Irrelevant. 1password passwords are encrypted with a key only you have. I HIGHLY doubt that you can keep your homeserver more secure than 1password can its servers.
So is my password store.
> I HIGHLY doubt that you can keep your homeserver more secure than 1password can its servers.
I also highly doubt that my trousers pockets are harder than the 1.5cm thick hardened-steel-doors of the storage lockers at the local train station, or that my pyhsical constitution is superior to those of the trained security guards they have there.
And yet, guess where the keys to my apartment are kept. Hint: Not at the train station.
I'd recommend only exposing bitwarden on an intranet, or controlling access with a strict firewall, but the setup guide makes no such suggestion. https://bitwarden.com/help/install-on-premise-linux/
Are they? How does the vault password recovery work, then?
1Password themselves don't hold these keys.
My point is not so much to throw 1Password under the bus (I'm a happy user), but I'd be curious to see a description of how this works.
And so mediocre protection of irrelevant target can be far more effective than good protection of juicy target