Live data from Hacker News

Bitwarden releases “emergency access” feature

bitwarden.com

81–90 of 154 posts

Re: Bitwarden releases “emergency access” feature

#81

Earlier quoted context omitted.

A lot of banks have been phasing this product out, but if your bank supports it, I highly recommend it. Usually, they’ll even allow you access with a drilling fee if you’ve lost the key but can show multiple forms of ID. Whether this is good or bad depends on your threat model.

What's a good, safe place to store the key?

Safety deposit box at a different bank

Re: Bitwarden releases “emergency access” feature

#82
post #26

Earlier quoted context omitted.

I have been using Bitwarden for over a year now and there are still tons of UX bugs that annoy me. In Firefox extension: 1. There is no memory. If you close the window, to copy the password, you have to re-search for the account to find the username. 2. If you open up bitwarden before the page is loaded, it says it can't find the password box to fill in. This is probably an extension limitation, but still annoying. i…

> You should be able to set a default username or email to automatically use when creating a new account. I think that might be a mobile limitation. Profiles address that problem but I'm not sure if Android or iOS give developers the ability to autofill profiles. Bitwarden's UX is pretty poor but the way I see it is that's what $12 a year gets me. :)

> Bitwarden's UX is pretty poor

Hmm, I've tried LastPass, Enpass, a handful of Keepass clients I can't remember the name of and (shortly) 1Password, and I can't really find anything Bitwarden does that much worse than any of these. To be perfectly honest, they're all kind of clunky, IMHO.

Re: Bitwarden releases “emergency access” feature

#83
post #16

The pandemic has made me (re)evaluate how my family can get to my finances and online services. Such solutions can solve issues related to bank/trading account access and key documents but what about subscription services? All my subscription services from Netflix/Plex (less important) to VPN/Blackblaze (more important) are tied to my credit cards, which upon my untimely demise will be deactivated. My family will sur…

Everything should be documented. We have a binder with checklists that walk you through gaining access to everything the other partner might need in the event of death (email accounts, domain registrar, bank and brokerage accounts, auto/home/life insurance, ongoing recurring bills of all sorts). Bitwarden databases are exported to paper, 3 hole punched, and put in the binder on a schedule. Both partners get setup wit…

Not to spoil good ideas or be a negative Nancy...

What is the process for revoking this access in the event of a less than amicable split between partners?

Re: Bitwarden releases “emergency access” feature

#84

Earlier quoted context omitted.

In that situation I can see myself forgeting where I'd put the sticky note, or what it meant.

That’s why you write the whole plan down on yet another sticky note!

Haha, believe me, I can make this plan fail if I haven't had my morning tea or coffee, let alone serious head injury!

Re: Bitwarden releases “emergency access” feature

#85
post #51
post #47

Earlier quoted context omitted.

Bank safety deposit box is probably a good option for backup, it's very unlikely that both your home and the bank will burn down at the same time.

The bank across the street from me is 100% burning up in the same fire as my apartment if the California wildfires get to me.

Fires are strange beasts. Sometimes one house in a street will survive completely unscathed and the rest all burn down to nothing.

A street is a firebreak. An earthquake might level you and them but a fire won't necessarily.

Re: Bitwarden releases “emergency access” feature

#86

Earlier quoted context omitted.

Everything should be documented. We have a binder with checklists that walk you through gaining access to everything the other partner might need in the event of death (email accounts, domain registrar, bank and brokerage accounts, auto/home/life insurance, ongoing recurring bills of all sorts). Bitwarden databases are exported to paper, 3 hole punched, and put in the binder on a schedule. Both partners get setup wit…

This is a good approach, but it requires having a partner in the first place...

If you don’t have a partner, or one single person in your life who you trust absolutely, you can distribute this trust.

Collate this same information, encrypt it and then use [a key sharing algorithm](https://en.m.wikipedia.org/wiki/Shamir%27s_Secret_Sharing) to split this encryption key across a set of semi-trusted contacts.

Re: Bitwarden releases “emergency access” feature

#87
post #79
post #65

Earlier quoted context omitted.

Not sure why I'm getting down-voted. It doesn't work in Firefox's private mode. Nearly 4 years after the issue was raised. It was completely dismissed as "something Mozilla needs to fix" on multiple occasions.

It works, but you need to right click the field you want to fill and mouse over to Bitwarden.

Works, but unfortunately the vault has to be unlocked in a non-private window first.

Re: Bitwarden releases “emergency access” feature

#88

Earlier quoted context omitted.

In an accident or disaster (house fire, flooding, earthquake, you name it), this binder will be gone. This binder should be in a secret manager.

Keep a copy in there if you want for convenience, I argue you’ll still want a paper backup somewhere. Opsec is hard, people are fallible. “What was the password?”, “Where’s the Yubikey?”, etc. These are not the failure scenarios you want to encounter during a tragedy (speaking from experience).

I think giving a USB key or login details with access info to your password manager to a trusted friend or family member might be preferable to having a paper binder that could be lost in a disaster situation.

Re: Bitwarden releases “emergency access” feature

#90
post #16

The pandemic has made me (re)evaluate how my family can get to my finances and online services. Such solutions can solve issues related to bank/trading account access and key documents but what about subscription services? All my subscription services from Netflix/Plex (less important) to VPN/Blackblaze (more important) are tied to my credit cards, which upon my untimely demise will be deactivated. My family will sur…

Keep everything in Lastpass notes or the notes of whatever password manager you use. Then put the password to that somewhere safe for people to have.

Lastpass actually has emergency access contacts you can setup without having to share your master password.
Post reply on HN