Bitwarden Completes Third-Party Security Audit
blog.bitwarden.com
Bitwarden Completes Third-Party Security Audit
1–10 of 148 posts
Re: Bitwarden Completes Third-Party Security Audit
#2At the time of writing the link to actual report in the blog post does not work. Here is the correct link: https://cdn.bitwarden.com/misc/Bitwarden%20Security%20Assess...
Re: Bitwarden Completes Third-Party Security Audit
#3Love Bitwarden!
Re: Bitwarden Completes Third-Party Security Audit
#4isn't there still a lot more hardening things to do, like moving payment out from vault.bitwarden.com, so that this domain can have a stronger CSP policy?
In other news: my todo list now features an item to migrate lastpass -> bitwarden.
(I really love the effort here)
Re: Bitwarden Completes Third-Party Security Audit
#5Bitwarden is the password manager that got my to finally start using a password manager with it's combination of full open source and good UI. I love that they are this security focused as well.
Re: Bitwarden Completes Third-Party Security Audit
#6Currently using Bitwarden right now. Really good to see that the security assessment is relatively positive:
> All in all, while the client and backend code are vulnerable to some issues, all of the problems can be easily fixed without a lot of effort. In that sense, Cure53 believes these items of the Bitwarden scope to be fully capable of reaching the desired standards of security in a rather short time. To reiterate, the results of this autumn 2018 assessment are positive for the client and code.
Wondering how they will address the current cryptographic scheme though.
Re: Bitwarden Completes Third-Party Security Audit
#7Since Bitwarden added sub-domain support and fixed the speed-issues on large key-bases, I absolutely cannot live without Bitwarden it's been absolutely flawless.
Previously used Lastpass for 8 years.
So glad to see that it's security taken seriously by the developers!
Re: Bitwarden Completes Third-Party Security Audit
#8What are the pro/cons vs 1password?
Re: Bitwarden Completes Third-Party Security Audit
#9isn't there still a lot more hardening things to do, like moving payment out from vault.bitwarden.com, so that this domain can have a stronger CSP policy? In other news: my todo list now features an item to migrate lastpass -> bitwarden. (I really love the effort here)
The migration process is very painless [0]; it will take longer to switch your installed extensions on all your devices than to migrate your vault.
[0]: https://help.bitwarden.com/article/import-from-lastpass/
Re: Bitwarden Completes Third-Party Security Audit
#10isn't there still a lot more hardening things to do, like moving payment out from vault.bitwarden.com, so that this domain can have a stronger CSP policy? In other news: my todo list now features an item to migrate lastpass -> bitwarden. (I really love the effort here)
I mostly don't regret switching from LastPass to BitWarden. Migration of logins was pretty painless. My only issue is with Android/Firefox. (Desktop Firefox + BitWarden is excellent!) The current Firefox doesn't play well with the Android BitWarden app, so you have to use the Add-on. (At least, this has been my experience.) I've also frequently encountered an issue where the menu item in Firefox for BitWarden vanishes and I have to toggle the add-on to re-add it. Over the past four days, I haven't had the issue, so I'm hoping that it's resolved for good. I believe these issues will be resolved, and they are largely not the fault of the BitWarden team; more like the Android platform and the Firefox team getting caught up with the latest best practices. (I believe Firefox Nightly actually plays well with the app, and should not require the clunkier add-on.)