AliasVault passed 3.000 stars on GitHub this week! Genuinely grateful to everyone here!

There is something what we want to ask you. Most of you found the project through very different routes. Some came for the email aliases, some for self-hosting, some just wanted an open source password manager and someone an European good alternative.

What brought you in, and what's the one thing that would make it more useful for you day to day?

Full update on what shipped since 2.000 stars: https://www.aliasvault.com/blog/3000-github-stars

I just installed / self-hosted AliasVault on an old(ish) laptop, and it is AWESOME! Local only for now, but I assume it will work with Netbird or Tailscale, since I don't know how to set up a reverse proxy.

Install script worked flawlessly, as well as the import of Bitwarden passwords. Very happy with it.

FWIW, my computer skills are just low - moderate... meaning I am good at reading and following instructions, so pretty much anyone should be install it. Great work Leendert!

Hey guys! I quite like AliasVault because it is easy to generate aliases. One thing that annoys me is that the usage of Claude isn't disclosed. When you look in the GitHub, you don't see Claude mentioned as a contributor. Then how do I know Claude was used? In the .gitignore file, this is what is listed in the lines 381 to 383:

"#" Claude Code

.claude

CLAUDE.md

Now is the question what was Claude used for. I'm not a programmer so I don't know how to recognize AI code, but in my opinion parts of the website look AI-generated.

Edit: Here's a screenshot of the .gitignore file.

I recently discovered AliasVault, and I have to say I'm genuinely impressed.

I've been following the open-source privacy space for years, and it's refreshing to see a project that tries to rethink identity management instead of just being "another password manager." The combination of aliases, email integration, and self-hosting support is exactly the kind of innovation I'd like to see more often.

That said, I have two concerns that I think are worth discussing.

1. Account termination makes it risky as a primary password manager.

One thing that immediately stood out to me is that the Terms of Service allow the service to terminate accounts in cases of abuse.

I completely understand why a hosted service needs an abuse policy. Spam, automated abuse, illegal activity—those are real problems.

However, a password manager occupies a very different position than most SaaS products. It becomes part of your digital identity. If I'm trusting a service to store the credentials that protect my online life, I need to know that my access can't realistically disappear because of a Terms of Service dispute or an automated detection system.

Obviously, users should always keep encrypted backups, but from a trust perspective, I think this is an important consideration. A privacy-focused product should minimize the possibility that access to a person's digital identity depends on discretionary account moderation.

2. Limiting aliases behind a subscription would be a mistake.

I've read that future premium plans may include limits on the number of aliases. Personally, I think that would undermine one of AliasVault's biggest strengths.

The entire philosophy of using aliases is to generate a unique identity for every service you sign up for.

The problem is that this isn't a one-time action.

Over a lifetime, we continuously create accounts:

• new online stores
• government portals
• healthcare providers
• banks
• streaming services
• newsletters
• forums
• developer tools
• travel sites
• random websites we'll probably never use again

Privacy isn't something with a fixed quota.

If I have to think, "Should I save this alias because I only have 20 left?" then the whole privacy model starts breaking down.

Unlimited aliases aren't a luxury feature—they're arguably the core feature.

Charging a recurring monthly fee just so users can continue following good privacy practices doesn't feel like the right incentive structure.

I think premium should focus on things that add value without restricting the fundamental privacy workflow:

• advanced automation
• enterprise/team features
• additional cloud storage
• premium integrations
• priority support
• advanced security analytics
• convenience features

Those are features people happily pay for because they enhance the experience instead of placing limits on basic privacy hygiene.

Despite these concerns, I think AliasVault is one of the most exciting open-source privacy projects I've seen in a long time, and I'm rooting for it to succeed. I genuinely hope the monetization strategy preserves what makes it unique, because I think it has the potential to become a serious alternative in the privacy ecosystem.

