Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

41–50 of 242 posts

Re: Bitwarden: Free, open-source password manager

#41
post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

Workplace uses 1Password. I've been using it personally for years and I love it. Completely worth the subscription cost though it has its quirks

I like Bitwarden and the work they do and I'm sure they're trustworthy seeing as they've been audited and such but the android app and some of the UI is clunky to say the least. I tried switching from LastPass (which is awful) and ended up going to 1Password

Re: Bitwarden: Free, open-source password manager

#42
I love the autofill keyboard shortcut, a real productivity boost.

To auto-fill login information, use the following default shortcuts. If there are multiple Login items with the detected URI, the last-used login will be used for the auto-fill operation. You can cycle through multiple Logins by repeatedly using the keyboard shortcut:

    On Windows: Ctrl + Shift + L
    On macOS: Cmd + Shift + L
    On Linux: Ctrl + Shift + L

Re: Bitwarden: Free, open-source password manager

#43
post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

We use Bitwarden at work. Bitwarden and Keepass are the two on my "trusted" list. Keepass has higher trust because it's offline only. But Bitwarden has a very good reputation and has open sourced both the clients and the server, so they are a close enough second for me, and it's much more convenient having cloud sync.

Re: Bitwarden: Free, open-source password manager

#44
post #21
post #11

Earlier quoted context omitted.

Absolutely. Keepass gives you only a file that you have to sync by yourself and when you have multiple device editing the same file... Well... On the other hand, Bitwarden lets you self-host a complete server that handles everything. If you want something less resources intensive you can take a look at Vaultwarden which is a re-implementation of the server in Rust instead of C#. The main advantage is that it uses MyS…

It is funny, because to me "only a file you have to sync (and backup)" sounds more like an advantage than setting up an entire server environment just so you can access your passwords.

I guess it depends if you sync you passwords across multiple devices, and also potentially add new passwords on multiple devices.

I personally don't.

Sure I have a password manager on my phone, but it only gets a small subset of my passwords anyway. Similar any password I add on my phone is very likely to be somewhat irrelevant mostly throwaway.

Re: Bitwarden: Free, open-source password manager

#45

Earlier quoted context omitted.

Personally a happy user of 1Password. Reasons being: - "It just works" for me and my non-tech-family - It's only $50/year Maybe BitWarden is just as good or better. But why take the gamble and migrate everything and everyone, when I have multiple happy 1P users for a low yearly cost?

I wouldn't consider 4 $ per month a low cost for a password manager

For a family account for up to 5 users? For something I use on a daily (honestly hourly) basis? It's the most value for money subscription I have

Re: Bitwarden: Free, open-source password manager

#47
post #11
post #5

For self-host - is it better than KeePass?

Absolutely. Keepass gives you only a file that you have to sync by yourself and when you have multiple device editing the same file... Well... On the other hand, Bitwarden lets you self-host a complete server that handles everything. If you want something less resources intensive you can take a look at Vaultwarden which is a re-implementation of the server in Rust instead of C#. The main advantage is that it uses MyS…

> when you have multiple device editing the same file... Well...

You are implying that this is a problem, but KeePass actually explicitly supports this and merges your changes. I've been using KeePass like this for many years and never had a problem editing the database from multiple devices.

Re: Bitwarden: Free, open-source password manager

#48
post #29
post #4

Earlier quoted context omitted.

I just switched to it from LastPass which, well, has even worse UX in my opinion. It's an extremely low bar to clear and I agree Bitwarden is quirky too, but for me it's still firmly been an upgrade. The only thing I miss is an "add to bitwarden?" dialog when I sign up somewhere. Their docs say it exists but I've never managed to get it to appear :-)

It has asked me lots of times, but just yesterday it didn't for a new account in none less than google.com. Its code to detect when to ask must be... weak, to say the least. So I went on to add a new entry manually. Oh my, the UX to do so is quite bad. There is such low hanging fruit here for improvement, like copying the "UI on a new tab" style that LastPass does... meanwhile Bitwarden insists on doing everything on…

Bitwarden has quite a few of these sad quirks.

It doesn't work very well in Firefox's private browsing. Only thing you can do is autofill by right clicking a text field and autofill from there, or the keyboard shortcut. But you cannot unlock it in private browsing.

Stateless UI is annoying at best. There's a few times where this has slipped my mind, so I paste a generated password in a new item, and then go to copy the email, and the new item is gone. If I didn't use a clipboard manager, this would have meant losing the generated password.

The browser addon is completely separate from the desktop app. It's annoying as it means you have unlock them separately when you need them. I used to be a 1Password customer, and I absolutely adored the seamless experience of the browser extension utilising the desktop app when it's installed.

Re: Bitwarden: Free, open-source password manager

#49
post #21
post #11

Earlier quoted context omitted.

Absolutely. Keepass gives you only a file that you have to sync by yourself and when you have multiple device editing the same file... Well... On the other hand, Bitwarden lets you self-host a complete server that handles everything. If you want something less resources intensive you can take a look at Vaultwarden which is a re-implementation of the server in Rust instead of C#. The main advantage is that it uses MyS…

It is funny, because to me "only a file you have to sync (and backup)" sounds more like an advantage than setting up an entire server environment just so you can access your passwords.

If you're the sole user, it's probably not worth self-hosting {Bit,Vault}warden. However, the ability to share passwords and, optionally, TOTP codes is super helpful. My wife and I both used KeePass before and the combination of syncing the DB across devices and inability to share (a subset of) passwords was a killer.

{Bit,Vault}warden} both now support emergency access which will be useful if it's ever needed

Re: Bitwarden: Free, open-source password manager

#50
post #3

probably my favorite open source project in years, together with Lichess. No idea why people still throw money at proprietary password managers.

> No idea why people still throw money at proprietary password managers. I've tried Bitwarden for a few days with their Firefox plug-in. During those few days there were multiple occasions were it would create a password for me, but wouldn't save the login. I switched to 1password and it is way better in letting you know if it saved a password or not. I also ran in to some other small issues with the Bitwarden ux tha…

The main difference seems to be that BitWarden is server software that added mobile, whereas 1Password is mobile software that added a server. So the former is pretty strong on the backend (robust API, can run your own, client-agnostic) whereas the latter works better on the client side, without the "glitching" that sadly is common on BW.

I've been a BW user for years (relatively early adopter), and they are improving. At the moment I wouldn't consider anything else, for the simple reason that I could host it myself tomorrow if they went closed-source or shut down. For something like secret management, continuity planning is a must IMHO. I think they have been very good at doing things The Right Way since early days. Also 1Password always looked very Apple-focused and I'm trying to move away from that.

Post reply on HN