Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Get your passwords out of Bitwarden while you still can

osnews.com

Post reply on HN
Print view View original

51–60 of 203 posts

Re: Get your passwords out of Bitwarden while you still can

#51

Post by cjs_ac »

ab71e5 wrote: post #37
cjs_ac wrote: post #19

I store my passwords using this: https://www.passwordstore.org/ It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.

I'm interested in this, what do you use to host the git repo? Just a private repo on something like github or your own server? How do you backup your private key?

I run Gitea on my own server. (I didn't switch to Forgejo because it's not in the Debian repositories.) I don't have a backup of my private key... I should do that.

Re: Get your passwords out of Bitwarden while you still can

#52

Post by jmcphers »

cjs_ac wrote: post #19

I store my passwords using this: https://www.passwordstore.org/ It's a shell script that stores passwords in a git repository, containing one file per entry. The files are encrypted using a GPG key. Because it's just a git repository, you can synchronise it between devices using whatever infrastructure you want. I use a FOSS client for it on iOS, and there was one for Android before I got an iPhone.

I have used this for almost 10 years now. It's pretty barebones but it seems like the usable lifetime of commercial password managers is 4-5 years before they get enshittified, bought, discontinued, price-jacked, or otherwise made unsuitable for use. "pass" just keeps working.

Re: Get your passwords out of Bitwarden while you still can

#53

Post by Shank »

WolfeReader wrote: post #49
TN1ck wrote: post #45

I switched to Apple Passwords this week. Really good passkey support, 2FA support, best iOS integration. You can even share passwords with others. Sadly no first party cli support. If you only use Apple devices, it’s really solid.

"If you only use Apple devices, it’s really solid." It's not a good idea to become dependent on a single corporation's products.

You can leave via Strongbox (a KeePassXC client), which supports the new export system that includes Passkeys.

Re: Get your passwords out of Bitwarden while you still can

#54

Post by SubiculumCode »

Yes, there are signs of an oncoming enshitification, and these types of articles gaining traction is good because it sends a signal to the company of potential consequences....but at the same time, the evidence supporting Bitwarden enshitification is pretty weak at this point. There are degrees here, not just either/or, on/off, good/shit.

Re: Get your passwords out of Bitwarden while you still can

#55

Post by scrollop »

tfarias wrote: post #31

I've been recommending Bitwarden for a few years now and have also been paying a yearly sub since 2022, as I always thought 10$ was a really good value. But with all this stuff coming out, I'm holding off on recommending it anymore; at least until everything calms down and the new value proposition is fully laid out. Like other folks have said, I don't think it's yet time to migrate. That being said, it doesn't hurt…

You should try hosting it yourself in docker. Absurdly easy to do if you get an llm to do it and it works very, very well.

Hope they don't alter self hosting it.

Re: Get your passwords out of Bitwarden while you still can

#56

Post by Angostura »

craigmart wrote: post #48

This is an incredible overraction over a minor change that did not even happen. You can still find "Always free" in the pricing line of the very same page everyone keeps linking as proof https://bitwarden.com/products/personal/#whats-the-differenc... Edit: it actually disappeared for some time but they put it back on May 18 snapshot from May 15: https://web.archive.org/web/20260515190646/https://bitwarden... snapshot…

Well it did happen - and then unhappened when people noticed.

Re: Get your passwords out of Bitwarden while you still can

#57

Post by Angostura »

Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

Is it because everybody else is swapping between several different computers, and you need the synchronization?

.. and phones, and tablets. Yes

Re: Get your passwords out of Bitwarden while you still can

#58

Post by chrismorgan »

craigmart wrote: post #48

This is an incredible overraction over a minor change that did not even happen. You can still find "Always free" in the pricing line of the very same page everyone keeps linking as proof https://bitwarden.com/products/personal/#whats-the-differenc... Edit: it actually disappeared for some time but they put it back on May 18 snapshot from May 15: https://web.archive.org/web/20260515190646/https://bitwarden... snapshot…

The page addresses this:

> The “Always free” motto quietly reappeared on the site after its removal was uncovered and went viral on Fedi.

(And the linked article gives evidence: https://blog.ppb1701.com/the-quiet-renovation-at-bitwarden#:...>.)

Re: Get your passwords out of Bitwarden while you still can

#59

Post by 9x39 »

Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

Having a password manager synced to phone, desktop, laptop, browsers is handy. I used Keepass 10 years ago but I prefer integrated experiences now, particularly since I often pull them up on mobile.

Also consider teams or multiple teams across an org sharing secrets. Flat files are a tough sell, so these apps eliminate almost all the hassle. We pay for a lot of 1Password accounts, and I couldn’t imagine rolling our own solution.

Re: Get your passwords out of Bitwarden while you still can

#60

Post by teach »

Terr_ wrote: post #41

So I have an admission here: I keep seeing HN stuff about these networked password managers and I don't quite understand the appeal. Is it because everybody else is swapping between several different computers, and you need the synchronization? I just have everything in KeepassXC, and the ciphertext is subject to the same kind of backup regime I use for other files, [edit: and also additionally] a copy kept on a USB…

In my case it's exactly that. I have a Linux gaming workstation, a work-issued (and managed) MacOS laptop and a Google-branded (Pixel) Android phone.

Bitwarden just works in all those places and the tech was, by all accounts, rock solid. AND I can pay for it instead of trying to leech off some privacy-ambiguous free tier.

Post reply on HN