Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

Post reply on HN
Print view View original

101–110 of 242 posts

Re: Bitwarden: Free, open-source password manager

#101

Post by tpoacher »

teekert wrote: post #53
lazzurs wrote: post #12

Earlier quoted context omitted.

I've found the multi device syncing easier and the integration with iOS works very well.

This was my reason to go away from KeePass(XC) with NextCloud for sync. I would inevitably run into a sync issues (also due to the need for NextCloud to be always up of course, also self-hosted) and I never found a nice way to integrate KeePassXC into android or iOS, Bitwarden just works, on any OS (allthough what I find annoying is that you have to sync the vault before you get new stuff by going into the app and sy…

My own setup which works beautifully is:

KeepassXC on the desktop 'Keepass2Android Offline' on android Keep my database in dropbox. Keep things synced on Android via Dropsync.

I know it's not a self-hosted solution, but I think dropbox as a sync solution in this particular case is a pretty good solution for personal use.

Re: Bitwarden: Free, open-source password manager

#102

Post by Philip-J-Fry »

I use Bitwarden, it's brilliant. But I wish a password manager would figure out a way to fill in passwords where they ask for 1st, 5th, 11th letters like many banks do.

It doesn't need to be automated, if I can tell it which HTML element to read and parse as an index and which text elements to fill in, then that's good enough for me.

Re: Bitwarden: Free, open-source password manager

#103

Post by cies »

aniforprez wrote: post #85
cies wrote: post #77

Earlier quoted context omitted.

> I prefer supporting open source for personal use. Same here. Opensource also adds to security in this case. Also BitWarden's server has no knowledge of your phrase, and hence cannot, never ever, read your data. Forgetting your phrase means you lose your wallet. 1Pass and competitors do not have such guarantee, and allow one to retrieve access to the wallet by other means.

1Password's servers also cannot read your data. They use a client generated secret key in addition to your usual password to encrypt your vaults. It's been detailed pretty well https://support.1password.com/secret-key-security/

Are all clients open source? If I loose all my keys is there no way to recover the data?

And how does this work when I share passwords with my colleagues in a vault? They dont have my "client generated secret key", so how can they read my passwords?

I know companies write stuff to sell their products, but I dont trust that, I prefer open source and the laws of logic over marketing.

Re: Bitwarden: Free, open-source password manager

#104

Post by zepearl »

vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

Keepass

Re: Bitwarden: Free, open-source password manager

#106

Post by mqus »

justsomehnguy wrote: post #91

Offtopic/Ask HN: I tried to use Vaultwarden implementation with one caveat: I don't need to use any plug-ins - my everyday passwords are at my fingertips anyway, for anything else I'm fine with logging in and copy-pasting the login and password. And here comes the thing which makes VW (and a couple of other password managers I tried in the last couple of years) usage abysmal: the web-interface just sucks. First of al…

Afaik the Web-Interface of Vaultwarden is exactly the same as the normal bitwarden web client. The only thing they added was their admin interface, which you wouldn't normally see anyways.

> It just loads ALL your accounts and filters them in the UI

Server-side search would only work if you decrypt the data on the server, which is explicitly not wanted.

Re: Bitwarden: Free, open-source password manager

#107

Post by Slippery_John »

Is there a good, real comparison of password managers for personal use out there somewhere? I've tried looking in the past and haven't found one that isn't just ads. I've been a long time LastPass user but I'm looking to switch away.

Features I need:

* Cross-platform (iOS, macOS, Windows)

* Easy to use browser plugins (the LastPass safari plugin is awful and non-discoverable via Safari plugin search)

* Autofill in browsers (Safari and Firefox) and mobile (iOS)

* Internet-based sync (I don't really want to manage my own backend)

Nice to haves:

* Account creation detection

* TOTP

* Yubikey support

* XKCD-style password generation for passwords I want a shot at remembering

Re: Bitwarden: Free, open-source password manager

#108

Post by NikolaNovak »

vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

Workplace (major consulting company) uses 1password. Keepass is kinda sorta allowed.

Note for context - we are in a company that for obvious and less obvious reasons has a detailed list and tiering of allowed open source software for various purposes; while we have more control over our laptop than most companies such size, policies are fairly firm on what we are and aren't actually supposed to install.

Re: Bitwarden: Free, open-source password manager

#109

Post by petargyurov »

Slippery_John wrote: post #107

Is there a good, real comparison of password managers for personal use out there somewhere? I've tried looking in the past and haven't found one that isn't just ads. I've been a long time LastPass user but I'm looking to switch away. Features I need: * Cross-platform (iOS, macOS, Windows) * Easy to use browser plugins (the LastPass safari plugin is awful and non-discoverable via Safari plugin search) * Autofill in br…

BitWarden ticks all of the features you need.

I am not sure about all the nice-to-haves you have listed but it definitely supports your last point.

Re: Bitwarden: Free, open-source password manager

#110

Post by KronisLV »

vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

> I've personally never seen in my (for now short) career anything else than Keepass.

KeePass (https://keepass.info/) is excellent for personal usage or for infrequently changing credentials in a team setting, which is why i've also had a good run with it!

That said, for something a bit more centralized and more easily manageable, i've seen solutions like TeamPass be used: https://teampass.net/

Well, TeamPass in particular has a pretty horrible UI (not respecting what i click with my mouse and janky dragging of items around, as well as weird display rules), but in general i feel like many companies out there might want a web app of sorts, even if only available in the internal network and self hosted.

Post reply on HN