Live data from Hacker News

Bitwarden – Open Source Password Manager

bitwarden.com

101–110 of 163 posts

Re: Bitwarden – Open Source Password Manager

#102
post #92
post #79

https://github.com/bitwarden/core/blob/master/README.md SQL Server 2017, really? Interesting choice. Open source but we have to pay licenses for the database if we want to self host. I wonder what was wrong with PostgreSQL or MySQL even if they're using .NET Core as a language. Edit: there is an issue for that https://github.com/bitwarden/core/issues/10

> Open source but we have to pay licenses for the database if we want to self host. As Bitwarden states in the core readme ( https://github.com/bitwarden/core#requirements ) "These dependencies are free to use." And if you lookup the licensing on MSFTs website ( https://www.microsoft.com/en-us/sql-server/sql-server-2017-p... ) you can see that the SQL Server Express version is free. Note: No, I'm not an MSFT employee…

I'm not in the Microsoft stack so I have no idea how much SQL Server and SQL Server Express are compatible. I only know they exist.

The README requires SQL Server so I might be excused thinking that it would work only with that software. Nice to know that it does work on the free version too. I googled and looked on MS site and didn't find out if SQL Server Express exists for Linux too, but I'm on my phone right now. I only managed to involuntarily download a .exe :-)

Re: Bitwarden – Open Source Password Manager

#103
post #49

Earlier quoted context omitted.

Was the data transfer easy between the 2? I'm thinking of doing the same.

Yes, it was very easy. Just follow the instructions from here: https://help.bitwarden.com/article/import-from-lastpass/

Do pay attention to the HTML encoded characters mentioned on that page because I was going crazy trying to figure out why some passwords didn't work after I imported them.

Re: Bitwarden – Open Source Password Manager

#104
post #39
post #22

I really, really want to be a big fan of Bitwarden. I even used it for the past year and a half. However, the last time HN talked about Bitwarden 7 months ago, I listed some reasons[0] why Bitwarden still fell massively short of 1Password, and I feel that those three points have not been addressed (which I believe impacts the friction/convenience of using Bitwarden). My three points then were: 1. A stand-alone deskto…

I've been a 1Password user for about 10 years, but I never moved to 1Password 6, as I didn't want to sync my vault to their servers (even if it's E2E encrypted). I've moved from being primarily an OSX user to Linux, and as a result, my experience has progressively gotten worse enough on 1PW (broken FF extension, general jankiness running on Wine) that I'm finally looking switch off, either to KeePassXC or to Bitwarde…

You don't have to sync your vault in 1Password 6.

Re: Bitwarden – Open Source Password Manager

#105

We evaluated Bitwarden to use as our company vault for shared accesses, however found OneLogin to have a better UI, additional functionality (especially when it came to syncing with our Google directory) and the price (for enterprise) wasn't too much less than OneLogin (which is negotiable anyways).

I personally would be a little wary or OneLogin, they suffered a breach in the past[1]. I know a lot of services are breached but one keeping my secrets I want rock solid. https://krebsonsecurity.com/2017/06/onelogin-breach-exposed-...

to be fair, many of them could be breached already, u just don't know about it yet. At least with OneLogin there was a disclosure and pressure from the public to improve their opsec.

Re: Bitwarden – Open Source Password Manager

#106

I'm using KeepassXC on desktop, Keepass2Android on mobile and Dropbox for syncing the database and I'm quite happy with it. Bitwarden looks a bit more polished, but are there any other advantages over Keepass?

Check also KeePass Dx for Android, it has some nice features like Fingerprint for fast unlocking, AutoFill and a nicer Material Theme.

Other then the design being a tiny bit different I can't see what KeePass Dx offers that differentiates itself from Keepass2Android?

Re: Bitwarden – Open Source Password Manager

#108
post #22

I really, really want to be a big fan of Bitwarden. I even used it for the past year and a half. However, the last time HN talked about Bitwarden 7 months ago, I listed some reasons[0] why Bitwarden still fell massively short of 1Password, and I feel that those three points have not been addressed (which I believe impacts the friction/convenience of using Bitwarden). My three points then were: 1. A stand-alone deskto…

Someone else pointed it out but it’s worth repeating that the convenience of having your 2FA on your laptop/desktop might be making a significant security trade off. It’s not really 2FA if it’s on the same device.

[deleted]

Re: Bitwarden – Open Source Password Manager

#109
post #31

Earlier quoted context omitted.

I run my own server; it works great and is incredibly easy to set up. I would highly recommend people check this software out. It's maybe not as feature rich as other password managers, but it is being actively developed and the few times I had questions I got a quick response from Kyle (the creator).

> I run my own server If you think it matters where the data is stored (which shouldn't matter because it should be client side encrypted), running your own server would also be a risk. Because you cannot possibly have the same resources to monitor your server/router for suspicious activity...

I still think it matters where data is stored because I don't trust most companies to not have back doors.

Since its all my own equipment and I have a background in this sort of stuff, I know what I am looking for when it comes to intrusions.

Re: Bitwarden – Open Source Password Manager

#110

I'm using KeepassXC on desktop, Keepass2Android on mobile and Dropbox for syncing the database and I'm quite happy with it. Bitwarden looks a bit more polished, but are there any other advantages over Keepass?

Check also KeePass Dx for Android, it has some nice features like Fingerprint for fast unlocking, AutoFill and a nicer Material Theme.

KeePass DX doesn't support syncing the database natively. With Keepass2Android, you don't need to install the Dropbox client to save the database to cloud providers.
Post reply on HN