Vaultwarden is a very lean implementation of Bitwarden but if you want to look into an alternative to the Bitwarden ecosystem, I recommend - AliasVault https://github.com/aliasvault/aliasvault - check it out!
I Do Not Recommend Bitwarden
21–30 of 62 posts
Re: I Do Not Recommend Bitwarden
#22Ahahahah, I am enjoying the little turn-off-your-Javascript warning that comes back when you click on a link in a new tab from the page to something linked in the article. My tab's title: "Ask HN: How could I safely contact drug cartels?"
For those who were immediately curious;
https://news.ycombinator.com/item?id=36731320
Spoiler: That whole thread is probably an excellent troll ("I might make this a startup"), except a ton of mid(dle brow) people had to ruin it.
Re: I Do Not Recommend Bitwarden
#23I'm a free Bitwarden user, I don't plan to self-host stuff, and... honestly I have no idea what this person is going on about. And "Aside from the aforementioned technical details, Bitwarden is (and has always been) one of the subjectively worst applications on my phones and my desktop in terms of user interface. " Really!!? How many apps has this person used?
The Bitwarden UI/X changed relatively recently so that detail view is the default click action now, rather than fill. I don't think I've ever actually used the detail view, because the edit view does the same job.
Never mind that 'fill' is 100x more common as an action. So why on earth is that not the default? It is indeed an unfathomably stupid UI decision, beyond what I regularly see in other apps that I use.
I still hate it to this day, and find it incredibly clunky. In fact that alone is kind of making me want to give in and just use Apple.
Re: I Do Not Recommend Bitwarden
#24I use pass[0], and it works well for me. It's secured by PGP and passwords are shared between devices using git. [0] https://www.passwordstore.org/
It's the first time I see someone else with the same setup.
Each time I read about the monstrosity of an external company owning all my passwords, taking into account all the leaks and supply chain attacks these days... I feel good "self hosting" what could be the most sensitive information that I have.
Re: I Do Not Recommend Bitwarden
#25Probably my biggest tech hill-i'll-die-on is: Password management involving a 3rd party is dumb and should never ever have been a thing. Before two parties had the secret (or something related to it) and now three parties have it and that's objectively worse -- even taking into account "the lazy user" or whatever. I know we're past that in a lot of places for a lot of people, but nope, my dad and his printed out shee…
Are you aware that the goal of these password managers is that they do not ever have your decrypted vault?
Re: I Do Not Recommend Bitwarden
#26Probably my biggest tech hill-i'll-die-on is: Password management involving a 3rd party is dumb and should never ever have been a thing. Before two parties had the secret (or something related to it) and now three parties have it and that's objectively worse -- even taking into account "the lazy user" or whatever. I know we're past that in a lot of places for a lot of people, but nope, my dad and his printed out shee…
But it's not that though. They're hosting an encrypted version that they don't have the keys for. They are doing the backend sync for you, and writing the clients that YOU run, that sync yuur passwords everywhere.
To suggest they have a copy of your passwords is to misunderstand what they're doing. It's the same as saying you host your Keypass on Dropbox so now Dropbox have a copy of your passwords/secrets.
The value they are providing is seamless sync between a huge range of platforms/devices and making it as frictionless as possible to entry your password when you need to (biometrics to unlock the vault, browser addons to seemlessly enter the passwords etc)
Your Dad has a single point of failure for all his accounts. That's not a win.
Re: I Do Not Recommend Bitwarden
#27I'm a free Bitwarden user, I don't plan to self-host stuff, and... honestly I have no idea what this person is going on about. And "Aside from the aforementioned technical details, Bitwarden is (and has always been) one of the subjectively worst applications on my phones and my desktop in terms of user interface. " Really!!? How many apps has this person used?
The Bitwarden UI/X changed relatively recently so that detail view is the default click action now, rather than fill. I don't think I've ever actually used the detail view, because the edit view does the same job. Never mind that 'fill' is 100x more common as an action. So why on earth is that not the default? It is indeed an unfathomably stupid UI decision, beyond what I regularly see in other apps that I use. I sti…
There's a setting to make the old behavior default.
Re: I Do Not Recommend Bitwarden
#28I agree that there are some goofy UX things. I don’t care about self-hosting. And the author goes to great care to write about every issue; then admits all software has issues and Bitwarden has fixed their issues as they come up.
Overall their actionable advice that different types of credentials might need different software is good.
The rest seems like ax grinding.
Re: I Do Not Recommend Bitwarden
#29As a tangent, this site will overwrite its and favicon if your browser changes tab to one of many random options, as well as showing an overlay highlighting the risk of keeping javascript enabled for once you're back.
I dug around and found them listed within the `kill.js` file[0]. It uses the visibilitychange[1] API and swaps it to one of the following:
Official Church of Scientology: Difficulties on the Job - Online Course
Ask HN: How could I safely contact drug cartels?
The internet used to be fun
am I boring - Google Search
what is punycode - Google Search
arguments for HN comment - Google Search
how to hack coworker's phone - Google Search
censorship on hacker news - Google Search
rust programming socks - Google Shopping
Adult entertainment clubs - Google Maps
Pick up lines suggestions - ChatGPT
Online debate argument suggestions - ChatGPT
The Flat Earth Society
Amazon.com: taylor swift merch
Amazon.com: waifu pillow
/adv/ - topple government - Advice - 4chan
r/wallstreetbets on Reddit
Infowars: There's a War on For Your Mind!
birds aren't real at DuckDuckGo
Lincoln MT Cabins For Sale - Zillow
The Anarchist Cookbook by William Powell | Goodreads
Fifty Shades of Grey | Netflix
jeff bezos nudes - Google Image Search
zuckerberg nudes - Google Image Search
bigfoot nudes - Google Image Search
Rick Astley - Never Gonna Give You Up - YouTube
Pennsylvania Bigfoot Conference - Channel 5 - YouTube
Linus goes into a real girl's bedroom - Linus Tech Tips - YouTube
MrBeast en Español - YouTube
FTX Cryptocurrency Exchange
[0] https://xn--gckvb8fzb.com/js/kill.js [1] https://developer.mozilla.org/en-US/docs/Web/API/Document/vi...
Re: I Do Not Recommend Bitwarden
#30Probably my biggest tech hill-i'll-die-on is: Password management involving a 3rd party is dumb and should never ever have been a thing. Before two parties had the secret (or something related to it) and now three parties have it and that's objectively worse -- even taking into account "the lazy user" or whatever. I know we're past that in a lot of places for a lot of people, but nope, my dad and his printed out shee…
KeePass is a great middle-ground, which I've been using for the last decade (at least). Storing the vault is on you, it just makes it easy to keep stuff organised.
I did this for years too until mobile devices became popular. I have ~4 mobile phones for various things (yes this isn't normal) and ~4 different computers/laptops I use. Trying to keep a Keypass in sync between them is a nightmare. A proper password manager (Bitwarden or other) removes all that hassle. I have fingerprint unlock on the the mobiles that support fingerprint, face unlock on the devices that support that etc. I have browser addons to make password entry quick and easy while remaining secure.
Once I moved to a password manager I realised how clunky and poor dragging a Keypass vault around was.