The quiet renovation at Bitwarden • Hacker News Board

Re: The quiet renovation at Bitwarden

#291

Post by radley » Tue, May 19, 2026, 6:53 AM UTC

Refreeze5224 wrote: post #203

xweb wrote: post #12

Thank you for this post/link. I have been side eyeing Bitwarden since they started ensh*ttifying the desktop UX last year to make it more like everything else and take up too much space. It had been working perfectly well for browser autofill - super fast and staying out of the way. Now it is bloated white space, slow, standardized UX elements like any SaaS built by AI. Will check out Vaultwarden, Proton Pass, Keepas…

As mentioned, enshittifying doesn't mean "make shitty" or "make worse". It's a specific exploitative company MO, like taking a product like Bitwarden and the goodwill it's generated with open source contributions, free plans, etc., and exploiting that trust by selling it to private equity, unbeknownst to the users, in order to squeeze the most out of it they can and then scrap it.

I'm pretty sure enshittification applies to other methods. Adding ads to smart devices after purchase is a very common example.

Re: The quiet renovation at Bitwarden

#292

Post by red369 » Tue, May 19, 2026, 6:59 AM UTC

RyJones wrote: post #51

nemomarx wrote: post #42

Earlier quoted context omitted.

Out of interest, where are you moving?

Apple's passwords app. It's what I use almost everywhere. I use 1password for work but I'd prefer not to mix work and personal life.

I have been considering this since Apple Passwords implemented a way to export. I've just seen that the iPhone Passwords app has an export to another app you have installed on your phone, but I previously tested the export from Safari method.

I realise that this is moving even more of my eggs into Apple's basket, and even further from self-reliance towards convenience, but today it doesn't seem significantly worse to just trust Apple with this, than Bitwarden.

But isn't it a pain to use those passwords on any other non-Apple device? Am I missing something, or is that just not an issue for your use-case? Ah! I've just learned/relearned about iCloud Passwords through iCloud for Windows, but nothing for Linux?

Re: The quiet renovation at Bitwarden

#293

Post by 4k93n2 » Tue, May 19, 2026, 7:02 AM UTC

varbhat wrote: post #78

I have moved to KeepassXC[1] on my desktop from Bitwarden. On phone, I use KeepassDX[2] which is Android client compatible with KeepassXC. On browser, I use KeepassXC Browser extension which connects with the desktop client. Since KeepassXC operates on a single file, you can use any Filesystem syncing tool to sync that file between devices or to store it in the cloud. I am really happy with the move. [1]: https://kee…

im using pretty much the same setup myself

just to mention an alternative method for anyone that doesnt know: keepass also has a feature called 'autotype' where the desktop program can send keystrokes to fill in password fields

the benefit of this over the browser extension is that there is no connection between your browser and your keepass vault.

its also handy for filling in passwords in desktop programs or even a terminal

one downside is that you wont be able to have passwords automatically filled in as youre browsing. you need to press a hotkey, but i would consider this to be more of a good security feature to cut out any chance of your browser autofilling any hidden password fields

there is still a browser extension that i use that adds the url to the titlebar of the browser, which makes it easier for the autotype dialog to show the correct logins from your vault

https://addons.mozilla.org/en-GB/firefox/addon/add-url-to-wi...

Re: The quiet renovation at Bitwarden

#294

Post by flanqueue » Tue, May 19, 2026, 7:08 AM UTC

TheCapeGreek wrote: post #287

There is one underrated feature that I switched to Bitwarden for , away from KeePass: the emergency contact access. You can designate contacts that can request access to your account. If you don't deny the request within a time frame, they are granted access. So much of our lives is now digital. Important accounts of all kinds, banking, etc. Waiting on several giant corps to grant your loved ones access after they go…

[dead]

Re: The quiet renovation at Bitwarden

#295

Post by dpacmittal » Tue, May 19, 2026, 7:10 AM UTC

kjuulh wrote: post #205

At this point it is too high of a risk to store my password elsewhere. I've been screwed over by dashlane, lastpass, potentially bitwarden now, I am with 1password now, but I've had my passwords in all these places, and I've had to change them each time, probably missing a few. I like 1password, it is by far the highest quality product I've used in this category. I moved from BitWarden back then because their browser…

For the same reasons, I imported all my passwords to Firefox and I'm satisfied with it. I have the option to self host if I don't trust Mozilla

Re: The quiet renovation at Bitwarden

#296

Post by baal80spam » Tue, May 19, 2026, 7:16 AM UTC

lanfeust6 wrote: post #257

thewebguyd wrote: post #211

Earlier quoted context omitted.

