Earlier quoted context omitted.
My take in life: whenever VC or PE investors take over, start moving away from that product and pronto .
Hopefully VC never ever touch Hackernews... :)
Bitwarden: Free, open-source password manager
91–100 of 306 posts
Re: Bitwarden: Free, open-source password manager
#921Password is miles ahead. Its UX is WAY better, as is its cryptography architecture and its security whitepaper ( https://1passwordstatic.com/files/security/1password-white-p... ). Bitwarden doesn’t even come close.
Unfortunately 1Password doesnt have the main feature that most of us are probably using bitwarden for, self hosting.
EDIT: I have just noticed this. Everyone whos interest should submit!
Re: Bitwarden: Free, open-source password manager
#93I'm surprised no one's mentioned Padloc [1] yet. It's end-to-end encrypted, open source, easy to self host, and with a really UI + UX. I got all my family to use it and used it for a over a year, before eventually contributing actively to it. There's even a Tauri-based desktop app! Full disclosure: I have "contributing power" but do not make money from its sales or anything like it. [1]: https://padloc.app
"This app isn't available for your device because it was made for an older version of Android". Cannot install.
—Google Play on an Android 13 Pixel 7. That and the star rating are not confidence inspiring.
Re: Bitwarden: Free, open-source password manager
#94Since nobody has mentioned: iOS 17 and macOS Sonoma brings family sharing to password managerm. Sonoma also brings support for using native passwordsl manager in Chrome using a chrome extension developed by Apple. For families who are hooked into Apple's ecosystem, this can provide a much better password management than third party tools.
Then your iCloud account gets banned and you lose everything.
Re: Bitwarden: Free, open-source password manager
#95Earlier quoted context omitted.
Interesting. If say 3 passwords using that algorithm leaked, would it be possible to deduce the algorithm itself? Edit: what about digit-only password?
No. Not without a proper examination by someone who knows historical cryptography techniques, those used before computers. I'd expect the only real threat to be an automated transformer AI solution actively looking for these types of algorithmic passwords, and one which already has access to a few of my passwords. Which is extremely unlikely given that no one uses algorithmic passwords. I was using a separate algorit…
I won't come at you, for lack of time and expertise. I'm genuinely interested in that approach, but I'm probably too afraid to design an algorithm that would be vulnerable for reasons I couldn't imagine.
For digit-only, I meant platforms that forces you that requirement - my bank does.
What about MFA?
Re: Bitwarden: Free, open-source password manager
#96Open source and easy to use https://www.passwordstore.org/
Note that pass by design leaks both the websites you have set up and the metadata of the history of each record. This might suit your threat model, or it might not.
If I'm looking in your ~/.password-store directory and see entries named Finanace/, Travel/, Streaming/, Work/... you have bigger problems.
Re: Bitwarden: Free, open-source password manager
#97Earlier quoted context omitted.
No. Not without a proper examination by someone who knows historical cryptography techniques, those used before computers. I'd expect the only real threat to be an automated transformer AI solution actively looking for these types of algorithmic passwords, and one which already has access to a few of my passwords. Which is extremely unlikely given that no one uses algorithmic passwords. I was using a separate algorit…
I won't come at you, for lack of time and expertise. I'm genuinely interested in that approach, but I'm probably too afraid to design an algorithm that would be vulnerable for reasons I couldn't imagine. For digit-only, I meant platforms that forces you that requirement - my bank does. What about MFA?
Currently I use custom passwords which I write down in a single file for digit-only passwords. But while I was writing my top comment, an idea about converting letters in app/website name to digits and scrambling them came to me.
Take a look for the algorithms: https://www.google.com/search?q=historical+cryptography+tech... Choose one which you can run in your head, don't use it as-is, insert random chars at certain places, substitute some letters in the app name for others, make sure it looks like randomly generated, and you will be fine.
I still use 2FA with Authenticator (on iPhone), fallback set as SMS. Only thing I need is my government issued ID to get a new SIM card if the current one burns.
Re: Bitwarden: Free, open-source password manager
#981Password is miles ahead. Its UX is WAY better, as is its cryptography architecture and its security whitepaper ( https://1passwordstatic.com/files/security/1password-white-p... ). Bitwarden doesn’t even come close.
Unfortunately 1Password doesnt have the main feature that most of us are probably using bitwarden for, self hosting. EDIT: I have just noticed this. Everyone whos interest should submit! https://survey.1password.com/self-host/
and 1Password doesn't work from behind corp proxies with custom traffic inspection certs
Re: Bitwarden: Free, open-source password manager
#99I wanted to like Bitwarden, due to its “open source” nature. But 1Password is really miles ahead, and it's a little ironic, as 1Password 8 went through a major refactoring to a Node-enabled UI, which many people disliked, and it's still miles and miles ahead. I tried teaching my father to use Bitwarden for the sole reason that it seemed to be translated into my native tongue. In his use, Bitwarden turned out to be co…
I’ve tried to switch from 1passwprd to BW and it didn’t work out. Despite its issues, 1Password is still the most capable and stable for me.
Re: Bitwarden: Free, open-source password manager
#100Since nobody has mentioned: iOS 17 and macOS Sonoma brings family sharing to password managerm. Sonoma also brings support for using native passwordsl manager in Chrome using a chrome extension developed by Apple. For families who are hooked into Apple's ecosystem, this can provide a much better password management than third party tools.
It’s a great way to get further locked into Apple’s ecosystem. Good luck if you ever need to move to an alternative platform.