Live data from Hacker News

Bitwarden adds support for passkeys

bitwarden.com

31–40 of 172 posts

Re: Bitwarden adds support for passkeys

#31
post #2

Bitwarden is underrated. Passwords run everything in our digital life. I will gladly take a UI compromise here and there for more trustworthiness.

Why is it underrated? In my personal bubble everyone is using it. Most of them self-hosted. My hole family and some friends use my instance. Besides pass (low non tech approval factor) there is nothing that comes close.

Re: Bitwarden adds support for passkeys

#32

One of the nicest thing about bitwarden is the ability to selfhost it. I don't think there is anything like it. 1password seems to have the best UX in the field. But you always have to trust some company with the keys to your digital life. Self hosting password managers is not as big of a deal as it should be.

Do you get the same features self-hosting as you do paying for their cloud offering?

Re: Bitwarden adds support for passkeys

#33
What's the story with passkeys and broken/lost devices?

I'm a bit out of touch here, and I assume adding support to password managers like bitwardon mitigates this risk similar to using them to store MFA seeds, or apps like authy over Google authenticator

Re: Bitwarden adds support for passkeys

#34

What's the story with passkeys and broken/lost devices? I'm a bit out of touch here, and I assume adding support to password managers like bitwardon mitigates this risk similar to using them to store MFA seeds, or apps like authy over Google authenticator

You can still have a password, but think of it as a backup. Or you rely solely on the lost password process to reaccess your account.

Re: Bitwarden adds support for passkeys

#35
post #32

One of the nicest thing about bitwarden is the ability to selfhost it. I don't think there is anything like it. 1password seems to have the best UX in the field. But you always have to trust some company with the keys to your digital life. Self hosting password managers is not as big of a deal as it should be.

Do you get the same features self-hosting as you do paying for their cloud offering?

[deleted]

Re: Bitwarden adds support for passkeys

#36
post #31
post #2

Bitwarden is underrated. Passwords run everything in our digital life. I will gladly take a UI compromise here and there for more trustworthiness.

Why is it underrated? In my personal bubble everyone is using it. Most of them self-hosted. My hole family and some friends use my instance. Besides pass (low non tech approval factor) there is nothing that comes close.

Tends to be used by a tech audience, it's nowhere near as widely adopted as e.g. last pass for normal consumers.

Re: Bitwarden adds support for passkeys

#37
post #32

One of the nicest thing about bitwarden is the ability to selfhost it. I don't think there is anything like it. 1password seems to have the best UX in the field. But you always have to trust some company with the keys to your digital life. Self hosting password managers is not as big of a deal as it should be.

Do you get the same features self-hosting as you do paying for their cloud offering?

Some features require paying. For example: TOTP. But if you want just for passwords it is free.

Re: Bitwarden adds support for passkeys

#38

perhaps a better link? https://bitwarden.com/help/storing-passkeys/ Not sure if passkeys are supported on iOS or Android (only the browser extension is explicitly mentioned) and also they cannot be imported or exported according to the page.

I may be stupid, but I just cant get this to work. Ive tried in both Safari and Chrome.

Anyone have any luck so far?

Re: Bitwarden adds support for passkeys

#39
From the FAQ [1]:

> Q: Are stored passkeys included in Bitwarden imports and exports?

> A: Passkeys are not included in imports and exports.

I think it's the same for iCloud [2]. That is why I don't love it. I prefer a very long password, and Bitwarden "Device login" that will prompt in my iPhone that will require FaceID (So essentially I have bio login). And 2FA to lower hacking chances. I'm aware I'm still vulnerable to phishing but because there is no export, this is a marriage to Bitwarden. And as much as I love them... I'm not ready yet.

But essentially it's a certificate... so I wonder why no private key export? Maybe because current implementation uses some CA that binds you to the issuer?

[1] https://bitwarden.com/help/storing-passkeys/

[2] https://redd.it/143acl5

Re: Bitwarden adds support for passkeys

#40
post #32

Earlier quoted context omitted.

Do you get the same features self-hosting as you do paying for their cloud offering?

Some features require paying. For example: TOTP. But if you want just for passwords it is free.

You can use vaultwarden and get everything for free
Post reply on HN