Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden: Free, open-source password manager

bitwarden.com

Post reply on HN
Print view View original

201–210 of 242 posts

Re: Bitwarden: Free, open-source password manager

#201

Post by enobrev »

jillesvangurp wrote: post #69
skrebbel wrote: post #4

Earlier quoted context omitted.

I just switched to it from LastPass which, well, has even worse UX in my opinion. It's an extremely low bar to clear and I agree Bitwarden is quirky too, but for me it's still firmly been an upgrade. The only thing I miss is an "add to bitwarden?" dialog when I sign up somewhere. Their docs say it exists but I've never managed to get it to appear :-)

That's because web developers are not great at sticking to conventions and standards for this stuff. Product owners and UX designers seem to ignore aligning their signup and signin UX with obvious requirements for enabling people to use a password manager. If they'd make this a hard requirement, it would happen. It's not that hard even; we did that for our login form. Works great with Bitwarden. And on mobile too. Bu…

> Splitting the email and password form across two screens.

Just wanted to note that Google handles this right, which I've always appreciated.

They have two-screen login, and if you use a password manager, the password is prefilled when the second screen loads.

I assume the two-screen login is to ensure the name is valid before asking for a password. Without the clunkiness of doing it "onBlur".

Re: Bitwarden: Free, open-source password manager

#203

Post by dmm »

jillesvangurp wrote: post #69
skrebbel wrote: post #4

Earlier quoted context omitted.

I just switched to it from LastPass which, well, has even worse UX in my opinion. It's an extremely low bar to clear and I agree Bitwarden is quirky too, but for me it's still firmly been an upgrade. The only thing I miss is an "add to bitwarden?" dialog when I sign up somewhere. Their docs say it exists but I've never managed to get it to appear :-)

That's because web developers are not great at sticking to conventions and standards for this stuff. Product owners and UX designers seem to ignore aligning their signup and signin UX with obvious requirements for enabling people to use a password manager. If they'd make this a hard requirement, it would happen. It's not that hard even; we did that for our login form. Works great with Bitwarden. And on mobile too. Bu…

> Splitting the email and password form across two screens.

This is done because it's an easier way to support both local login and SSO(like oauth or saml). By taking the username first you can determine whether to ask them for a password or send them to a sso provider.

It doesn't have to be implemented this way but it is seen as easier.

Re: Bitwarden: Free, open-source password manager

#204

Post by eaplmx »

phito wrote: post #132
shp0ngle wrote: post #127

I frankly thing password managers are the most stupid thing. We fake users inputing text to input boxes and spend crazy time figuring out how to do that and how to get around various sites trying to block that, so the site can still pretend it’s actual user inputting the password. Plus the manager needs to work around arbitrary password rules. Plus they usually don’t work at OS level; so you still need to remember th…

Password managers are the most stupid thing, really? What better alternative do you propose?

Web3 is the solution to all our problems!... obviously not

But something I've seen is that is making mainstream using private and public keys. We have Client certificates but those are hard to create and use, and not really compatible with mobile.

I think a good workflow will be something similar to connecting to SSH, instead of a static password you sign a challenge with your key pair.

I have a few weeks thinking of replacing the social login (FB, Twt, OAuth) with wallet login https://github.com/amaurym/login-with-metamask-demo

Re: Bitwarden: Free, open-source password manager

#205

Post by CrendKing »

ghosty141 wrote: post #171
k8sToGo wrote: post #21

Earlier quoted context omitted.

It is funny, because to me "only a file you have to sync (and backup)" sounds more like an advantage than setting up an entire server environment just so you can access your passwords.

Meh, heavily depends on your setup. The lack of good apps on mobile devices that integrate with their respective OS (iOS/android) is a bit of a problem. It's also 3rd party apps (some closed source) and not official ones which is its own problem (-> trust). Apart from that bitwarden is just wayyy easier, you simply tell the (official) app the URL to your vault and it's basically good to go. You don't have to worry ab…

> It's also 3rd party apps (some closed source) and not official ones which is its own problem (-> trust)

Isn't the self-host server (Vaultwarden) also 3rd party?

Re: Bitwarden: Free, open-source password manager

#206

Post by themeiguoren »

antihero wrote: post #195

This looks lovely, I'm pretty happy with 1Password, are there any compelling reasons to take the effort to switch?

Bitwarden is free, 1password for yourself costs $36/yr. That was my reason for using it - I try to avoid subscriptions like the plague.

Re: Bitwarden: Free, open-source password manager

#207

Post by wartijn_ »

edoceo wrote: post #152
vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

This could be an HN Poll? Also, we use Passbolt.

I created a poll for this. It's about personal use instead of use in companies though. https://news.ycombinator.com/item?id=29994703

Re: Bitwarden: Free, open-source password manager

#209

Post by Emptysister »

vgalin wrote: post #37

> The most trusted open source password manager for business I expected a blog article with actual feedbacks from companies and data, but ended up on bitwarden.com main page. Baseless claims can be quite common when it comes to marketing, but I'm genuinely curious: which password manager is used in your workplace, if any? I've personally never seen in my (for now short) career anything else than Keepass.

keepass and vaultwarden (bitwarden-api compatible server)

Re: Bitwarden: Free, open-source password manager

#210

Post by wartijn_ »

toyg wrote: post #50
wartijn_ wrote: post #17

Earlier quoted context omitted.

> No idea why people still throw money at proprietary password managers. I've tried Bitwarden for a few days with their Firefox plug-in. During those few days there were multiple occasions were it would create a password for me, but wouldn't save the login. I switched to 1password and it is way better in letting you know if it saved a password or not. I also ran in to some other small issues with the Bitwarden ux tha…

The main difference seems to be that BitWarden is server software that added mobile, whereas 1Password is mobile software that added a server. So the former is pretty strong on the backend (robust API, can run your own, client-agnostic) whereas the latter works better on the client side, without the "glitching" that sadly is common on BW. I've been a BW user for years (relatively early adopter), and they are improvin…

I've heard a that 1Password looks Apple-focused before (Sometimes as a negative, sometimes as a positive), but I mainly use the Firefox plugin (in Linux) and it works great.
Post reply on HN