Password Managers Compared: Cloud, Local, and Self-Hosted

Choosing a password manager is one of the most important software decisions you can make. The wrong choice can mean losing access to all your accounts or exposing your credentials to a breach. There are three main models to understand before choosing. ### Cloud-Synced Password Managers Cloud-synced managers store an encrypted copy of your vault on the provider's servers. The encryption happens on your device before upload, so the provider never sees your plaintext passwords. **Advantages:** - Automatic sync across all devices - Easy account recovery options - No infrastructure to manage **Considerations:** - You are trusting the provider's encryption implementation - A breach of the provider's servers could expose encrypted vaults - Subscription costs for premium features Bitwarden is the leading open-source option in this category. Its code is publicly audited and it supports self-hosting for those who want both convenience and control. ### Fully Local Password Managers Local managers store your vault as an encrypted file on your device. You control where the file lives and how it is backed up. **Advantages:** - No server dependency - No subscription required - Complete data ownership **Considerations:** - Syncing across devices requires manual setup (e.g. via Syncthing or a cloud drive) - No built-in account recovery if you forget the master password KeePassXC is the most widely used open-source local manager, with strong encryption and browser integration. ### Self-Hosted Password Managers Self-hosted managers give you the sync convenience of cloud managers while keeping the server under your control. Bitwarden and its lightweight fork Vaultwarden can both be self-hosted with Docker in minutes. ### Which Model Is Right for You? | Need | Recommended model | |---|---| | Maximum convenience | Cloud-synced | | Maximum privacy | Local or self-hosted | | Team sharing | Cloud or self-hosted | | No subscription | Local or self-hosted | | Open source | Bitwarden or KeePassXC | The best password manager is the one you will actually use consistently.