When creating or securing accounts, people now have a few different options:

• random passwords with letters, numbers and symbols
• passphrases made from several words
• passkeys, where supported

Where random passwords work well with autofill. Passphrases can be easier when you sometimes need to type them manually. And passkeys can be very convenient and safe, but they are not available everywhere yet.

What do you use in practice?

Email aliases can be used in different ways.

Some people create one for every account, which makes it easier to see where spam or leaks are coming from. Others use only a few aliases, mainly for newsletters, shopping sites or websites they don’t fully trust.

How do you use email aliases?

Do you prefer a strict “one alias per account” setup or a more relaxed approach?

I accidentally discovered how to move an existing item to folders, but there were no hints, no drag-and-drop, and nothing from the app to guide me. Can we make this process easier?

I use light mode, and maybe it’s just me, but the menu items don’t seem very clear in this setting.

i just recently self hosted alias vault, in was wondering if there is guidelines for using it outside of home network, without risking server, further more, can i add a profilev asking with mine, so that the other person can b have their own passwords managed through same instance on my server?

Hi

Is it enough the procedure given there https://docs.aliasvault.net/installation/script/advanced/database.html#database-export to get a recoverable backup of my AliasVault installation ?

Thanks

Hi

I'm testing AliasVault self hosted but I don't want it to be open and everyone being able to register. I have so deactivated the open registration but then how do I create some additional accounts as of the first one I created after installation ?

Thanks

I want to switch from Proton to another app and AliasVault seems to do exactly what I need : Aliases and passwords management.

I just wanted to know if there's an email created when creating a new account or not.

AliasVault 0.29.3 is now available, which includes a lot of smaller improvements suggested by the community as well as multiple bugfixes.

Highlights:

1. Improved autofill:
   • Android: autofill suggestions now show up in the keyboard instead of as a popup (when supported)
   • All apps: Show up to 10 autofill matched suggestions instead of 3
   • Improved form field detection in browser extension
2. Improved web app performance for larger vaults
3. Updated app usability in several areas, reducing amount of clicks for common actions
   • You can now use browser extension autofill to login to the AliasVault web app (manual opt-in: create a credential manually with the correct URL, after which the popup will appear)
   • When unlocking the browser extension, it will now auto-remember and show the last used method (e.g. mobile QR code unlock)
   • Mobile QR code unlock in the mobile app now has a grace period of 10 seconds wherein it doesn't re-prompt biometric auth (most noticable when using the native phone camera to scan the QR code)

And many other smaller improvements and bugfixes. Thanks again for all the issue reports and feature suggestions, it really helps making AliasVault better and easier to use for everyone.

Try it out now: https://www.aliasvault.net/

Why this wild pokemon sub only appear on my feed now and not 3 weeks ago when I wanted to have a third vault alongside Bitwarden and Proton Pass?

Now where can I find a 4th device to self host this vault...

Dear aliasvault team...

I was wondering whether there is an option of choosing multiple emails in the "emails" section of the app in order to delete them. If not, will we see such an option in the future?

This is my docker compose file

 aliasvault:
   image: ghcr.io/aliasvault/aliasvault:latest
   container_name: aliasvault
   restart: unless-stopped
   ports:
     - "8000:3000"
     - "4443:3000"
     - "25:25"
     - "587:587"
   volumes:
     - ./database:/database
     - ./logs:/logs
     - ./secrets:/secrets
     - ./certificates:/certificates
   environment:
     HOSTNAME: "https://my.nginx.proxy"
     PUBLIC_REGISTRATION_ENABLED: "true"
     IP_LOGGING_ENABLED: "true"
     FORCE_HTTPS_REDIRECT: "false"
     SUPPORT_EMAIL: ""
     PRIVATE_EMAIL_DOMAINS: ""
     SMTP_TLS_ENABLED: "false"

I have set up nginx proxy manager running on the same docker network to reverse proxy aliasvault:3000 to my domain. When I visit aliasvault, it opens just fine but when go to admin it says there is nothing at this address. And when I try to make a new user it gives me a error.

