Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

Post reply on HN
Print view View original

221–230 of 242 posts

Re: Bitwarden: Free, open-source password manager

#221

Post by mkdirp »

jkulubya wrote: post #121
mkdirp wrote: post #48

Earlier quoted context omitted.

Bitwarden has quite a few of these sad quirks. It doesn't work very well in Firefox's private browsing. Only thing you can do is autofill by right clicking a text field and autofill from there, or the keyboard shortcut. But you cannot unlock it in private browsing. Stateless UI is annoying at best. There's a few times where this has slipped my mind, so I paste a generated password in a new item, and then go to copy t…

The Bitwarden browser extension has a page with the history of generated passwords which might help

TIL! Though, it only helps when you generate the password inside the extension. When it's some other way, and you paste it, it's less helpful.

Re: Bitwarden: Free, open-source password manager

#222

Post by syspec »

aniforprez wrote: post #85
cies wrote: post #77

Earlier quoted context omitted.

> I prefer supporting open source for personal use. Same here. Opensource also adds to security in this case. Also BitWarden's server has no knowledge of your phrase, and hence cannot, never ever, read your data. Forgetting your phrase means you lose your wallet. 1Pass and competitors do not have such guarantee, and allow one to retrieve access to the wallet by other means.

1Password's servers also cannot read your data. They use a client generated secret key in addition to your usual password to encrypt your vaults. It's been detailed pretty well https://support.1password.com/secret-key-security/

How does that work for their web based browser extension?

Re: Bitwarden: Free, open-source password manager

#224

Post by bearbearbear »

belic wrote: post #141
chrysoprace wrote: post #115

Earlier quoted context omitted.

We use Lastpass; I've never been a big fan of the sharing features. I use Bitwarden for personal use.

I moved to Bitwarden from Lastpass last year. Ironically I remember needing some premium feature, and having issues subscribing to premium. Support was 0/10, and made me move to Bitwarden, but I was really happy with Lastpass. Feature I miss today is security checkup.

No post body was provided.

Re: Bitwarden: Free, open-source password manager

#226

Post by miskin »

yifanl wrote: post #212
phito wrote: post #132

Earlier quoted context omitted.

Password managers are the most stupid thing, really? What better alternative do you propose?

Generate two random 32 length strings. For the sake of this example, let them be 2quvs7jriTXQK8sFv4LzBZRtSN9hqp9q and qFTNX4f5sduaLYShWx96EyZw9ZRNLmqY. Designate the first to "heads" and the second to "tails". Every time you're prompted to login with a password, flip a coin and enter that designated password. If it fails, then enter the second password. For those interested in basic cryptography, feel free to point o…

So you would effectively have 2 passwords reused across all sites?

1. If any of that site is compromised, 50% of your sites will be quickly owned due to password reuse with same username.

2. If someone will get hold of two of your unencrypted strings, they own 100% of your accounts.

- You may solve #1 by creating new password for each site.

- You may solve #2 by encrypting the file.

Voila, you just created your own password manager.

Re: Bitwarden: Free, open-source password manager

#227

Post by AtNightWeCode »

I use several password managers for various reasons, but I like Bitwarden. I use it both for work and privately. I think it is a bit unclear how Bitwarden the company is setup. That is the only thing that bothers me. Passwords are often not “real” secrets, so it does not matter that much.

Generally, I would really like a hardware password manager. Maybe in a chip that you can have in your body. With some MFA so no one can use it when you are dead or passed out.

Re: Bitwarden: Free, open-source password manager

#228

Post by Philip-J-Fry »

domas wrote: post #133
Philip-J-Fry wrote: post #102

I use Bitwarden, it's brilliant. But I wish a password manager would figure out a way to fill in passwords where they ask for 1st, 5th, 11th letters like many banks do. It doesn't need to be automated, if I can tell it which HTML element to read and parse as an index and which text elements to fill in, then that's good enough for me.

In Bitwarden you can achieve that by creating Custom Fields [1] for each letter. [1] https://bitwarden.com/help/article/custom-fields/

No you can't? I'm aware you can point it at different fields and add additional information. But you can't make it fill in a password field that asks for 3 random characters.

Re: Bitwarden: Free, open-source password manager

#229

Post by rekabis »

chiefalchemist wrote: post #93
aniforprez wrote: post #41

Earlier quoted context omitted.

Workplace uses 1Password. I've been using it personally for years and I love it. Completely worth the subscription cost though it has its quirks I like Bitwarden and the work they do and I'm sure they're trustworthy seeing as they've been audited and such but the android app and some of the UI is clunky to say the least. I tried switching from LastPass (which is awful) and ended up going to 1Password

I use BW at home and 1PW at work - both via browser extension. I cringe and/or swear at 1PW far more often than BW.

Same here. Like, literally. 1PW just seems so much clunkier and more difficult to work with. The thing being, 1PW does have a handful of enterprise-level features that seem to be more efficient for managing passwords across the enterprise. That seems to be about the only edge it appears to have, which is why it probably appears more attractive to corporations.

Re: Bitwarden: Free, open-source password manager

#230

Post by dc3k »

BrandoElFollito wrote: post #95

I use Biwarden extensively, in self-hosted mode (vaultwarden), for a few years now. It is truly excellent, especially the fact that you can "move" an entry to an organization, where everyone has the same ownership and rights (and not merely "share" it). Plus a ton of wonderful things. There are two minor points I am missing: - the ability to control someone's passwords. Typical usage: the 24/7/365 support for my pare…

I've been wanting to set up vaultwarden with Docker. However the setup guide[1] uses caddy with ports 443 and 80, but I already have traefik set up with those ports, so docker-compose aborts. My docker knowledge is quite minimal, so I am unsure how (or if) I can resolve this.

[1] https://github.com/dani-garcia/vaultwarden/wiki/Using-Docker...

Post reply on HN