bitwarden - Open Source Password Management Tool

[JaredBusch]

KeePass is a horrible solution for someone on many devices all the time.

It is also a horrible solution for home users as they have no idea WTF they are doing.

Home users need LastPass for free.

Power users need LastPass for $24/year or Dashlane if they like to spend extra.

[coliver]

@jaredbusch said in bitwarden - Open Source Password Management Tool:

KeePass is a horrible solution for someone on many devices all the time.

It is also a horrible solution for home users as they have no idea WTF they are doing.

Home users need LastPass for free.

Power users need LastPass for $24/year or Dashlane if they like to spend extra.

I think that's where this comes in. Slightly lower price than LastPass.

[wrx7m]

@jaredbusch said in bitwarden - Open Source Password Management Tool:

KeePass is a horrible solution for someone on many devices all the time.

It is also a horrible solution for home users as they have no idea WTF they are doing.

Home users need LastPass for free.

Power users need LastPass for $24/year or Dashlane if they like to spend extra.

I am on 4 computers and a mobile device everyday and don't have any issues with it. Home users would probably have an issue.

[Alex Sage]

Setting up an accounts with a Verification Code (TOTP) was quick and easy. Nice to have it right in the password manager

[Dashrender]

@aaronstuder said in bitwarden - Open Source Password Management Tool:

Setting up an accounts with a Verification Code (TOTP) was quick and easy. Nice to have it right in the password manager

So the password manager is where you put the TOTP codes?

Doesn't that basically kill 2FA? because if you know the bitwarden password, then you have access to the TOTP, soooo just single factor..

[Alex Sage]

@dashrender That's an interesting point. If they figure out your bitwarden password aren't you screwed anyways?

[Dashrender]

@aaronstuder said in bitwarden - Open Source Password Management Tool:

@dashrender That's an interesting point. If they figure out your bitwarden password aren't you screwed anyways?

Not if you're using 2FA and a TOTP that's not part of Bitwarden, but say the Google Authenticator app instead.

[stacksofplates]

@dashrender said in bitwarden - Open Source Password Management Tool:

@aaronstuder said in bitwarden - Open Source Password Management Tool:

@dashrender That's an interesting point. If they figure out your bitwarden password aren't you screwed anyways?

Not if you're using 2FA and a TOTP that's not part of Bitwarden, but say the Google Authenticator app instead.

You would still use a second 2FA to log into bitwarden and then it does the 2FA for everything else I’m asssuming. On the phone app it would be pretty easy since you would just use touchid to unlock bitwarden. Which also adds a bit of security to the 2FA app unlike Google Auth or FreeOTP that just open when you click them.

[Dashrender]

Interesting.

I guess that could work...

[JaredBusch]

really? a bit.ly link for an install script?

[Dashrender]

@jaredbusch said in bitwarden - Open Source Password Management Tool:

really? a bit.ly link for an install script?

WTF!!!!!

[JaredBusch]

@dashrender when you click through to the full instructions it is not used.

[Dashrender]

I've been using Bitwarden since last Sept.

It's OK. It does not handle websites that have more than two fields to fill out very well though (if at all).

I still Like LastPass better.

[stacksofplates]

@dashrender said in bitwarden - Open Source Password Management Tool:

I've been using Bitwarden since last Sept.

It's OK. It does not handle websites that have more than two fields to fill out very well though (if at all).

I still Like LastPass better.

Huh? You add custom fields to your entry

[Dashrender]

@stacksofplates said in bitwarden - Open Source Password Management Tool:

@dashrender said in bitwarden - Open Source Password Management Tool:

I've been using Bitwarden since last Sept.

It's OK. It does not handle websites that have more than two fields to fill out very well though (if at all).

I still Like LastPass better.

Huh? You add custom fields to your entry

Aww OK thanks - it's not automated like it is in LP.

[thwr]

Was there any proper security audit or at least a professional review? You know, the kind of data it stores is very sensitive.