Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

Post reply on HN
Print view View original

151–160 of 242 posts

Re: Bitwarden: Free, open-source password manager

#151

Post by majewsky »

Aerroon wrote: post #124
KronisLV wrote: post #110

Earlier quoted context omitted.

> I've personally never seen in my (for now short) career anything else than Keepass. KeePass ( https://keepass.info/ ) is excellent for personal usage or for infrequently changing credentials in a team setting, which is why i've also had a good run with it! That said, for something a bit more centralized and more easily manageable, i've seen solutions like TeamPass be used: https://teampass.net/ Well, TeamPass in pa…

The nice thing with keepass is that you manage the password database and key yourself.

The problem with keepass is that you have to manage the password database and key yourself.

(Not for most of us here, but for most people out there.)

Re: Bitwarden: Free, open-source password manager

#152

Post by edoceo »

vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

This could be an HN Poll?

Also, we use Passbolt.

Re: Bitwarden: Free, open-source password manager

#153

Post by xtracto »

phito wrote: post #132
shp0ngle wrote: post #127

I frankly thing password managers are the most stupid thing. We fake users inputing text to input boxes and spend crazy time figuring out how to do that and how to get around various sites trying to block that, so the site can still pretend it’s actual user inputting the password. Plus the manager needs to work around arbitrary password rules. Plus they usually don’t work at OS level; so you still need to remember th…

Password managers are the most stupid thing, really? What better alternative do you propose?

One suitable option is to memorize an algorithm as a password:

Say, given a site, create a password as:

HardcodedChars+siteName+len(siteName)+symbolInKeyboardOf(lenSiteName)+len(TLD)*N+hardcodedChars

So gmail.com would be something like

Chad1Gmail5%9Foo@

And then use that algorithm for generating all passwords.

Re: Bitwarden: Free, open-source password manager

#154

Post by sam_lowry_ »

19870213 wrote: post #92
vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

PasswordState for us (and we're predominantly a Java/PHP/Linux shop).

Linux would naturally lean to the pass ecosystem e.g. pass, browserpass gopass, PasswordSafe app, etc. See https://www.passwordstore.org/

Re: Bitwarden: Free, open-source password manager

#155

Post by zwirbl »

aniforprez wrote: post #143
chiefalchemist wrote: post #93

Earlier quoted context omitted.

I use BW at home and 1PW at work - both via browser extension. I cringe and/or swear at 1PW far more often than BW.

I've not found much reason to swear or cringe at 1Password... maybe ever. I was a bit frustrated once when it gave the wrong popup when filling out my addresses. What is your use case if you don't mind me asking?

1Password once "forgot" an autogenerated password for a government webservice, where I had to used a snailmailed one time password. I needed to get another OTP for registration. It never happened to me again, but having a wrong password stored was really annoying. I've switched to Bitwarden recently and, for the most part, am happier than before.

Re: Bitwarden: Free, open-source password manager

#156

Post by ospzfmbbzr »

BrandoElFollito wrote: post #95

I use Biwarden extensively, in self-hosted mode (vaultwarden), for a few years now. It is truly excellent, especially the fact that you can "move" an entry to an organization, where everyone has the same ownership and rights (and not merely "share" it). Plus a ton of wonderful things. There are two minor points I am missing: - the ability to control someone's passwords. Typical usage: the 24/7/365 support for my pare…

Having tried almost every other solution available over the past 25 years I also self host vaultwarden in a docker container and I'm pretty happy with it.

https://github.com/dani-garcia/vaultwarden

Re: Bitwarden: Free, open-source password manager

#157

Post by fraudsyndrome »

wruza wrote: post #68
neon_me wrote: post #2

Love Bitwarden, I personally onboarded dozen … but they must heavily invest in UI/UX and fix their apps (+ extensions) It’s not easy and intuitive for non-techies.

I'm a techie and it's not intuitive for me either. Honestly, their UI is just bad, despite being my choice of a password manager. It's not a matter of habit, I stumble upon it every damn time I have to open its extension window.

I've had this issue before. If you're on Firefox, open up the history sidebar with ctrl + h,then in the top left corner click on the word History to open the dropdown and select Bitwarden. You'll be able to have it "open" without clicking the extension popup.

Re: Bitwarden: Free, open-source password manager

#158

Post by udia »

xtracto wrote: post #153
phito wrote: post #132

Earlier quoted context omitted.

Password managers are the most stupid thing, really? What better alternative do you propose?

One suitable option is to memorize an algorithm as a password: Say, given a site, create a password as: HardcodedChars+siteName+len(siteName)+symbolInKeyboardOf(lenSiteName)+len(TLD)*N+hardcodedChars So gmail.com would be something like Chad1Gmail5%9Foo@ And then use that algorithm for generating all passwords.

This was my strategy for some time, but I switched to using a proper password manager (Bitwarden). If your algorithm is discovered you're in as much trouble as if you used the same password across multiple sites.

Re: Bitwarden: Free, open-source password manager

#159

Post by sumedh »

xtracto wrote: post #153
phito wrote: post #132

Earlier quoted context omitted.

Password managers are the most stupid thing, really? What better alternative do you propose?

One suitable option is to memorize an algorithm as a password: Say, given a site, create a password as: HardcodedChars+siteName+len(siteName)+symbolInKeyboardOf(lenSiteName)+len(TLD)*N+hardcodedChars So gmail.com would be something like Chad1Gmail5%9Foo@ And then use that algorithm for generating all passwords.

> One suitable option is to memorize an algorithm as a password:

You lost 99% of people here.

Re: Bitwarden: Free, open-source password manager

#160

Post by up6w6 »

mkdirp wrote: post #48
j1elo wrote: post #29

Earlier quoted context omitted.

It has asked me lots of times, but just yesterday it didn't for a new account in none less than google.com. Its code to detect when to ask must be... weak, to say the least. So I went on to add a new entry manually. Oh my, the UX to do so is quite bad. There is such low hanging fruit here for improvement, like copying the "UI on a new tab" style that LastPass does... meanwhile Bitwarden insists on doing everything on…

Bitwarden has quite a few of these sad quirks. It doesn't work very well in Firefox's private browsing. Only thing you can do is autofill by right clicking a text field and autofill from there, or the keyboard shortcut. But you cannot unlock it in private browsing. Stateless UI is annoying at best. There's a few times where this has slipped my mind, so I paste a generated password in a new item, and then go to copy t…

They are trying to do some improvements to make it partially work in private tabs. If I understood correctly, there will still be some issues until they refactor the whole extension for Manifest V3 (deadline is Jan/2023).

https://github.com/bitwarden/browser/pull/2121#issuecomment-...

Post reply on HN