3w ago

AliasVault: Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable. - aliasvault/aliasvault

Web;
Google Play Store;
Apple App Store;
F-Droid;
Google Chrome;
Microsoft Edge;
Apple Safari;
Mozilla Firefox.
AliasVault is a privacy-first password and email alias manager. Create unique identities, strong passwords, and random email aliases for every website you use. Fully end-to-end encrypted, with a built-in email server and zero third-party dependencies.

33 6

14 comments

Please remember that this software has not yet been properly audited and could potentially have bugs that compromise your passwords.
That said, it looks attractive and promising.
- Would it replace SimpleLogin, like let you use a laptop as the server so it can be free besides internet/electricity?

I use vaultwarden/bitwarden but I’ll check it out.
- Same, the email alias feature is huge.
  
  I had the same thought, but skimming through documentation it doesn't say how to access those emails. It has an smtp server to receive them, but how do I read them? Documentation doesn't mention a web interface (e.g. roundcube) or pop3/imap server.

Missed the self hosted install:
https://docs.aliasvault.net/installation/
Might investigate this further as I've wanted to move passwords to another solution and leave passkeys / 2fa via KeePass.

I’m incredibly skeptical of the self-hosting email server claims. With the past 30 years of spam, most of the majors make it nigh impossible to do so. I know there are diehards out there that make it happen; it’s not as easy as it was 20 years ago though.
Edit: Very useful HN thread with multiple perspectives (not just my doom and gloom)
- I use Addy.io and Aliasvault for email alias'. Aliasvault works just fine but its alias address' get picked up as spam more often than Addy.io. Addy is the way to go. But its not fully free. Alias vault as a password manager works very well and I like it.
- I believe the biggest issues of self-hosting email is the sending part, not receiving. I usually don't have to send any emails through my aliases, I just use them so I can easily block if they start spamming, or know where a breach happened by the email, as well as to hide my main email. I know there are other use cases though, so its fair to share concerns

I've been working on pt-BR translations for the project, really excited about its progress and future!

14 comments