Plot twist. You are not married…

Switching to Passbolt right now. I have the feeling this is the beginning of the enshitification of Bitwarden.

I have developed and hosted over 760 WP sites since 2006 and have never been hacked. Ever.

Mediocre craftspeople blame their tools.

The VPN SSH rule is configured at provision level firewall which I can access through HTTPS and temporarily change the whitelisted IP addresses. Never have done this, though. WireGuard is very stable and it is also behind another firewall.

My SSH is only accessible thru a self hosted WireGuard VPN with a dedicated IP. Zero fails.

Bitwarden can generate and store keys and also works as an SSH agent.

Warp terminal has rules you can sync online. I use them to connect to 30+ remote servers each with its own key that never leaves Bitwarden.