Live data from Hacker News

Get your passwords out of Bitwarden while you still can

osnews.com

31–40 of 203 posts

Re: Get your passwords out of Bitwarden while you still can

#31
I've been recommending Bitwarden for a few years now and have also been paying a yearly sub since 2022, as I always thought 10$ was a really good value.

But with all this stuff coming out, I'm holding off on recommending it anymore; at least until everything calms down and the new value proposition is fully laid out.

Like other folks have said, I don't think it's yet time to migrate. That being said, it doesn't hurt to do an encrypted export for backup purposes, start looking at alternatives, and reach out to people I know use Bitwarden to do the same.

Keeping an eye out on how this develops.

Re: Get your passwords out of Bitwarden while you still can

#32

Clients are OSS, I wonder why nobody did a Vaultwarden-style fork of them yet that would watch over upstream changes.

Until Bitwarden screws up it's going to be difficult for any fork to get much attention. If they do, that will the moment to launch a fork.

It's Bitwarden's game to lose. Forking is easy enough that there's no great need to pre-emptively fork.

Re: Get your passwords out of Bitwarden while you still can

#35
I'm taking a "wait and see" approach with Bitwarden. I've been a paying customer for a while, happy with it, and hoping the leadership changes won't be too user hostile. Still, a major reason I chose Bitwarden to begin with is they have a decent "Export" button, and all of this news reminded me that my offline backup of the vault was a few months old. Regardless of their product roadmap, they could have an incident tomorrow that keeps users away from their passwords -- offline backups are a good idea.

And Vaultwarden is nice. I've used it at work, hosted it myself, and as a user of the password manager I can say it's basically indistinguishable. But I don't really pay Bitwarden for a password manager -- I pay them for a secure sync of a password manager I can share with family members who can't figure out a VPN.

Re: Get your passwords out of Bitwarden while you still can

#37
post #19

I store my passwords using this: https://www.passwordstore.org/ It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.

I'm interested in this, what do you use to host the git repo? Just a private repo on something like github or your own server? How do you backup your private key?

Re: Get your passwords out of Bitwarden while you still can

#39
The original creator of Bitwarden still works there as a CTO. I am curious whether he has any failsafes/poison pills in his contract when he took VC money that allows him to fork the product and start over in the event that they decide they want to lock everything down.

Or did he sign all of those rights away when he took the $100M "fuck you" VC funding in 2022.

Post reply on HN