Exactly! Self hosted FTW. Chances of a data breach… Typically pretty minor if you are smart.
Keep vaultwarden behind wireguard for local only access then also use https certs and good master password. Very secure like this
Security in layers.
All your services should be using https. Vaultwarden in particular won’t even run without https unless you bypass a bunch of security measures.
This is how to setup local only and external https, I highly recommend this as a baseline setup for every homelab. It allows you to choose how much security you want on a per app basis and makes adding new apps trivially easy.
Chances of losing the data is higher with selfhosting too. Unless you’re doing some sort of multizone replication, or course.
I would rather lose my passwords than have my password database be accessed by someone else. Most websites have a “forgot password” function, and for passwords that don’t have that (e.g. to decrypt my hard drive or log into my computer) I’ve memorised the passphrase and always type it manually anyway. And for passwords where neither applies, it’s probably not a huge loss anyway if I’ve not prepared for the possibility of losing my password db for that particular password.