Keepass has been my go to since forever, highly recommend. I never jumped on the SaaS password manager train when they started coming out, always just kept it local. There were times I thought I was missing out on some convenience but I'm glad I never moved. Depending on your threat model, you can even just keep the .kdbx in cloud storage somewhere and point your keepass client to that. I'd recommend using a keyfile…

Is there reasonably priced cloud storage for this use-case? Their offerings are usually for several gigs of data, a kdbx is minuscule

In theory, you can just use a public (free) github repo for this.

Re: The quiet renovation at Bitwarden

#297

Post by baal80spam » Tue, May 19, 2026, 7:22 AM UTC

4k93n2 wrote: post #293

varbhat wrote: post #78

I have moved to KeepassXC[1] on my desktop from Bitwarden. On phone, I use KeepassDX[2] which is Android client compatible with KeepassXC. On browser, I use KeepassXC Browser extension which connects with the desktop client. Since KeepassXC operates on a single file, you can use any Filesystem syncing tool to sync that file between devices or to store it in the cloud. I am really happy with the move. [1]: https://kee…

im using pretty much the same setup myself just to mention an alternative method for anyone that doesnt know: keepass also has a feature called 'autotype' where the desktop program can send keystrokes to fill in password fields the benefit of this over the browser extension is that there is no connection between your browser and your keepass vault. its also handy for filling in passwords in desktop programs or even a…

That's how I use it. The less browser extensions, the better.

Re: The quiet renovation at Bitwarden

#298

Post by baal80spam » Tue, May 19, 2026, 7:24 AM UTC

dangus wrote: post #132

varbhat wrote: post #78

I have moved to KeepassXC[1] on my desktop from Bitwarden. On phone, I use KeepassDX[2] which is Android client compatible with KeepassXC. On browser, I use KeepassXC Browser extension which connects with the desktop client. Since KeepassXC operates on a single file, you can use any Filesystem syncing tool to sync that file between devices or to store it in the cloud. I am really happy with the move. [1]: https://kee…

KeePass is such a backwards step in usability and features that I don’t even consider it a competitor. The whole reason I moved to 1Password was to get away from how easy it was to accidentally lose data with the KeePass clients. For example, one client I used had a temporary bug that just lost the notes field entirely. It was quickly fixed but it still affected me. I’m currently using 1Password, which I still think…

You are right that 1Password is probably the best overall product in this space. It's non-free though, which for me is a deal breaker.

Re: The quiet renovation at Bitwarden

#299

Post by baal80spam » Tue, May 19, 2026, 7:38 AM UTC

vitally3643 wrote: post #108

jillesvangurp wrote: post #84

I got my parents using bitwarden a few years ago. This was a massive improvement over them writing passwords in a little notebook in a drawer (yes, really!). But Keepass is a bridge too far for them. I'm not that enthusiastic about it myself to be honest. The UX is a bit meh (for the clients/extensions I've tried) and file syncing and handling is not something I can in good conscience push to a non technical user. It…

Passwords in a notebook are arguably the most secure option. The notebook exists in exactly one place, behind locked doors, and cannot be leaked or hacked externally. Notionally a password manager is more secure, but is there anything stopping Bitwarden from updating the app to silently send your master password up to the mothership and selling your unencrypted vault? Even supposing they stay open source and get caug…

> Passwords in a notebook are arguably the most secure option.

Definitely not the most secure option, as it breaks 3-2-1 backup rule.

Re: The quiet renovation at Bitwarden

#300

Post by borborigmus » Tue, May 19, 2026, 8:15 AM UTC

There seems to be a gap in the market for a Vaultwarden compatible iOS client, if this is the start of enshitification.

I’ve self-hosted Vaultwarden in the past and I’m planning to do it again. The lack of an iOS client is the only thing making me explore alternative solutions altogether.