Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden – Open Source Password Manager

bitwarden.com

Post reply on HN
Print view View original

41–50 of 163 posts

Re: Bitwarden – Open Source Password Manager

#41

Post by jchw »

techsupporter wrote: post #32
ReverseCold wrote: post #17

Earlier quoted context omitted.

> I do not want my passwords on anybody’s servers. What about your own server? https://help.bitwarden.com/article/install-on-premise/

To me, this disqualifies it: > Each Bitwarden installation requires a unique installation id and installation key. If I’m self hosting, I want it to be independent of the code provider. It is bad enough, to me, that I have to pay a subscription fee to self-host “advanced” features like Yubikey auth. That’s the same kind of annoying that my own install still must link to their server that can die at any moment. Let me…

>That’s the same kind of annoying that my own install still must link to their server that can die at any moment.

With software like a password manager, if it's not actively maintained you're not going to want it anyway. So the same risk of the developers either discontinuing the product OR changing the pricing model applies just about evenly.

Being open source, at least the community can fork and maintain the software if the developers ever did throw in the towel, similar to TrueCrypt's forks.

Re: Bitwarden – Open Source Password Manager

#42

Post by jhabdas »

For years I've discouraged use of clouds for storing passwords. But because Bitwarden is FOSS software, encrypts data on the client, has good cross-platform support, and can operate if the company goes out of business they have won me over for the storage of secrets I'm not reserving for the sneakernet.

Re: Bitwarden – Open Source Password Manager

#43

Post by tylerhou »

ericseppanen wrote: post #40
mcfedr wrote: post #37

Earlier quoted context omitted.

It's open source, not to hard to remove this requirement

The time investment to prove or disprove this statement is more than I'm willing to give. I'd prefer to spend my time working with projects whose maintainers aren't hostile to my privacy.

> whose maintainers aren't hostile to my privacy

How are they violating your privacy?

Re: Bitwarden – Open Source Password Manager

#44

Post by jchw »

lhl wrote: post #39
keehun wrote: post #22

I really, really want to be a big fan of Bitwarden. I even used it for the past year and a half. However, the last time HN talked about Bitwarden 7 months ago, I listed some reasons[0] why Bitwarden still fell massively short of 1Password, and I feel that those three points have not been addressed (which I believe impacts the friction/convenience of using Bitwarden). My three points then were: 1. A stand-alone deskto…

I've been a 1Password user for about 10 years, but I never moved to 1Password 6, as I didn't want to sync my vault to their servers (even if it's E2E encrypted). I've moved from being primarily an OSX user to Linux, and as a result, my experience has progressively gotten worse enough on 1PW (broken FF extension, general jankiness running on Wine) that I'm finally looking switch off, either to KeePassXC or to Bitwarde…

If you want to use 1Password on Linux, the experience is alright nowadays. I've been using this:

https://addons.mozilla.org/en-US/firefox/addon/1password-x-p...

..and it works great. Same as 1Password X for Chrome, it does not require a desktop app, and handles certain things like TOTP a bit more seamlessly.

Re: Bitwarden – Open Source Password Manager

#46

Post by anotherevan »

I recently switched to BitWarden from Lastpass after trying a few different options including pass, Enpass and KeePass options.

95% of my usage is in the desktop browser, and the UI of their add-on is great, IMO.

Lastpass' had been getting worse for some time, and their shuttering of Xmarks finally left me with no good reason to stay.

Using the add-on with Firefox on my phone is reasonable, although could be a bit better. Phone experience in general I'd say is also quite reasonable - not used it that much yet, but I think it is quite comparable to other offerings.

Re: Bitwarden – Open Source Password Manager

#47

Post by kryogen1c »

keehun wrote: post #35
philliphaydon wrote: post #29

Earlier quoted context omitted.

> I still felt its sluggish performance on launch/search/sync was slowing me down a lot throughout the day. I recently switched (maybe 5 weeks or so, ago, from 1Password to Bitwarden, after finding out about it on HN) I imported ~400 odd logins from 1Password, I honestly don't find it any slower than 1 Password. I did notice that with Discord, both 1Password and Bitwarden now integrate with the new iOS password apis.

Maybe it's just my phone (6) but you may find that once you get 1000+ logins, Bitwarden falls apart pretty quickly. I've heard the same from people with 800+ logins. I remember it used to be very quick when I initially used it with a few plugins. IIRC from their Github issue threads, Bitwarden is using Xamarin, and performant UI has been a consistent struggle with many login entries.

how in God's name do you end up with _thousands_ of logins, or even 800? I work in a pretty large MSP in IT with tons of different programs, websites, and clients. Even if I added every single password (which I most surely would not do), I can't imagine there being more than two or three hundred. Conservatively, if every of two hundred clients has thirty passwords, that's still only 600.

Re: Bitwarden – Open Source Password Manager

#48

Post by bad_user »

jhabdas wrote: post #42

For years I've discouraged use of clouds for storing passwords. But because Bitwarden is FOSS software, encrypts data on the client, has good cross-platform support, and can operate if the company goes out of business they have won me over for the storage of secrets I'm not reserving for the sneakernet.

Last time I checked Bitwarden was not encrypting data on the client. Did that change?

Also, OSS does not mean secure. Without audits from security experts, I can’t trust it.

Bitwarden is objectivity less secure than 1Password or Keepass actually, at the very least because it doesn’t have a desktop application.

Re: Bitwarden – Open Source Password Manager

#49

Post by rosege »

anotherevan wrote: post #46

I recently switched to BitWarden from Lastpass after trying a few different options including pass, Enpass and KeePass options. 95% of my usage is in the desktop browser, and the UI of their add-on is great, IMO. Lastpass' had been getting worse for some time, and their shuttering of Xmarks finally left me with no good reason to stay. Using the add-on with Firefox on my phone is reasonable, although could be a bit be…

Was the data transfer easy between the 2? I'm thinking of doing the same.

Re: Bitwarden – Open Source Password Manager

#50

Post by woah »

albertop wrote: post #15

First paragraph on their page disqualifies it completely. I do not want my passwords on anybody’s servers. Our secure cloud syncing features allow you to access your data from anywhere, on any device! Your vault is conveniently optimized for use on desktop, laptop, tablet, and phone devices.

It's encrypted on the client.
Post reply on HN