Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bitwarden releases “emergency access” feature

bitwarden.com

Post reply on HN
Print view View original

41–50 of 154 posts

Re: Bitwarden releases “emergency access” feature

#41

Post by yepguy »

itake wrote: post #26
Barrin92 wrote: post #18

Bitwarden is just fantastic. It's open source, the interface is clean, works fine on all platforms for me and pretty much everything is free. If the devs browse here, thanks for making it.

I have been using Bitwarden for over a year now and there are still tons of UX bugs that annoy me. In Firefox extension: 1. There is no memory. If you close the window, to copy the password, you have to re-search for the account to find the username. 2. If you open up bitwarden before the page is loaded, it says it can't find the password box to fill in. This is probably an extension limitation, but still annoying. i…

Maybe you can use the sidebar instead of the toolbar button if you're annoyed by the 'no memory' issue.

Re: Bitwarden releases “emergency access” feature

#42

Post by dsissitka »

itake wrote: post #26
Barrin92 wrote: post #18

Bitwarden is just fantastic. It's open source, the interface is clean, works fine on all platforms for me and pretty much everything is free. If the devs browse here, thanks for making it.

I have been using Bitwarden for over a year now and there are still tons of UX bugs that annoy me. In Firefox extension: 1. There is no memory. If you close the window, to copy the password, you have to re-search for the account to find the username. 2. If you open up bitwarden before the page is loaded, it says it can't find the password box to fill in. This is probably an extension limitation, but still annoying. i…

> You should be able to set a default username or email to automatically use when creating a new account.

I think that might be a mobile limitation. Profiles address that problem but I'm not sure if Android or iOS give developers the ability to autofill profiles.

Bitwarden's UX is pretty poor but the way I see it is that's what $12 a year gets me. :)

Re: Bitwarden releases “emergency access” feature

#43

Post by Vaslo »

WatchDog wrote: post #11
tptacek wrote: post #6

Am I reading it right that this allows people to designate access to their password manager via email ? I feel like I have to missing something, like a previous step that fingerprints the emergency contact's key or something. (I get that we rely on email for stuff like this all the time, but your password manager is part of what protects your email account, which is why we rely on email as much as we do for resets).

While I make heavy use of a password manager, I still choose to memorize my email password, and not store it in a password manager, precisely because it is is relied on so much, and can be used to reset the majority of the passwords stored in the manager anyway.

I’m with you. I’ve memorized an odd password for entry into my Bitwarden and my ProtonMail account.

Re: Bitwarden releases “emergency access” feature

#44

Post by BerislavLopac »

toomuchtodo wrote: post #21
aunlead wrote: post #16

The pandemic has made me (re)evaluate how my family can get to my finances and online services. Such solutions can solve issues related to bank/trading account access and key documents but what about subscription services? All my subscription services from Netflix/Plex (less important) to VPN/Blackblaze (more important) are tied to my credit cards, which upon my untimely demise will be deactivated. My family will sur…

Everything should be documented. We have a binder with checklists that walk you through gaining access to everything the other partner might need in the event of death (email accounts, domain registrar, bank and brokerage accounts, auto/home/life insurance, ongoing recurring bills of all sorts). Bitwarden databases are exported to paper, 3 hole punched, and put in the binder on a schedule. Both partners get setup wit…

This is a good approach, but it requires having a partner in the first place...

Re: Bitwarden releases “emergency access” feature

#45

Post by pndy »

It's a good application and service that offers much on free accounts "but":

* there's still no way to keep fetching icons disabled across all devices and instances of bitwarden - each time I have to disable it; I just simply don't like such feature anywhere it's present

* there's no emptying the trash on desktop client and neither in browser addon

* logging in generates email on which your account is registered, which is a good security feature but sometimes it's just... annoying

* import exist only in the web vault interface, while export is present on desktop application and web vault

* despite of having vault unlocking to set with pin, I have to provide password

Still, it's my secondary choice for less important passwords for sites and apps since it works nicely on mobile and isn't limiting features like Enpass which is my main password manager.

Re: Bitwarden releases “emergency access” feature

#46

Post by dumpHero2 »

BerislavLopac wrote: post #44
toomuchtodo wrote: post #21

Earlier quoted context omitted.

Everything should be documented. We have a binder with checklists that walk you through gaining access to everything the other partner might need in the event of death (email accounts, domain registrar, bank and brokerage accounts, auto/home/life insurance, ongoing recurring bills of all sorts). Bitwarden databases are exported to paper, 3 hole punched, and put in the binder on a schedule. Both partners get setup wit…

This is a good approach, but it requires having a partner in the first place...

F

Re: Bitwarden releases “emergency access” feature

#47

Post by pkage »

toomuchtodo wrote: post #32
legerdemain wrote: post #27

Earlier quoted context omitted.

In an accident or disaster (house fire, flooding, earthquake, you name it), this binder will be gone. This binder should be in a secret manager.

Keep a copy in there if you want for convenience, I argue you’ll still want a paper backup somewhere. Opsec is hard, people are fallible. “What was the password?”, “Where’s the Yubikey?”, etc. These are not the failure scenarios you want to encounter during a tragedy (speaking from experience).

Bank safety deposit box is probably a good option for backup, it's very unlikely that both your home and the bank will burn down at the same time.

Re: Bitwarden releases “emergency access” feature

#49

Post by toomuchtodo »

pkage wrote: post #47
toomuchtodo wrote: post #32

Earlier quoted context omitted.

Keep a copy in there if you want for convenience, I argue you’ll still want a paper backup somewhere. Opsec is hard, people are fallible. “What was the password?”, “Where’s the Yubikey?”, etc. These are not the failure scenarios you want to encounter during a tragedy (speaking from experience).

Bank safety deposit box is probably a good option for backup, it's very unlikely that both your home and the bank will burn down at the same time.

A lot of banks have been phasing this product out, but if your bank supports it, I highly recommend it. Usually, they’ll even allow you access with a drilling fee if you’ve lost the key but can show multiple forms of ID. Whether this is good or bad depends on your threat model.

Re: Bitwarden releases “emergency access” feature

#50

Post by ZackJ37 »

aunlead wrote: post #16

The pandemic has made me (re)evaluate how my family can get to my finances and online services. Such solutions can solve issues related to bank/trading account access and key documents but what about subscription services? All my subscription services from Netflix/Plex (less important) to VPN/Blackblaze (more important) are tied to my credit cards, which upon my untimely demise will be deactivated. My family will sur…

I actually put together a service that is focused on this issue called Fidelius Vaults (https://www.fideliusvaults.com). If you have a moment to look, I'd be curious to hear your feedback on whether it solves the problem you stated.
Post reply on HN