Earlier quoted context omitted.
I never switched to Bitwarden because I don't like how it was designed but this is clearly a huge bug even though I probably wouldn't use the feature to attach files.
>because I don't like how it was designed can you elaborate?
Tell HN: Bitwarden does not export attachments in backups
71–80 of 128 posts
Re: Tell HN: Bitwarden does not export attachments in backups
#72I use bitwarden/vaultwarden (self hosted), and didn't even know there was an attachment option, so haven't used it upto now. I did use notes (for storing stuff like ssh/gpg keys), and can confirm that these are exported correctly. Attachments are also not exported in vaultwarden as far as I can see. I'll just stick to stuffing files in notes for now, as I had been doing.
Understandable, since sibling comments are saying export happens on the client side, and Vaultwarden is merely a server-side replacement
Although also relevant is the sibling observation that if you're already running Vaultwarden isn't "backup" less "export from some faceless corporation" and more "take a backup of the vaultwanden database"?
Re: Tell HN: Bitwarden does not export attachments in backups
#73Quoted post unavailable.
Re: Tell HN: Bitwarden does not export attachments in backups
#74This is sadly common. 1Password does not either.
Main thing keeping me off switching to something else. 1Password's extensions getting worse with every update gets me closer each day though.
I'm waiting for someone to point out that BW's extensions are open source and are still a dumpster fire, but for me the difference is that BW started as a dumpster fire, so I don't feel compelled to bring their extension up to sane operating levels, whereas 1P's are _mostly_ right, and just need a tune-up here and there
Re: Tell HN: Bitwarden does not export attachments in backups
#75It's been raised but doesn't appear to be a large enough issue to be put on the roadmap: https://community.bitwarden.com/t/allow-attachments-to-be-ex... The project is open-source, maybe send them a pull request?
I like Bitwarden and open source, but attachments are a paid feature for them, so you'd be essentially working to add value to their paid features for free. That feels unfair to me.
Re: Tell HN: Bitwarden does not export attachments in backups
#76Earlier quoted context omitted.
As an Enterprise Client, I did not even know there was attachments, and i dont know what I would use attachments for...
Splunk licenses (and likely a ton of other enterprise-y software) are actual files, so when we renew our license, it goes into 1P as an attachment on our Splunk item I recognize that's not what you would use attachments for, but I'm offering that there are enterprises that get benefit from attachments, not just individual users
Our password manager is just a password manager, I suspect many other organizations are the same.
Re: Tell HN: Bitwarden does not export attachments in backups
#77Quoted post unavailable.
Re: Tell HN: Bitwarden does not export attachments in backups
#78Earlier quoted context omitted.
Why is such a JSON file too big to use if it’s only ever handled by streaming parsers? SQLite would be a better backup format ofc.
Can you explain how sqlite is a better container for arbitrary binary files than zip? I mean, I know "INSERT INTO files ('my-file.bin', X'CAFEBABE...')" gets it into sqlite, but how would a sane person get that content back out?
Not that performance or file size would matter in this case, BUT what using SQLite would allow is to use a single format for persisting all aspects of the password database, with immediate, programmatic, random access to all fields, including attachments.
But I also agree, that for this specific use-case, even SQLite is a bit of an overkill probably.
Finally, there is always https://www.passwordstore.org/ :)
Re: Tell HN: Bitwarden does not export attachments in backups
#79Wow, if true, this is a huge oversight.
Re: Tell HN: Bitwarden does not export attachments in backups
#80Earlier quoted context omitted.
Thank you for saying something about this. I make up answers to "security" questions like: first pet's name? Favorite teacher? and so on but that means that I have to record what the answer is. I've been doing that in the notes section for LastPass. I think that I'm going to have to move to doing it in the Notes app since that works on all my Apple devices. And it looks like I can lock one Note without having to lock…
In case you haven't already seen it, 1P has effectively a "click button, get fake security question answers" and I love it: https://support.1password.com/generate-security-questions/ They use the "battery horse stable" scheme so you don't have to read crazy ascii over the phone to customer support