Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden – Open Source Password Manager

bitwarden.com

Post reply on HN
Print view View original

151–160 of 163 posts

Re: Bitwarden – Open Source Password Manager

#151

Post by chme »

chme wrote: post #143
ohthehugemanate wrote: post #77

I switched from LastPass to bitwarden in November, and I love it. - it's FOSS, and audited, so it's software I can trust - great UX on Firefox, chrome, and even Edge. I had my issues, but the project improved them away very quickly. - sharing support for families or organizations. - convenient standalone clients for win/Mac/Linux... And even the CLI. - built in 2FA code generation for each entry, so I don't need a se…

How easy is it to move from one Bitwarden server to the next?

I tried it out now, there is a csv import/export function.

Re: Bitwarden – Open Source Password Manager

#153

Post by commanderkeen08 »

Here’s why I switched from 1Password—

I recently picked up a Pixelbook and have gone all in on ChromeOS. Its replaced my MBP. But unfortunately, that meant parting ways with 1Password.

I needed a new password manager with the following: Self hosted TOTP support (have since decided not to use this) A web UI IOS app with face/Touch ID.

I tried the 1Password subscription but 1Password X just felt too clunky and I wasn’t in love with storing on their server.

Keepass/XC/whatever was a hot mess for me. I really wanted to use it and the idea of keeping and syncing a single db file still really appeals to me, but the ecosystem is such a mess. I tried running a self hosted container for Keepass Web but I kept having to enter a Dropbox API key on every client. I also couldn’t find an iOS app that supported Face ID or the option for storing TOTP. Maybe it’s a better experience on Android. On top of that, the UI was pretty jarring all around.

Bitwarden still has some work in the UI department. The lack of keyboard shortcuts and a native app adds some resistance but it’s manageable for me.

Re: Bitwarden – Open Source Password Manager

#154

Post by albertop »

illuminati1911 wrote: post #30
albertop wrote: post #15

First paragraph on their page disqualifies it completely. I do not want my passwords on anybody’s servers. Our secure cloud syncing features allow you to access your data from anywhere, on any device! Your vault is conveniently optimized for use on desktop, laptop, tablet, and phone devices.

Maybe you should have read a bit more than just the homepage title. "HOST IT YOURSELF Don't want to use the Bitwarden cloud? You don't have to. With Docker you can easily host Bitwarden's entire infrastructure stack on the platform of your choice."

Thanks to the comments there I finally did. First I was excited with the possibility of setting up my home server. But after reading more, the complexity of the setup and required resources are way to much for my use case. I think this is great for a small business, but it is huge overkill for me (home use). I just want my laptop to sync with my iDevices. Peer to peer vault sync built into the app would be much easier and does not require server running all the time. Plus it does not put man in the middle for simple sync. Nothing wrong with Bitwarden for small business or even enterprise it is just not for personal use if you want your secrets secret.

Re: Bitwarden – Open Source Password Manager

#155

Post by e12e »

ohthehugemanate wrote: post #70
keehun wrote: post #22

I really, really want to be a big fan of Bitwarden. I even used it for the past year and a half. However, the last time HN talked about Bitwarden 7 months ago, I listed some reasons[0] why Bitwarden still fell massively short of 1Password, and I feel that those three points have not been addressed (which I believe impacts the friction/convenience of using Bitwarden). My three points then were: 1. A stand-alone deskto…

Er, there IS a desktop client for Linux/windows/iOS. Also a CLI client, FWIW. And an API so you can fork and improve it yourself if you like. I can't speak to the iOS or Safari versions, but it's just angularjs underneath the FF extension, so I imagine it's quite similar to what I've used. And I quite like the Ux. And bitwarden has included a 2FA generator for at least a year.

Wait, there's an official cli client now?

