault[cite: 5].
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue