Hacker News Reader

Comment by bussierem | Hacker News Reader

Highly recommend trying BitWarden! I'm a paying user of it myself. It also has export of data and full self-hosted options as well. The browser plugins work amazingly well. The phone app is...i would say 75-80%. I've had trouble sometimes getting it to popup the "auto-fill" but otherwise it works very slick (supporting biometric unlock too).

View on HN

FWIW, my experience has been that Bitwarden's autofill is pretty bad compared to other password managers (I recently migrated from Lastpass, and used 1password in the past). I end up having to manually copy and paste a lot of passwords because the browser extension can't find the right fields.

Interesting, I've never had that issue on the browser. I HAVE noticed that if you open the plugin before the page finishes loading, it will error trying to fill the fields. In those cases I tend to just close the plugin and reopen it and it seems to work fine for me.

No idea if your experience has been different, just a thought!

I had problem with lastpass' overly aggresive autofill and form detection system that seriously slow down any page that has a lot of input fields. I had a page with 500 input fields that I used semi-regularly at work to bulk update some configuration, and the slow down was so bad the page will be unresponsive for >5 minutes. It was the last straw that made me migrate bitwarden.

Does Bitwarden's desktop application use Electron?

Edit: Okay, it sounds like from the comments, it does use Electron. Then my followup question is, if people are upset with 1Password moving in this direction, then Bitwarden would not be a good alternative, no?

Yes, from their Github page "The Bitwarden desktop app is written using Electron and Angular. The application installs on Windows, macOS, and Linux distributions."

It does, but I have yet to need it. I use the browser plugin for everything. If a desktop app needs a password, I just open the FF plugin and copy the password myself haha.

It is, but on the Mac, one of the big selling points of 1Password was a nice, native UI. If that feature is gone, why use it over an open-source, self-hostable alternative?

People attached to the nice native UI are looking for another nice native UI.

I was paying extra ($36/y vs $10/y) for the native app 1Password provided. Why would I keep paying more now that AgileBits decided not to offer the feature I wanted?

Bitwarden doesn't do iCloud sync to iOS, or does it? (didn't when I had a look at it a while back).

I do not have an iPhone so I am not sure, sorry!

No the vault is not able to be a local vault but you can self host your vault on your own server and it uses secure remote password for logging in just like 1password. It also has end to end encryption for the vault. The only way for your vault to get compromised is through a server compromise and brute forcing your password, due to how SRP works, even if DNS was taken over and someone intercepted your login request it’s not possible to derive anything about your password and the client would detect that the remote doesn’t actually have the vault. Even if they man in the middled the login they can’t learn about your password or get access to your encrypted vault.

Reply on news.ycombinator.com