Live data from Hacker News

Bitwarden – Open Source Password Manager

bitwarden.com

71–80 of 163 posts

Re: Bitwarden – Open Source Password Manager

#72

I'm using KeepassXC on desktop, Keepass2Android on mobile and Dropbox for syncing the database and I'm quite happy with it. Bitwarden looks a bit more polished, but are there any other advantages over Keepass?

Check also KeePass Dx for Android, it has some nice features like Fingerprint for fast unlocking, AutoFill and a nicer Material Theme.

Re: Bitwarden – Open Source Password Manager

#73

I love bitwarden, and have converted to it. However i just learned about https://passman.cc/ Has anyone used that?

Yes, I'm using it currently and have for over a year. It works well enough. However; The mobile apps haven't shown progress in over a year. Development on the main app is very slow. The browser extensions work, but do have minor quirks.

Honestly it feels like a dead project, It's not but it's lacking in resources and the devs are lacking in time from what I've been able to gather from the issue tracker. https://github.com/nextcloud/passman/issues I do sometimes worry I'm one nextcloud update away from losing access to my passwords as a recent one did mess with the interface a bit, it's still functional but some ui elements are mis-aligned.

I've been considering switching to bitwarden for a while, It's interface is much nicer, and more polished. I've mostly been waiting for one of the alternative API implementations to mature a bit, because I don't want to have to run a big honking MS-SQL container on my little VPS. I'm also going to have to write my own importer, or mangle the data a bit because the cvs format for passman isn't compatible with any of the import formats for bitwarden.

Or maybe I'll just give up and migrate to pass or gopass(https://www.gopass.pw/) worth looking at if you like pass). I think I want too much from my password manager =/

Re: Bitwarden – Open Source Password Manager

#74
post #42

For years I've discouraged use of clouds for storing passwords. But because Bitwarden is FOSS software, encrypts data on the client, has good cross-platform support, and can operate if the company goes out of business they have won me over for the storage of secrets I'm not reserving for the sneakernet.

Last time I checked Bitwarden was not encrypting data on the client. Did that change? Also, OSS does not mean secure. Without audits from security experts, I can’t trust it. Bitwarden is objectivity less secure than 1Password or Keepass actually, at the very least because it doesn’t have a desktop application.

Your right in the aspect that OSS does not mean secure... don't agree with the down-votes here.

OSS can often mean less secure. Unless you have the capabilities to fully audit the software you shouldn't fully trust OSS... unless it has an external audit.

Re: Bitwarden – Open Source Password Manager

#76
If somebody wrote code to let me send the second factor from a nominated device as my banks use of Symantec technology does.. it would be cool: I keep meaning to remind myself having the second factor inside 1password is not a second independent factor.

Re: Bitwarden – Open Source Password Manager

#77
I switched from LastPass to bitwarden in November, and I love it.

- it's FOSS, and audited, so it's software I can trust

- great UX on Firefox, chrome, and even Edge. I had my issues, but the project improved them away very quickly.

- sharing support for families or organizations.

- convenient standalone clients for win/Mac/Linux... And even the CLI.

- built in 2FA code generation for each entry, so I don't need a separate app for that.

- the best autofill I've experienced, on desktop browser and even on mobile(!)

- open API so there are third party clients available

- the lead developer is super responsive on GH, so I've been able to contribute.

- cheaper than the alternatives (at least at the time), and I feel good about where my money is going.

I can't recommend it strongly enough. It's one of the OSS applications that has a permanent place on all my devices, right up there with Firefox quantum in my "great examples of OSS" liste.

Re: Bitwarden – Open Source Password Manager

#78
post #10
post #8

There are also two Bitwarden-compatible API implementations in Rust[0] and Ruby[1]. Their main advantage, IMO, is them doing away with the requirement of Microsoft SQL Server. [0] https://github.com/dani-garcia/bitwarden_rs [1] https://github.com/jcs/bitwarden-ruby

This is great ammo for answering when anyone asks why Bitwarden (or OSS in general) is better than LastPass or 1passsword...

I thought it was very cool of Kyle, the Bitwarden dev, to give Joshua, the Ruby dev, a heads up about breaking API changes ahead of time.

https://github.com/jcs/bitwarden-ruby/issues/32

Re: Bitwarden – Open Source Password Manager

#79
https://github.com/bitwarden/core/blob/master/README.md

SQL Server 2017, really? Interesting choice. Open source but we have to pay licenses for the database if we want to self host. I wonder what was wrong with PostgreSQL or MySQL even if they're using .NET Core as a language.

Edit: there is an issue for that https://github.com/bitwarden/core/issues/10

Re: Bitwarden – Open Source Password Manager

#80
post #79

https://github.com/bitwarden/core/blob/master/README.md SQL Server 2017, really? Interesting choice. Open source but we have to pay licenses for the database if we want to self host. I wonder what was wrong with PostgreSQL or MySQL even if they're using .NET Core as a language. Edit: there is an issue for that https://github.com/bitwarden/core/issues/10

Ah shit, its a . NET program :(

It all sounded really good until this point. I was even going to say you could add support for postgres, but I don't know a lot of open source devs who are using. NET.

Post reply on HN