AliasVault: Open-Source E2EE Password & (Email) Alias Manager

A Reddit user expressed distrust in AliasVault, an open-source end-to-end encrypted password and email alias manager, citing signs of heavy AI assistance in its code and documentation that raise concerns about code quality and security. The user plans to stick with Vaultwarden and SimpleLogin unless a security audit changes their mind.

I was thinking about self-hosting this, but I’m getting that impression as well. This section of the insallation page https://docs.aliasvault.com/installation/ , for example, will definitely look very familiar to anyone who has vibecoded. It’s similar to the “Not just X, but also Y” of AI writing. I also stalked sorry lol the developer a bit and there’s clearly heavy AI assistance in his comments and posts, including this one of course. I’m not against using LLMs for programming, but this all gives me a bad feeling about code quality and security. I did a very basic search and looked for em-dashes in the code https://github.com/search?q=repo%3Aaliasvault%2Faliasvault+%E2%80%94&type=code&p=1 , and there seem to be some. That seems to confirm the AI assistance in the code, unless the developer likes to use em-dashes in his comments for some reason. Anyways, what I wanted to mention with this is that I don’t think I trust AliasVault with my passwords and entire online life. You just don’t want don’t want a “bad-feeling” about things like this. I self-host my stuff, so I’ll stick with Vaultwarden and SimpleLogin. A security audit could change my mind though. That’s just my opinion and skepticism though, I know this depends from person to person.