Hacker News Reader

Comment by propwash | Hacker News Reader

I use Bitwarden and it's open source. Switched over from LastPass and haven't regretted it since

Bitwarden has the best UI/UX of any password manager I have used, by far. In particular it puts LastPass (which I switched from) to shame.

I rarely use the premium features, but I pay for premium anyway to support the project. Costs a dollar a month, so barely noticeable.

Yeah I evaluated a few team password managers for a friend's small business and Bitwarden was the clear winner (1Password was second, but fell due to the requirement for a long random master key). I was surprised by just how bad Last pass and Dashlane were considering how much they spend on advertising

Can you elaborate on the issues with Lastpass? I haven't looked at other managers but Lastpass seems fine.

it can be a bit club-footed on the mobile platform. but yeah its my password manager of choice as well.

Are you on Android or iOS? The iOS app is really well done IMO.

The iOS version won't remember my banking app password for some reason. That works on Android though.

Other than that it's been hands down the best.

Android.

I often run into problems where the bloody stupid "use bitwarden to fill this field" hover button pops up over the field i need to paste something into. I need to do that because the app hasn't detected the app i'm using is actually a password i currently only have the web URI password saved for.

Agreed, works on Android, but it's clumsy.

Chose Bitwarden as well. I like that it's open source. I've heard good things about KeePass as well.

I looked into Bitwarden for work, but there's no password reset option for admins. I don't know how many times people have forgotten their password manager's password and I've had to reset it. Without that feature, Bitwarden is a non-starter for a corporate environment.

It was just added last week

https://bitwarden.com/blog/post/admin-password-reset-is-out/

I hope this makes it into bitwarden_rs, which is what we use at work, soon. That and/or the ability to disable personal vaults would go a long ways for us.

bitwarden_rs has been renamed to vaultwarden

https://github.com/dani-garcia/vaultwarden

Wouldn't be a HN password manager thread without someone randomly plugging Bitwarden when it has nothing to do with the actual topic :)

It is like being a Haskell developer (monads all the way down) or emacs/vim user.

It's somewhat related because OSS password generator logic has better observability than proprietary products.

What did you find was better about Bitwarden?

Not GP, but LastPass's weird restrictions on devices, for one.

No restrictions on number of devices for one.

Everything else was the same and I didn't feel like I losing out, so it was easy to switch. They have an import tool that made it easier

Killer feature for me is the URI matching options. Each entry can have URIs, and each URI can match based on: Base Domain, Host, Starts With, Exact, or Regex.

This simplified a bunch of things for me:

* Dev deployments of an app, where I have one or two different logins (eg, the default admin login) but it's deployed on a bunch of subdomains and/or internal IPs and/or internal non-FQDN hosts

* A bunch of work systems on different domains where there's old-style SSO (synchronized password, but login form as part of the app)

* Android apps just get a URI like com.domain.AppName and can otherwise be consolidated with other entries, etc

Has anyone had any success in getting your TOTP shared secrets out of Lastpass Authenticator?

I don't think it's quite what you were asking, but I always avoided Two Factor Auth because I don't use a smartphone and all the approved methods seemed to use phone apps.

A year ago, one of my accounts forced me to enable two factor auth, so I spent time looking into how to make it less onerous. Turns out the TOTP code stuff is an open standard and there is a command line tool [1] you can use to generate the codes.

Thought that was really neat. I wrote a little script to integrate with my password manager and went from avoiding two factor auth to enabling it everywhere.

[1] https://www.nongnu.org/oath-toolkit/oathtool.1.html

I have to use 1password for work and hate the UI compared to bitwarden

Could you please elaborate? I've been using 1password for a while, and I can't imagine how it could be any better

Same. We have it at work, but 1Password's UI is the reason I use it at home as well.

Seriously I LOVE 1password. I moved away from LastPass to it after reviewing some of the OSS offerings. I have not found a more feature-complete (and pretty for that matter) alternative.

One of the my favorite features that I cannot find in other password managers it the built-in 2fa support. Click to login to a 2fa enabled site and it copies the code to your clipboard so you just paste and voila at the next screen. Perfect!

One example is how 1password hijacks the ctrl+F key combination.

So, if I have a long secret, perhaps a config section, I have to manually copy and paste it into a text editor in order to properly search through it.

I mostly like Bitwarden but I really miss the 1password feature where it shows your password in big text with each character numbered. I have a few accounts that do that dumb "give us the 5th, 12th and 21st characters" thing.

Reply on news.ycombinator.com