[ed: here it is https://help.bitwarden.com/article/cli/#quick-start

Seems a little more gnarly for scripting than pass (pass leverages gpg agent for getting a passphrase/keeping a "session" - but might work for my primary need - simplyfing VPN logins) ]

Re: Bitwarden – Open Source Password Manager

#156

Post by e12e »

rosege wrote: post #49
anotherevan wrote: post #46

I recently switched to BitWarden from Lastpass after trying a few different options including pass, Enpass and KeePass options. 95% of my usage is in the desktop browser, and the UI of their add-on is great, IMO. Lastpass' had been getting worse for some time, and their shuttering of Xmarks finally left me with no good reason to stay. Using the add-on with Firefox on my phone is reasonable, although could be a bit be…

Was the data transfer easy between the 2? I'm thinking of doing the same.

At the time I migrated from pass, there were no custom import/export - but bitwarden csv support is enough that you should be able to migrate anything where you can get at your logins in any structured format via some minor scripting.

Re: Bitwarden – Open Source Password Manager

#157

Post by untitled_bob »

1Password works great on iOS and macOS but it's not open source... and there's the subscription they try to impose... and their servers... So I was looking to replace it. Bitwarden could be the one in the near future as Keepass is a real pain on iOS and mac for a non-techie. The problem I still have with bitwarden is that the app won't work unless connected to the internet. If the connection is missing you can't add or edit anything, store on your device and sync later :-(

Re: Bitwarden – Open Source Password Manager

#158

Post by coaxial »

kryogen1c wrote: post #47
keehun wrote: post #35

Earlier quoted context omitted.

Maybe it's just my phone (6) but you may find that once you get 1000+ logins, Bitwarden falls apart pretty quickly. I've heard the same from people with 800+ logins. I remember it used to be very quick when I initially used it with a few plugins. IIRC from their Github issue threads, Bitwarden is using Xamarin, and performant UI has been a consistent struggle with many login entries.

how in God's name do you end up with _thousands_ of logins, or even 800? I work in a pretty large MSP in IT with tons of different programs, websites, and clients. Even if I added every single password (which I most surely would not do), I can't imagine there being more than two or three hundred. Conservatively, if every of two hundred clients has thirty passwords, that's still only 600.

640kb ought to be enough for everyone, right? Because it's not your use case doesn't mean that it's the same for everyone.

I have over 1500 entries in my password manager. That's the result of using it for years and having every single account I signed up for registered in it. Including random forums I only ever posted once for support. So yes, people can have more than 100 entries in their password manager.

I switch from LP to bitwarden because I didn't trust LP anymore. It's fine but I find the autofill very dumb (will usually overwrote your password or random fields in various forms), and doesn't do subdomain matching well. Search or just opening the extension (on Firefox) is sluggish, and the android app is very slow (open and search). Automatically putting the 2FA in the clipboard has never worked for me either (Firefox on Linux). But I'll keep using it anyway because it's FOSS and not LP. You can even self host your instance if you like.

Re: Bitwarden – Open Source Password Manager

#159

Post by LyndsySimon »

eitland wrote: post #148
LyndsySimon wrote: post #131

Earlier quoted context omitted.

Having worked with many RDBMSs in the past, MSSQL is one of the very few that I would recommend for new installations. Basically, my flow chart for DB selection: Do you have an enterprise worth of money to burn on the deployment and maintenance? Oracle. Are you deploying to Windows? MSSQL. Else: Postgres.

> Do you have an enterprise worth of money to burn on the deployment and maintenance? Oracle. Even then I'd actively try to avoid it. Source: three years installing, configuring and supporting it.

I don't disagree - but with an "enterprise worth"† of money to burn, you can hire someone like you to suffer through it!

†: Now that I've used it twice, I move that we make an "enterprise worth" a unit of measurement of money, like a "Library of Congress" is a unit of measurement of storage.

Re: Bitwarden – Open Source Password Manager

#160

Post by anmipo »

justtoast wrote: post #96
amaccuish wrote: post #95

I like Enpass. Syncs to my own nextcloud. What other password managers can do that out of interest?

I also use Enpass. It needs more of a mention in these threads.

One fine day Enpass pulled the their app from BlackBerry users - no warnings, no refunds: https://www.enpass.io/blog/discontinuing-the-support-for-enp...

There are quite a few comments from paying customers, who were locked out of their data. According to timestamps, Enpass team successfully ignored these comments for months.

Perhaps this should be mentioned whenever Enpass surfaces as an option...

Post reply on HN