Hacker News Reader

Comment by eunai | Hacker News Reader

I switched to BitWarden and haven't looked back. You can use it on the phone and pc (browser). As well as a desktop client.

View on HN

And with vaultwarden you can go self hosted with a very lightweight server written in rust.

Switched to vaultwarden at work for password management, only have minor gripes so can recommend.

Yeah, my path was LastPass -> Bitwarden -> 1Password.

Both Bitwarden and 1Password are great.

Then what was the impetus to switch off of Bitwarden?

Same path. It'll be very hard to move away from 1Password. App experience, sync, security features like key in addition to master password, family organizer-based recovery of an account, these are a few things that stand out.

Can you explain what family organizer-based recovery means? It sounds like dad or mom could recover a kids password?

https://support.1password.com/recovery/

That's about right for what it is, or at least how I think about it. There's no magic "unlock vault" button (by design), but an Organizer can kick off a workflow to reset a vault if need be. I have a few of the more tech-savvy family members set as organizers in my family in case something ever happens to me.

My favorite feature personally is the built-in 2FA support. Click and it logs into your account and copies the 2fa code to clipboard so just paste on next screen.

Multiple vaults too is nice but I know others have ways to limit exposure of passwords in similar manners.

Bitwarden offers this as well, but I don't really understand why you would want it. If someone compromises your password manager, 2FA is now worthless. Or am I misunderstanding how it works?

Your understanding is correct. 1Password requires a key in addition to the master password. And finally, 1Password can have 2FA for itself, which is stored on my Authy. These are reasons why I am comfortable storing my 2FA codes on it.

Bitwarden has 2FA support too, but does not have the unique key feature that 1Password has.

Yeah, I use 1Password for every critical bit of information (SSN numbers, physical access codes) and a whole lot of less-critical stuff. I expect to be a customer for life.

I prefer the browser addon for bitwarden over 1Password. Try editing a site in 1Password. It forces you to log into the full sir, whereas bitwarden can do almost everything right there in the addon.

This is also possible with the 1Password X extension, however there's a lot of feature segmentation and unclear messaging between the Desktop app-based version and 1Password X so I don't blame you for using the old one.

It is? The last I remember, editing a field on 1Password X opens 1Password website instead, where the changes can be made.

Reply on news.ycombinator.com