Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

Post reply on HN
Print view View original

101–110 of 306 posts

Re: Bitwarden: Free, open-source password manager

#101

Post by throwaway2990 »

bad_user wrote: post #39

I wanted to like Bitwarden, due to its “open source” nature. But 1Password is really miles ahead, and it's a little ironic, as 1Password 8 went through a major refactoring to a Node-enabled UI, which many people disliked, and it's still miles and miles ahead. I tried teaching my father to use Bitwarden for the sole reason that it seemed to be translated into my native tongue. In his use, Bitwarden turned out to be co…

> But 1Password is really miles ahead, and it's a little ironic, as 1Password 8 went through a major refactoring to a Node-enabled UI, which many people disliked, and it's still miles and miles ahead.

I use both. It’s far from “miles ahead”

Re: Bitwarden: Free, open-source password manager

#102

Post by afavour »

astromd wrote: post #99
bad_user wrote: post #39

I wanted to like Bitwarden, due to its “open source” nature. But 1Password is really miles ahead, and it's a little ironic, as 1Password 8 went through a major refactoring to a Node-enabled UI, which many people disliked, and it's still miles and miles ahead. I tried teaching my father to use Bitwarden for the sole reason that it seemed to be translated into my native tongue. In his use, Bitwarden turned out to be co…

I’ve tried to switch from 1passwprd to BW and it didn’t work out. Despite its issues, 1Password is still the most capable and stable for me.

FWIW I switched just fine. The apps definitely don’t have the fit and finish of 1Password but I was up and running pretty fast and haven’t looked back.

Re: Bitwarden: Free, open-source password manager

#103

Post by the_gipsy »

wmal wrote: post #57

The title is misleading. This is not fully "free and open-source". I'm actually puzzled by the licensing structure. Bitwarden server is dual-licensed [1] - part of it is licensed with AGPL (Open Source) - some features are licensed with a source available Bitwarden license Now, even the Open Source core requires you to register if you want to self host. This is to provide you with complementary services like security…

You said it yourself, marketing.

Re: Bitwarden: Free, open-source password manager

#104

Post by throwaway2990 »

luczsoma wrote: post #87

1Password is miles ahead. Its UX is WAY better, as is its cryptography architecture and its security whitepaper ( https://1passwordstatic.com/files/security/1password-white-p... ). Bitwarden doesn’t even come close.

No. The user experience of 1Password is just frustrating. I use it daily for work and don’t like it. I’ve used it longer than I’ve used bitwarden.

Re: Bitwarden: Free, open-source password manager

#105

Post by oooyay »

louthy wrote: post #90
22289d wrote: post #54

Earlier quoted context omitted.

The new CEO concerns me. I didn't know who the founder was but I always had the impression it was a lone hacker. They passed the baton. Now it's some old Web 1.0 guy who was the CEO of eFax in the 90's. That's not the type of service I thought I was using. I looked up their headquarters in Santa Barbara and it's a co-working space. That doesn't sound very secure. Though that could be their corp address and they're hi…

> The new CEO concerns me. I didn't know who the founder was but I always had the impression it was a lone hacker. They passed the baton. Now it's some old Web 1.0 guy who was the CEO of eFax in the 90's. This sounds like ageism to me. I don't know if this guy is any good or not, but calling out someone as a 'concern' just because they were successful in the past isn't a good look. Is there anything more substantive…

I've never heard "web 1.0 guy" as a pejorative, on top of what you said. For the curious, Michael Crandell is the CEO and he founded Right Scale in 2007 which exited in 2018 with 250 employees. He was EVP at eFax in the early aughts, which would have been somewhere in his twenties. He's a Stanford and Harvard graduate as well as a self-taught programmer in assembly. Here's an interview with him: https://medium.com/authority-magazine/michael-crandell-of-bi...

Kyle Spearrin is still at BitWarden and is listed as the Founder & CTO: https://bitwarden.com/about/ It looks like he lives in Jacksonville, FL and has a lot of hobbies.

Maybe this is some internalization, but thinking about another engineer referring to me, pejoratively, as a "web 1.0 engineer" would probably leave me confused. Am I supposed to be ashamed I played in the early days of the web?

Re: Bitwarden: Free, open-source password manager

#106

Post by kioleanu »

1una wrote: post #80
rmdes wrote: post #66

Earlier quoted context omitted.

should OSS users of Vaultwarden be worried?

Maybe. Vaultwarden is just a compatible server. All the clients (web, browser extension, desktop, cli and mobile apps) are still maintained by Bitwarden.

Since the extensions themselves are still open source and very stable, they will probably be forked

Re: Bitwarden: Free, open-source password manager

#107

Post by throwaway2990 »

cebert wrote: post #100
geekrax wrote: post #50

Since nobody has mentioned: iOS 17 and macOS Sonoma brings family sharing to password managerm. Sonoma also brings support for using native passwordsl manager in Chrome using a chrome extension developed by Apple. For families who are hooked into Apple's ecosystem, this can provide a much better password management than third party tools.

It’s a great way to get further locked into Apple’s ecosystem. Good luck if you ever need to move to an alternative platform.

Good luck ever having a better alternative platform to move to.

Re: Bitwarden: Free, open-source password manager

#108

Post by skjoldr »

wmal wrote: post #57

The title is misleading. This is not fully "free and open-source". I'm actually puzzled by the licensing structure. Bitwarden server is dual-licensed [1] - part of it is licensed with AGPL (Open Source) - some features are licensed with a source available Bitwarden license Now, even the Open Source core requires you to register if you want to self host. This is to provide you with complementary services like security…

"Commercial.Core and SSO integration: Code for certain new modules that are designed and developed for use by larger organizations and enterprise environments is released under the Bitwarden License, a "source available" license."

The rest of Bitwarden is free both as in beer and as in speech. Dunno why you think otherwise. Vaultwarden exists, and Bitwarden clients are compatible with it.

Re: Bitwarden: Free, open-source password manager

#109

Post by ta8645 »

LinAGKar wrote: post #23
Try1275 wrote: post #7

I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.

Bitwarden encrypts the data locally, so it's not readable on the server. Shouldn't be any less secure than syncing your KeePass DB to the cloud

Unless the client is compromised. The question becomes: do you trust Bitwarden and KeePass equally, to deliver an uncompromised client?
Post reply on HN