Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden Acquires Passwordless.dev

bitwarden.com

Post reply on HN
Print view View original

21–30 of 399 posts

Re: Bitwarden Acquires Passwordless.dev

#24

Post by rgrmrts »

Jsharm wrote: post #10

Wow this is really cool. I just tried the example on the homepage, that's magic! No email, username or password. Can someone explain what is happening?

A new private-public key pair is generated, the public key is your user identifier (sort of), and the private key is stored on your device (browser or phone). You're logging in by proving you have the private key for the associated public key. I think the device may also be storing a mapping from key to service or something? Not sure.

Please correct me if I'm wrong on any of this.

Re: Bitwarden Acquires Passwordless.dev

#25

Post by coffeeri »

wurstehans wrote: post #22

Sounds a bit worrisome to me… Maybe I'm just overly cautious, but i guess it's time to look around again. Has anybody checked out APass yet? https://github.com/balu-/a-pass

Without looking close at your suggestion, you might want to look at passage [0] by the creator of age. It's a fork of pass [1] using age as the backend.

[0] https://github.com/FiloSottile/passage [1] https://passwordstore.org

Re: Bitwarden Acquires Passwordless.dev

#26

Post by yshavit »

Jack5500 wrote: post #5

Slightly offtopic, but I really find the Bitwarden Clients to be lacking in the feature department. I switched to Bitwarden a few month ago and the client has evolved (for me) ever since. There are a few basic features missing, such as that if I search for something I wrote in the notes of password, that the client shows the according password. I get that the open-source model implies that everyone can contribute and…

I just switched password managers from LastPass, and Bitwarden's lack of multiple accounts on their browser plugin was a dealbreaker for me. Such a basic feature, especially if they want to get widespread adoption. Otherwise, anyone whose work uses Bitwarden basically can't also use it for their personal stuff without jumping through hoops.

Re: Bitwarden Acquires Passwordless.dev

#27

Post by qzx_pierri »

ohCh6zos wrote: post #12

I’m highly skeptical of Passkeys/Webauthn as it would seem to not have the same legal protections that a password has in the US. Maybe this is me becoming a conspiracy theorist.

I’m in the same boat. Using Passkeys gives the user less control. The last thing I need is another layer of complexity when dealing with credentials. This seems like a solution created for people too lazy to generate and track secure secrets (using a password manager).

It also seems like a way companies like Google would lock people into their browser.

Re: Bitwarden Acquires Passwordless.dev

#28

Post by Macha »

paulryanrogers wrote: post #18
AdmiralAsshat wrote: post #4

As a recent convert to Bitwarden from LastPass, I start to get a bit nervous when I see acquisitions happening. LastPass getting acquired was the beginning of the end for it, IMO, before stagnating into criminal negligence. Granted this is Bitwarden acquiring rather than being acquired, but I still worry it leads to a trend of building "portfolio value" rather than focusing on the product. I sincerely hope I'm wrong.

BitWarden is open source on both ends. So worst case one can self host then fork clients. (Server has already been reimplemented independently.)

So too have some clients (e.g. rbw CLI). So just need an independent browser extension and then my use of Bitwarden does not need Bitwarden LLC (and the browser extension is not great, so that's not a high bar)

Re: Bitwarden Acquires Passwordless.dev

#29

Post by seanw444 »

wurstehans wrote: post #22

Sounds a bit worrisome to me… Maybe I'm just overly cautious, but i guess it's time to look around again. Has anybody checked out APass yet? https://github.com/balu-/a-pass

For my personal passwords and general secure info (it can store notes, files, and TOTP as well), KeePass(XC/DX) has been my password manager of choice. Nothing leaves your device. If you want it to, that's considered out-of-scope, and you have to handle syncing yourself. Whether that be something like Nextcloud, or my personal favorite: Syncthing.

Re: Bitwarden Acquires Passwordless.dev

#30

Post by tapland »

yshavit wrote: post #26
Jack5500 wrote: post #5

Slightly offtopic, but I really find the Bitwarden Clients to be lacking in the feature department. I switched to Bitwarden a few month ago and the client has evolved (for me) ever since. There are a few basic features missing, such as that if I search for something I wrote in the notes of password, that the client shows the according password. I get that the open-source model implies that everyone can contribute and…

I just switched password managers from LastPass, and Bitwarden's lack of multiple accounts on their browser plugin was a dealbreaker for me. Such a basic feature, especially if they want to get widespread adoption. Otherwise, anyone whose work uses Bitwarden basically can't also use it for their personal stuff without jumping through hoops.

Aren’t you supposed to have your personal Bitwarden account and get work passwords shared to your account? I thought that’s how Bitwarden for organisations worked.
Post reply on HN