Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I Do Not Recommend Bitwarden

xn--gckvb8fzb.com

Post reply on HN
Print view View original

41–50 of 62 posts

Re: I Do Not Recommend Bitwarden

#41

Post by djyde »

muppetman wrote: post #12
pretzellogician wrote: post #5

I'm a free Bitwarden user, I don't plan to self-host stuff, and... honestly I have no idea what this person is going on about. And "Aside from the aforementioned technical details, Bitwarden is (and has always been) one of the subjectively worst applications on my phones and my desktop in terms of user interface. " Really!!? How many apps has this person used?

I love Bitwarden and use it every day, but I pretty much also agree with his post. I have Bitwarden for personal stuff and 1password for my, and the 1password experience is night and day better. It's just so good, it always works. Bitwarden sometimes (especially on Android) will just not autofill. On my PC sometimes it won't recognise the domain correctly even though I've got an entry set for "base domain" etc. I am…

The Bitwarden Chrome extension is really bad, which is also the reason I've never been able to switch from 1Password to Bitwarden.

Re: I Do Not Recommend Bitwarden

#43

Post by grebc »

muppetman wrote: post #12
pretzellogician wrote: post #5

I'm a free Bitwarden user, I don't plan to self-host stuff, and... honestly I have no idea what this person is going on about. And "Aside from the aforementioned technical details, Bitwarden is (and has always been) one of the subjectively worst applications on my phones and my desktop in terms of user interface. " Really!!? How many apps has this person used?

I love Bitwarden and use it every day, but I pretty much also agree with his post. I have Bitwarden for personal stuff and 1password for my, and the 1password experience is night and day better. It's just so good, it always works. Bitwarden sometimes (especially on Android) will just not autofill. On my PC sometimes it won't recognise the domain correctly even though I've got an entry set for "base domain" etc. I am…

1Password user here and it regularly shits the bed with autofill or recognising a domain.

Not to mention the absolutely garbage performance of the Windows desktop app.

Re: I Do Not Recommend Bitwarden

#44

Post by SamDc73 »

Flockster wrote: post #36
SamDc73 wrote: post #19

Bitwarden have in my opinion is one of the BEST business models a user can ask for. It's open-source, and I can self-host (100% free) and the free version is really, really good too, and then a premium version is $20/year which is very reasonably priced. Also for cloud hosted password manager, you're always going to have attacks no matter what, but at least they are transparent about it .. (unlike say LastPass, Norto…

As a now almost 15 year long user (crazy to think about) of 1password I am unsure what attacks do you mean? Did passwords get lost and it was not disclosed or what did you mean by the lack of transparency?

That is my bad; I was thinking of LastPass[1] where it took them months to fully disclose and explain a very serious breach of data.

1Password seem to have a good transparency track record (I edited the original comment)

[1] https://news.ycombinator.com/item?id=34097142

Re: I Do Not Recommend Bitwarden

#45

Post by baal80spam »

muppetman wrote: post #30
baal80spam wrote: post #20

Earlier quoted context omitted.

KeePass is a great middle-ground, which I've been using for the last decade (at least). Storing the vault is on you, it just makes it easy to keep stuff organised.

I did this for years too until mobile devices became popular. I have ~4 mobile phones for various things (yes this isn't normal) and ~4 different computers/laptops I use. Trying to keep a Keypass in sync between them is a nightmare. A proper password manager (Bitwarden or other) removes all that hassle. I have fingerprint unlock on the the mobiles that support fingerprint, face unlock on the devices that support that…

Fair enough. I don't use it on mobile (I try to do the fewest things possible on mobile so I manage without a password manager).

Re: I Do Not Recommend Bitwarden

#46

Post by muppetman »

djyde wrote: post #41
muppetman wrote: post #12

Earlier quoted context omitted.

I love Bitwarden and use it every day, but I pretty much also agree with his post. I have Bitwarden for personal stuff and 1password for my, and the 1password experience is night and day better. It's just so good, it always works. Bitwarden sometimes (especially on Android) will just not autofill. On my PC sometimes it won't recognise the domain correctly even though I've got an entry set for "base domain" etc. I am…

The Bitwarden Chrome extension is really bad, which is also the reason I've never been able to switch from 1Password to Bitwarden.

Yes, it's terrible. It's where I landed when I migrated from Keepass though so I've stuck with it.

Re: I Do Not Recommend Bitwarden

#47

Post by muppetman »

chrisandchris wrote: post #33
muppetman wrote: post #12

Earlier quoted context omitted.

I love Bitwarden and use it every day, but I pretty much also agree with his post. I have Bitwarden for personal stuff and 1password for my, and the 1password experience is night and day better. It's just so good, it always works. Bitwarden sometimes (especially on Android) will just not autofill. On my PC sometimes it won't recognise the domain correctly even though I've got an entry set for "base domain" etc. I am…

And I could tell you the opposite about 1Password. About half of the time, the extension does not realize ond which domain it is and autofill is broken. To each their own (bugs).

Fair point - I've had no issue with it but I certainly don't use it as much as I do Bitwarden.

Re: I Do Not Recommend Bitwarden

#48

Post by mbirth »

baal80spam wrote: post #20
jrm4 wrote: post #8

Probably my biggest tech hill-i'll-die-on is: Password management involving a 3rd party is dumb and should never ever have been a thing. Before two parties had the secret (or something related to it) and now three parties have it and that's objectively worse -- even taking into account "the lazy user" or whatever. I know we're past that in a lot of places for a lot of people, but nope, my dad and his printed out shee…

KeePass is a great middle-ground, which I've been using for the last decade (at least). Storing the vault is on you, it just makes it easy to keep stuff organised.

This! I’m using Strongbox on macOS and iOS and it’s just sooo good. It integrates with Apple’s AutoFill API and feels native - just like Apple’s Passwords app. But all the entries are in a KeePass database which I can sync via SyncThing, iCloud, Dropbox, whatever. And if the application should fail, I can use any other KeePass-compatible app or KeePass itself to get to my secrets.

Re: I Do Not Recommend Bitwarden

#49

Post by ZPrimed »

AntonyGarand wrote: post #29

As a tangent, this site will overwrite its and favicon if your browser changes tab to one of many random options, as well as showing an overlay highlighting the risk of keeping javascript enabled for once you're back. I dug around and found them listed within the `kill.js` file[0]. It uses the visibilitychange[1] API and swaps it to one of the following: Official Church of Scientology: Difficulties on the Job - Onlin…

author of the site appears to be an anti-JS fringe person, and that's their method of "protest."

If you switch away and then come back to the tab, they have a popover explaining all of this.

I just went and disabled JS for their silly site.

Re: I Do Not Recommend Bitwarden

#50

Post by sshine »

I switched to self-hosted Vaultwarden a couple of years ago because of all the bad choices of Mozilla (I was using Firefox Sync and wanted something else badly). Sadly, Bitwarden's browser clients are antiquated (they don't auto-generate and save passwords as I sign up, I kind of have to create them manually ahead of time, and if anything botches in the signup, e.g. a server-side password validation rule), I now have a password that won't work, I have to find the entry in the database and update it to something else... geez, if it would just automatically overwrite the password every time I submit with a new one.

Vaultwarden's great, but the inferior browser clients just don't make up for it.

I'm back on Firefox Sync until I find something that's technically sufficient.

Post reply on HN