Bitwarden - open source password manager
I've been looking for open source password managers and came across Bitwarden (https://bitwarden.com). I would love to hear your opinions about it (if there are any users here).
14 comments
I don't feel safe if my passwords data is stored in the US. I prefer to use KeePass (open source) + Cloud storage from Swiss.
For a long time Swiss was out of the EU-US Privacy Shield and was advised as #1 country for storing your personal data. But this January Swiss and US finalized their agreement (http://www.alstonprivacy.com/swiss-u-s-privacy-shield-finali...).
What do you use now then?
Actually I was wrong about the Privacy Shield. It's actually not a bad thing. I did confuse it with The Fourteen Eyes (https://privacytoolsio.github.io/privacytools.io/#ukusa). My bad!
I still use KeePass (KeeWeb on laptop) + pCloud.
I still use KeePass (KeeWeb on laptop) + pCloud.
Can you share the name of that cloud storage company in Switzerland?
Sure thing, it's pCloud (https://www.pcloud.com/)
What's wrong with passwordstore.org? It's not a service which I am giving my stuff, but just some handy script sitting on top of well-known distribution and security software. Plus tools and plugins for all the clients. There is no need for anything else than that.
A few things I didn't like about pass:
* It does not encrypt metadata.
* It performs delayed clipboard clearing instead of preventing further coping after first use, which is technically possible to implement, though I am not aware of any small standalone tool that does something like that.
* If you don't have something like YubiKey, password protection of gpg private key is not particularly impressive compared to the state of art.
* It does not encrypt metadata.
* It performs delayed clipboard clearing instead of preventing further coping after first use, which is technically possible to implement, though I am not aware of any small standalone tool that does something like that.
* If you don't have something like YubiKey, password protection of gpg private key is not particularly impressive compared to the state of art.
I recently came across a `pass` competitor called `freepass` built with Rust ontop of libsodium: https://github.com/myfreeweb/freepass
`pass` is my current favourite, the Android app works fine and syncing text files is easy. But I'm looking forward to trying `freepass` out. The interface looks nice in the asciicinema animation in the README, a Quicksilver/spotlight style floating window.
BitWarden looks too heavy-duty for me.
`pass` is my current favourite, the Android app works fine and syncing text files is easy. But I'm looking forward to trying `freepass` out. The interface looks nice in the asciicinema animation in the README, a Quicksilver/spotlight style floating window.
BitWarden looks too heavy-duty for me.
I've been using Bitwarden a couple months now and can only speak highly. We'll see how it's security audits & stands the test of time, but so far so good for me.
I was very disappointed with the direction LastPass has taken since its acquisition by LogMeIn, mostly because the UI was becoming progressively worse. I've been using BitWarden for about a month or two now and while the workflow is a bit different, it works as well as I could hope.
I like password store and keepass.
I already have a password manager. It's my brain.
>I already have a password manager. It's my brain.
For those of us without eidetic memory that have to manage a large number of credentials, password managers tend to be the only viable solution.
For those of us without eidetic memory that have to manage a large number of credentials, password managers tend to be the only viable solution.
Because I use `pass` my passwords are easily stored under revision control with git.
I wrote a simple script to show me the age of various passwords. When I realized I'd not changed some passwords for over two years I was surprised.
With your "brain" do you remember to update passwords every few years? And remember the new one easily?
I wrote a simple script to show me the age of various passwords. When I realized I'd not changed some passwords for over two years I was surprised.
With your "brain" do you remember to update passwords every few years? And remember the new one easily?