Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

11–20 of 306 posts

Re: Bitwarden: Free, open-source password manager

#12
post #7

I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.

For this I self-host vaultwarden (https://github.com/dani-garcia/vaultwarden), an implementation of the bitwarden server, on my raspberry pi at home (and back up the DB frequently). It works well enough for me, and doesn't have my stuff stored in a single company's cloud.

Re: Bitwarden: Free, open-source password manager

#14
post #7

I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.

I'm using keepass, and the sync does not seem to be hassle - my file lives in dropbox, and it's always been synced before I open the app on another device. Bonus - backing up the database is as easy as copy-pasting a file.

Re: Bitwarden: Free, open-source password manager

#15

I am a KeepassXC user, yet this sounds interesting. What does Bitwarden offer to make me want to switch?

From what I can see, the major feature would be that it stores the password database on their premises and then lets you access it through multiple devices.

Whereas in the case of KeepassXC, you have to have your own place where to store the password database and set it up on you different devices. So Bitwarden offers more convenience.

Re: Bitwarden: Free, open-source password manager

#16

I am a KeepassXC user, yet this sounds interesting. What does Bitwarden offer to make me want to switch?

For what it’s worth I was a longtime KeepassXC user. Switched to Bitwarden to have easier shared passwords between myself and partner/family however I’m now moving back to KeepassXC. I support Bitwarden fully however the app itself is just so badly designed. The UI is dreadful (both the website and desktop app) and I find it very frustrating to use. The whole layered concept of folders and inability to have tags is a nightmare when you have a large collection of passwords. The iOS app seems to quit unexpectedly after opening as well. I’m just very underwhelmed with what I was hoping would be a nice alternative to having to sync my Keepass database everywhere.

On the KeepassXC side of things I’ve had zero issues with the app itself (using it on Linux, OSX and Windows) and I use Strongbox on iOS which is one of the very few apps I’m happy to pay for to support the developer, it’s so much more polished than Bitwarden.

Re: Bitwarden: Free, open-source password manager

#17
post #7

I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.

Yeah that's a good point. I have pretty much all my passwords on BitWarden but no 2FA tokens to avoid "putting all my eggs in one basket". If you centralize both secrets, you don't really have two factors of authentication anymore. I use Aegis on mobile and pass (with otp extension) on the computer, with completely different passwords from bitwarden.

If you're worried about using Bitwarden's cloud vault, you can always spin up an instance of vaultwarden (FOSS server impl in Rust) and point your clients to it. I haven't done it myself yet (though I will likely do it) but I've heard it works really well.

Re: Bitwarden: Free, open-source password manager

#19

I am a KeepassXC user, yet this sounds interesting. What does Bitwarden offer to make me want to switch?

Nothing. Adding 2FA codes to logins costs money, and self-hosting is deliberately difficult so you’ll be using the cloud. Also you can’t edit while offline.

Self hosting is incredibly easy with vaultwarden (https://github.com/dani-garcia/vaultwarden)
Post reply on HN