Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

131–140 of 306 posts

Re: Bitwarden: Free, open-source password manager

#131

I’m relatively new to this site. Why is this post popular? For me it links to the Bitwarden front page.

afaik this site is for showing interesting things and discussing them. this post is to show the bitwarden password manager, nothing more to it.

Re: Bitwarden: Free, open-source password manager

#132
post #17
post #7

I am a happy user and find it very convenient but how safe is it really to have all your jewels centralized in the cloud, including 2FA. It seems such a worthwhile target. On the other hand keeping everything in sync manually seems a hassle and in the end you just encrypt on your machine and the syncing goes through the cloud anyway, so where's the difference? I'd be happy to hear thoughts on this.

Yeah that's a good point. I have pretty much all my passwords on BitWarden but no 2FA tokens to avoid "putting all my eggs in one basket". If you centralize both secrets, you don't really have two factors of authentication anymore. I use Aegis on mobile and pass (with otp extension) on the computer, with completely different passwords from bitwarden. If you're worried about using Bitwarden's cloud vault, you can alwa…

For me it was more a matter of convenience than security. I didn’t mind using “sameish” passwords for 90% of my accounts. Good enough not to be auto-broken on one leak, really bad if someone actually targeted me. But what eventually drove me to Bitwarden was that I needed more and more different 2FA method which were all somehow linked to my phone. Many of which weren’t actually backed up. My first idea was to just use Authy, but apparently my phone number is linked to an account that isn’t mine, and their support has been unable to do anything about it, so that’s not exactly possible. So I went with Bitwarden.

I’m not too worried about the eggs in one basket. My digital national ID and my email credentials aren’t saved on my Bitwarden, so while I obviously don’t want to lose it, it also wouldn’t be the end of the world for me.

Re: Bitwarden: Free, open-source password manager

#133

I'm surprised no one's mentioned Padloc [1] yet. It's end-to-end encrypted, open source, easy to self host, and with a really UI + UX. I got all my family to use it and used it for a over a year, before eventually contributing actively to it. There's even a Tauri-based desktop app! Full disclosure: I have "contributing power" but do not make money from its sales or anything like it. [1]: https://padloc.app

First time I’m seeing this and the branding/design shouts “stay away from me, I’m a student project!”

Not exactly the impression I’d like to see when using a password manager. And I’m a UI/UX designer in case you wonder…

Re: Bitwarden: Free, open-source password manager

#134

FYI - Bitwarden took $100M in VC money last year. At some point, the pressure to aggressively monetize will unfortunately happen. https://techcrunch.com/2022/09/06/open-source-password-manag...

The typical trajectory of VC-backed companies is one of the things that led us to develop Backbone[1]. We've opted to forego VC funding and the short-term benefits in entails to build the long-term foundational infrastructure for end-to-end encryption.

Another concerning realization is how sparingly encryption is used in (many) modern password managers. Sure, it makes search easier but it also leaks secrets stored in metadata fields without any disclosure to the user. And this is in the single-user setting! There are vastly more security considerations as soon as a common "workspace" is involved.

[1] https://backbone.dev/

Re: Bitwarden: Free, open-source password manager

#135

I'm surprised no one's mentioned Padloc [1] yet. It's end-to-end encrypted, open source, easy to self host, and with a really UI + UX. I got all my family to use it and used it for a over a year, before eventually contributing actively to it. There's even a Tauri-based desktop app! Full disclosure: I have "contributing power" but do not make money from its sales or anything like it. [1]: https://padloc.app

Does it have WiFi sync? Seems like all the big players are committed to removing that, and that’s like the one single thing I want from a password manager: don’t store all my passwords in the cloud.

Check out CodeBook, it’s not open source but it’s a 1-time fee for device type (windows, Mac, iPhone, android), up to five installs. I’ve purchased for phone, MacBook, and windows pc and been using for the past 5+ years and am satisfied with it. The product itself isn’t open source but the company which makes it does develop an open source module/extension of SQLite for encrypted database. All syncing is manually done, across Wi-Fi or it can use Dropbox or google drive.

https://www.zetetic.net/codebook/

Re: Bitwarden: Free, open-source password manager

#137
I was about to try this out a while ago, but I installed Syncthing on my machines at around the same time. Keepass db + syncthing works astonishingly well, and the Android keepass client works great for me. I prefer the simplicity of this setup to yet another web service, especially if I'm going to self-host.

Re: Bitwarden: Free, open-source password manager

#138
post #50

Since nobody has mentioned: iOS 17 and macOS Sonoma brings family sharing to password managerm. Sonoma also brings support for using native passwordsl manager in Chrome using a chrome extension developed by Apple. For families who are hooked into Apple's ecosystem, this can provide a much better password management than third party tools.

Then your iCloud account gets banned and you lose everything.

Should’ve had better backups.

Re: Bitwarden: Free, open-source password manager

#140
post #54

Earlier quoted context omitted.

The new CEO concerns me. I didn't know who the founder was but I always had the impression it was a lone hacker. They passed the baton. Now it's some old Web 1.0 guy who was the CEO of eFax in the 90's. That's not the type of service I thought I was using. I looked up their headquarters in Santa Barbara and it's a co-working space. That doesn't sound very secure. Though that could be their corp address and they're hi…

The "new" CEO has been at the helm since 2019. Long before the mentioned funding in 2022. We don't really have a HQ since we are a 100% remote company. Source: I am the Bitwarden founder.

Thanks, awesome product! Happy user for many years.
Post reply on HN