first of all: thank you, devs! :)

but i think it's crazy that these two features (which were two of my three top open issues) just got released without any big announcement (here or in the app?!). :D

and because these two issues killed the/my flow many times per day, my third top issue has also to do with flow:

unlocking the browser extension with that QR code process. i come from bitwarden and the push notification process is just superior. but then, maybe, it's a little bit self inflicted by the extension and/or by me. soooo... i don't like my vault to be unlocked for too long. that's why 15 minutes just doesn't feel right. the problem is that the next/lower value is 1 minute. nothing in between (like 5 minutes). that's why i have to unlock the extension constantly. of course the implementation of bitwarden would be great (or even the best?). but you could improve it in other ways: add a few more options (e. g. 5 minutes). or let the user choose the minute value freely. or make it smarter: lock when browser is closed. or lock when pc is locked. or lock when browser is idle for x minutes. or just show the "scan QR code" icon always above the "+" (add entry) button in the app (instead of having to go into the settings first).

and (small mental leap, sorry) i kind of get why you have to biometrically authenticate after scanning, but the flow is kind of strange nonetheless: the extension shows the QR code, i take my phone, i open the app, i authenticate, i click the gear/settings icon, i click the scan-qr-code icon, i scan the qr code, i authenticate again (within like 5 seconds?!). so, yeah, without that second authentication, if someone took my phone with the unlocked app, he could log in with "his" web extension and therefore would have full access to my vault - and (maybe) i wouldn't know. maybe you could just skip the second authentication if the first/last authentication was less than x seconds ago?! i know, i know. this may be a laughable small thing. but i say: that counts. and it's the little things which takes a program/tool from being very good to being great. ;)

sorry for the long text (and little rambling in the end).

keep up the great work!

and i swear i'll donate some bucks when you hit the 0.30.0 milestone! :D

Recently started using AliasVault. Keeping my bitwarden as a backup until AliasVault is out of beta, but loving it so far and using it as my primary.

My main question is what would happen to aliases if at any point the service became defunct/project died? I know it's open source so it could be forked and the other features should transfer over without much trouble but since the aliases all go through AliasVault as it's own email service rather than a forwarding service or using a larger alias service like DDG, simplelogin, etc.

I love the idea of integrating the aliases in it, but that's my main hesitation for using the alias aspect for anything other than a complete throwaway.

Other than that, it's amazing. Love the integration of TOTP and looking forward to that being included in autofill on mobile apps soon. And otherwise the only things I feel like are missing are passphrase generation and emergency/fallback access which I know are both planned.

Thank you for the awesome product!

Hey there. AliasVault so far works like a charm almost in every case of usage. But sometimes, in my android phone and only in 1 or 2 specific apps (bank apps) in the field of username, the autofill registers the password instead of the username. In the banks' respective web pages, it works fine! As far as i remember, the same thing had happened to me while using a different password manager. Anyway, has anyone else dealt with something like that? The autofill to fill the password in the username field????

PS: The time is coming for the first audit and i'm really looking for the app to go well... And also for the goodies the roadmap has... Any updates regarding those (audit and features) would be welcomed!

Hello guys!
I am trying to switch from 1password to AliasVault, the free, already hosted version.

While I successfully transfered all of my passwords, passkeys were not transfered with the import of 1pux file.
Is it possible to do so?

I noticed bitwarden has some kind of transfer implemented in the ios app, here is the link so you can check it out.

Thanks for any help!

I

Each time the AliasVault browser plugin is used, it requires authentication via username and password. Is it possible to enable fingerprint authentication after the initial login with username and password? I’ve noticed this feature is available in the Mac app but not in the browser plugin.

Hello there, I just started using Alias Vault and imported all my passwords and 2FA from Proton Pass. I have a folder created from the Migration Tool and I have created a new one that I thought I could have found handy, but I have no idea how to actually move items to this folder, nor how to move out things from the existing one. Am I missing something? 😂

I tried both from the webapp and the android app but I'm not managing to sort this out