Live data from Hacker News

Get your passwords out of Bitwarden while you still can

osnews.com

41–50 of 203 posts

Re: Get your passwords out of Bitwarden while you still can

#41
So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal.

Is it because everybody else is swapping between several different computers, and you need the synchronization?

I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB stick in my pocket.

Re: Get your passwords out of Bitwarden while you still can

#42
post #31

I've been recommending Bitwarden for a few years now and have also been paying a yearly sub since 2022, as I always thought 10$ was a really good value. But with all this stuff coming out, I'm holding off on recommending it anymore; at least until everything calms down and the new value proposition is fully laid out. Like other folks have said, I don't think it's yet time to migrate. That being said, it doesn't hurt…

Agreed. I will continue using it as it currently fulfills my needs. But I’m not going to shout it at everybody I catch not using a password manager anymore. I’m just not willing to take responsibility for the changes they may make in the near future.

As an aside, since it seems like they’re trying to make money: The aforementioned enthusiasm has gotten it adopted at a workplace of mine. The experience hasn’t been good, so no recommendation here either.

Their moat was being a trusted name in FOSS and it’s a bit sad to see them going in the direction of abandoning it.

But somebody else will probably step up and build on the ruins, like vaultwarden already has. That’s the beauty of choosing FOSS in the first place.

Re: Get your passwords out of Bitwarden while you still can

#43
post #22

Earlier quoted context omitted.

A bad idea for you. My non-technical family members can barely use 1Password and it is the easiest of the lot. The idea you promote is just not realistic.

Not really. That something is convenient doesn't mean that it's a good idea. It's always a matter of convenience vs security.

Its a catch 22, with password requirements getting crazy its hard to remember them. At the same time storing the passwords with a password manager means you are entrusting them for your identity. For the first party sites the passwords are hashed, however for these password manager sites they are at the most encrypted with the encryption keys that the third party already has. This essentially means a rouge password manager or rouge individual in password manager service can run away with your plaintext passwords on scale

Re: Get your passwords out of Bitwarden while you still can

#44
post #22

Earlier quoted context omitted.

A bad idea for you. My non-technical family members can barely use 1Password and it is the easiest of the lot. The idea you promote is just not realistic.

Not really. That something is convenient doesn't mean that it's a good idea. It's always a matter of convenience vs security.

This frames the only options as mediocre and better, when the reality is likely the third, most common, and worst option: nothing.

Re: Get your passwords out of Bitwarden while you still can

#46
post #19

I store my passwords using this: https://www.passwordstore.org/ It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.

I tried using pass once. I like that it follows the Unix philosophy, and I want to like it, but the fact that all of your account names are visible in the clear is a deal breaker for me.

Re: Get your passwords out of Bitwarden while you still can

#48
This is an incredible overraction over a minor change that did not even happen. You can still find "Always free" in the pricing line of the very same page everyone keeps linking as proof https://bitwarden.com/products/personal/#whats-the-differenc...

Edit: it actually disappeared for some time but they put it back on May 18

snapshot from May 15: https://web.archive.org/web/20260515190646/https://bitwarden...

snapshot from May 18: https://web.archive.org/web/20260518183728/https://bitwarden...

Re: Get your passwords out of Bitwarden while you still can

#49
post #45

I switched to Apple Passwords this week. Really good passkey support, 2FA support, best iOS integration. You can even share passwords with others. Sadly no first party cli support. If you only use Apple devices, it’s really solid.

"If you only use Apple devices, it’s really solid."

It's not a good idea to become dependent on a single corporation's products.

Re: Get your passwords out of Bitwarden while you still can

#50
post #45

I switched to Apple Passwords this week. Really good passkey support, 2FA support, best iOS integration. You can even share passwords with others. Sadly no first party cli support. If you only use Apple devices, it’s really solid.

Surely they have their reasons, but if they made Linux support work I suspect a lot of the dev community would jump. This household certainly would.
Post reply on HN