Live data from Hacker News

Tell HN: Bitwarden does not export attachments in backups

news.ycombinator.com

81–90 of 128 posts

Re: Tell HN: Bitwarden does not export attachments in backups

#81
post #49

I’m still on KeePass. I keep meaning to get off of it but it more or less works okay (not great) I use windows, Debian, iOS, and Firefox as the browser on desktop. Any recommendations?

I switched to iCloud passwords. It's terrible, but it works. When I'm not on iOS/macOS, I'm typing passwords manually looking at my phone. Not the best UX for sure.

Re: Tell HN: Bitwarden does not export attachments in backups

#82
post #61

Earlier quoted context omitted.

How is it better than BitWarden? I’ve used both and they both seem fine but I didn’t see an obvious reason to prefer it. BW is a lot cheaper as well.

My experience is that 1P has a lot more polish and consideration for the user (err, I mean before the "8" debacle). I cannot recall a single time I have lost an autogenerated password, whereas with BW it happened about 50% of the time. Filling up my vault with hundreds of unnecessary password captures is better than losing a single one, because they don't know how important any one password is in order to gauge how "…

What's the issue with 1Password 8? Upgraded today to get the SSH agent and so far it seems alright.

Re: Tell HN: Bitwarden does not export attachments in backups

#83
post #61

Earlier quoted context omitted.

How is it better than BitWarden? I’ve used both and they both seem fine but I didn’t see an obvious reason to prefer it. BW is a lot cheaper as well.

My experience is that 1P has a lot more polish and consideration for the user (err, I mean before the "8" debacle). I cannot recall a single time I have lost an autogenerated password, whereas with BW it happened about 50% of the time. Filling up my vault with hundreds of unnecessary password captures is better than losing a single one, because they don't know how important any one password is in order to gauge how "…

> bitwarden/clients/issues/1620 (open since Feb 2021)

Oh, try with something much worse, and open since Dec 2017 (no, migrating to a new place is no excuse at all to mark the issue as magically resolved)

https://github.com/bitwarden/clients/issues/443

Here I made a pretty clear video of the issue:

https://community.bitwarden.com/t/persistent-bitwarden-ui-an...

Did anyone care? Not that I know of. It's 2022, so that's been 5 years now.

I'll keep paying the pro account as long as it keeps working for me, but it saddens me that we still don't have a universally good and free service that can be recommended to lots of non-techies that are still stuck on the old customs of reusing passwords.

Re: Tell HN: Bitwarden does not export attachments in backups

#84
post #42

> A simple solution would be to b64 encode each file and add it into an array! An individual file attachment can be as large as 500 MB[0]. It would make the JSON file too big to use. Still, I do think that Bitwarden should warn users about it when exporting. Just mentioning it in the Help Center doesn't seem so helpful. [0]: https://bitwarden.com/help/attachments/

> An individual file attachment can be as large as 500 MB[0]. It would make the JSON file too big to use.

The backup would be too big to use if it included all the data it's a backup of? What?

Re: Tell HN: Bitwarden does not export attachments in backups

#86
post #78
post #69

Earlier quoted context omitted.

Can you explain how sqlite is a better container for arbitrary binary files than zip? I mean, I know "INSERT INTO files ('my-file.bin', X'CAFEBABE...')" gets it into sqlite, but how would a sane person get that content back out?

Well, you can just get BLOBs out of an SQLite DB with SELECT. Also: https://www.sqlite.org/fasterthanfs.html Not that performance or file size would matter in this case, BUT what using SQLite would allow is to use a single format for persisting all aspects of the password database, with immediate, programmatic, random access to all fields, including attachments. But I also agree, that for this specific use-case, even…

Right, but I feel we're having a miscommunication about the level of effort one should expend to recover the payloads; your mental model is that this:

    sqlite3 -noheader -newline '' export.db "select data from files where filename = 'my-file.bin'" > my-file.bin
is more user friendly than:

    unzip 1PasswordExport-ILESALYKVFDNJH3K24FEO3QRHM-20220611-100457.1pux files/my-file.bin

Re: Tell HN: Bitwarden does not export attachments in backups

#87
post #61

Earlier quoted context omitted.

My experience is that 1P has a lot more polish and consideration for the user (err, I mean before the "8" debacle). I cannot recall a single time I have lost an autogenerated password, whereas with BW it happened about 50% of the time. Filling up my vault with hundreds of unnecessary password captures is better than losing a single one, because they don't know how important any one password is in order to gauge how "…

What's the issue with 1Password 8? Upgraded today to get the SSH agent and so far it seems alright.

It's partially teething pains as they reimplement the world in Electron, and partially "sour grapes" since that transition was coscheduled with the "and no more local vaults, too bad"

Their QR code scanner went poof, in favor of "take a screenshot to the clipboard," and it no longer is able to suggest based on the "bundle ID" of the native apps. I dunno if it ever did that for Windows, and of course Linux support is brand new, but annoying for my case nonetheless

Re: Tell HN: Bitwarden does not export attachments in backups

#89

I recently switched from LastPass to Bitwarden, and LastPass has the same issue. I had to manually save all my attachments and upload them into their proper place on Bitwarden. It was frustrating, but also not a big deal in my case. Worse things have happened. I wholeheartedly agree that these companies should have a warning that attachments won't export. Because I almost forgot about them.

Thank you for saying something about this. I make up answers to "security" questions like: first pet's name? Favorite teacher? and so on but that means that I have to record what the answer is. I've been doing that in the notes section for LastPass. I think that I'm going to have to move to doing it in the Notes app since that works on all my Apple devices. And it looks like I can lock one Note without having to lock…

Last I checked, notes are included in the export. This post is about attachments

Re: Tell HN: Bitwarden does not export attachments in backups

#90

I went to bitwarden from dashlane that didnt even export secure notes https://www.reddit.com/r/Dashlane/comments/gfwyvo/comment/fq... This is the same thing again. I switched to 1password before all the funding and feel like there arent any viable alternatives now. Edit: to be clear this isnt me on reddit this thread is just what backed up bitwarden.

1Password remains really great imo - people seem to use worse alternatives for ideological reasons but I don’t think there are any that are actually better.

I ditched it when they broke the ability to sync to the local file system. Before that, I was using syncthing to share my passwords between devices.
Post reply on HN