Bitwarden Acquires Passwordless.dev

Post by PhilippGille » Wed, Jan 18, 2023, 11:15 PM UTC

kjfarm wrote: post #48

AdmiralAsshat wrote: post #4

As a recent convert to Bitwarden from LastPass, I start to get a bit nervous when I see acquisitions happening. LastPass getting acquired was the beginning of the end for it, IMO, before stagnating into criminal negligence. Granted this is Bitwarden acquiring rather than being acquired, but I still worry it leads to a trend of building "portfolio value" rather than focusing on the product. I sincerely hope I'm wrong.

A good note for bitwarden is that it has a self hosting open source version, vaultwarden that is easy to switch to: https://github.com/dani-garcia/vaultwarden I see this as downside protection, as I can quickly migrate if I disagree with bitwarden's direction with minimal changes to my clients. I do worry about VC pressure on Bitwarden for hypergrowth. However in my personal opinion, the benefits outweigh the cons (f…

Post by fluidcruft » Wed, Jan 18, 2023, 11:30 PM UTC

manmal wrote: post #165

obblekk wrote: post #68

I really dislike the idea of giving complete access to my digital life to any company, particularly one that needs to grow quickly. The tech for password vaults is so simple, I use keepass + icloud syncing and get free end-to-end encrypted password syncing, without sharing any data with anyone. Outlined in more detail here: https://magoop.substack.com/p/how-to-manage-500-passwords-se...

Services like 1Password are often more secure than your solution because they need to harden vaults against full leaks. In the case of 1Password, a secret key in addition to the password ensures that brute forcing is (at the moment) not feasible, even if your password is really crappy.

Post by fluidcruft » Wed, Jan 18, 2023, 11:39 PM UTC

hn_throwaway_99 wrote: post #214

princevegeta89 wrote: post #189

Earlier quoted context omitted.

Same was said about LastPass many times and look at what happened, everything turns out to be a false promise.

That's not a fair comparison. The differences in LP and 1P encryption approaches have been well known for years, and they are fundamentally different. Now, while 1P encrypted vaults are not brute-forceable the way LP's are, that doesn't mean it's impossible to hack 1P (e.g. malicious code injection in any of their apps or plugins), but I don't like the "everything turns out to be a false promise" broad-brushing when…

Post by berniedurfee » Wed, Jan 18, 2023, 11:42 PM UTC

bsg75 wrote: post #143

mbesto wrote: post #134

Earlier quoted context omitted.

> VC funds and acquisitions are rarely good for users Where does this sentiment come from? I know very few applications I use that are VC funded or haven't gone through acquisitions...

It comes from a concern that VC backed investments demand a constant level of revenue growth, causing a company to add features or integrations that do not improve the base product. Organic growth is usually insufficient for stockholders, whose demands become a priority over stakeholders. If the user base does not increase at some rate determined by the investor, then growth comes in the form of advertising, partners…

Post by hardwaresofton » Thu, Jan 19, 2023, 12:00 AM UTC

shp0ngle wrote: post #292

gagabity wrote: post #13

Earlier quoted context omitted.

Also Bitwarden recently raised 100M from VC so yeah, the clock is ticking now.

Ugh. I JUST migrated to Bitwarden. VCs ruin everything.