Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Get your passwords out of Bitwarden while you still can

osnews.com

Post reply on HN
Print view View original

11–20 of 203 posts

Re: Get your passwords out of Bitwarden while you still can

#11

Post by MostlyStable »

While I'm not _happy_ about the messaging changes, those alone are not enough to do more than start paying closer attention. I highly, highly doubt that vault export would be the first meaningful feature change, and so I think there will be stronger signals of actual issues before then.

As I understand it, so far the only actual change is an announced increase in prices. Obviously, from the consumer perspective, cheaper is better, but this is a product where I think that a subscription plan makes sense (and the free tier, for now, still exists), and so I'm not going to get mad about price changes. Competitors exist and one doesn't think the new price is worth it, then switch to one of them (using the very-much-still-available vault export).

I don't think the warning is crazy or anything, but in my personal opinion it's a little stronger/earlier than is warranted and the current appropriate response is careful watching.

Re: Get your passwords out of Bitwarden while you still can

#13

Post by pattilupone »

WOW. Quietly editing the 4-year-old blog post is super slimy, holy crap. Also seems like since this story was published, they edited the 4-year-old blog post again. The story points out

>But the explanatory paragraph at the bottom of the same post still says the old ones: Inclusion and Transparency. Crandell’s name is still on it. The post now contradicts itself, and nobody wrote a new one.

Looking at the post right now, they've corrected it to Innovation and Trust.

Re: Get your passwords out of Bitwarden while you still can

#14

Post by cjwoodall »

I wish companies that offer such a core technology and what not were at times entered into a public trust, similar to how some public lands are managed, that would protect them from private equity takeovers; I know it defeats the purpose of the companies in the first place (making money), and it probably would backfire in myriad worse ways than the problems it might solve... But I do think there are many options for how products, services and what not can be structured that give the people who maintain them what they need to thrive; without mining the users for money.

Overly idealistic thinking, maybe... but still thinking.

Re: Get your passwords out of Bitwarden while you still can

#15

Post by MostlyStable »

kpozin wrote: post #8
eleventen wrote: post #7

Earlier quoted context omitted.

Name one major password manager that blocks or paywalls export.

- Authy - Google Authenticator

Google Authenticator has an export-as-QR-code function that several other authenticator apps can parse. Is it the best/most convenient implementation? Obviously not, but you can absolutely export the codes.

Re: Get your passwords out of Bitwarden while you still can

#16

Post by subhobroto »

poisonborz wrote: post #12

Clients are OSS, I wonder why nobody did a Vaultwarden-style fork of them yet that would watch over upstream changes.

Vaultwarden is a very lean implementation of Bitwarden but if you want to look into an alternative to the Bitwarden ecosystem, I recommend - AliasVault https://github.com/aliasvault/aliasvault - check it out!

Re: Get your passwords out of Bitwarden while you still can

#17

Post by eleventen »

kpozin wrote: post #8
eleventen wrote: post #7

Earlier quoted context omitted.

Name one major password manager that blocks or paywalls export.

- Authy - Google Authenticator

Not password managers of course, but thanks for reminding me that I should figure out how to ditch Authy.

https://github.com/BrenoFariasdaSilva/Authy-iOS-MiTM is going to be my project for the afternoon.

Re: Get your passwords out of Bitwarden while you still can

#18

Post by subhobroto »

I'm a huge fan of AliasVault https://github.com/aliasvault/aliasvault - the author is responsive, receptive. The whole ecosystem is opensource.

Bitwarden/Vaultwarden had a good run but if someone's going to self-host Vaultwarden, I would encourage people to look into AliasVault instead. It's a complete opensource ecosystem.

Re: Get your passwords out of Bitwarden while you still can

#19

Post by cjs_ac »

I store my passwords using this: https://www.passwordstore.org/

It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.

Re: Get your passwords out of Bitwarden while you still can

#20

Post by throwaway85825 »

cjwoodall wrote: post #14

I wish companies that offer such a core technology and what not were at times entered into a public trust, similar to how some public lands are managed, that would protect them from private equity takeovers; I know it defeats the purpose of the companies in the first place (making money), and it probably would backfire in myriad worse ways than the problems it might solve... But I do think there are many options for…

Public management exists for natural monopolies where no market competition is feasible. The role of the public entities is to protect competition. In this case that would be mandating import/export interoperability.
Post reply on HN