Hacker News Reader

Comment by tibiahurried | Hacker News Reader

We use BitWarden and it is free. $620M for a password manager is nuts.

I like Bitwarden too, but can't dismiss the fact that 1Password is superior to Bitwarden in many ways:

- Mobile UI is beautiful on 1Password.

- The UX from creating a password entry to auto-filling is easily better on 1Password. Bitwarden doesn't show autofill entries on login forms yet. That's a deal breaker, at least for me.

- Account recovery via a trusted family member.

- Additional security measure: private key in addition to master password.

Personally, the 35 USD fee is justified.

Bitwarden has all those features you listed. I use it every day.

You can setup a trusted family member. You get a master password and private key incase you can't access 2fa. You can setup autofill entries. UI/UX are opinions.

You pay $40 dollars a year for Family, $10 a year for an individual. Cheaper than 1password.

Hopping aboard to add that Bitwarden does in fact have all of those features. It's disingenuous of parent comment to imply/claim otherwise.

Sure the UI/UX is a bit basic... but honestly most of us should prefer that.

I meant the overlay popup interface by autofill on login forms:

https://community.bitwarden.com/t/overlay-popup-interface/14

Noted about trusted family members on Bitwarden.

I don't understand the private key part for Bitwarden. I am referring to the one here:

https://support.1password.com/secret-key-security/

Is there an equivalent for Bitwarden?

> Bitwarden doesn't show autofill entries on login forms yet. That's a deal breaker, at least for me.

I was able to enable that in the settings, but I've found it very hit or miss compared to when I used LastPass.

I meant the overlay popup interface which is still in the works:

https://community.bitwarden.com/t/overlay-popup-interface/14

You think they'll keep that price for forever?

I bought Lastpass when it was $12/year. Over the years and after being acquired, they tripled the price. I miss when technology used to decrease in price and provide better functionality.

Hopefully so, but I'd be willing to pay even upto 100 USD. I store a lot of things on 1Password these days that it's very hard to give up, and very convenient. It's not just passwords; medical documents, credit card details, passport, certificates, private notes.

They certainly won't. They used every trick in the book to get those of us who bought their standalone, one-time fee software to subscribe.

BitWarden is not free if you compare apples to apples, and sign up for the same features including cloud hosting, 2FA, and family or enterprise accounts.

$620M isn’t for a password manager, it’s financing for a business with an enormous and growing user base.

Bitwarden is free for individuals and couples. So, it's free user-friendly (WAF!!) wise [0] in comparison to 1pass [1]. But much more important thing is the fact that bitwarden is open source and 1pass not. Closed source is deal-breaker for me.

[0] https://bitwarden.com/pricing/ [1] https://1password.com/teams/pricing/

Bitwarden free edition is free. The free edition is crippled and doesn't support Yubikey among other things.

"Crippled" is a big word. It does everything that KeePass would do, for example; it only falls short when it comes to sharing passwords among a group or family (you can send a secret via BW Send, but you cannot have a shared store unless you pay for Premium).

Yubikey and its likes are advanced features that the overwhelming majority of regular users will never need.

It is? I thouht it was the proper word to use to describe software which has limited features in free version so they can sell commercial licenses.

“Limited” is better. “Crippled” has a negative connotation when it comes to software.

Then crippled seems like the perfect word.

"Crippled" implies a degree of everyday suffering in the "cripple", or a downgrade from a previous state of health. The advanced features in Bitwarden were never free, in fact I think some of them were eventually added to free plans too. I honestly don't even want stuff like yubikey support, and could see that as feature bloat!

I don't expect everything to be free, I'm perfectly fine with the freemium model when the set of free features is reasonable - as, in my humble opinion, is the case with Bitwarden. So I wouldn't use a word like "crippled" when it's more like "normal for regular users vs enhanced for advanced needs".

I thought that it had all the same features, just not cloud sync. As far as I know the Yubikey is used for authenticating with their sync server. It doesn't actually help with the encryption

Bitwarden's free plan does have end-to-end encrypted cloud sync with no device limit. The free plan lacks TOTP support, but Bitwarden's $10/year plan does include TOTP support and is cheaper than 1Password's $35.88/year plan. Bitwarden is also open source, while 1Password is not.

Bitwarden free has TOTP.

I'm referring to Bitwarden Authenticator, which stores TOTP secrets and displays 6-digit codes like Google Authenticator does.[1] This feature requires a Bitwarden Premium account, with the $10/year plan being the cheapest option.[2] (Self-hosting through Vaultwarden is another option.[3])

This is separate from having TOTP 2FA on the Bitwarden account itself, which is available on the free plan.[4]

[1] https://bitwarden.com/help/authenticator-keys/

[2] https://bitwarden.com/pricing/

[3] https://github.com/dani-garcia/vaultwarden

[4] https://bitwarden.com/help/setup-two-step-login/

For something as important as protecting passwords, why on earth would you want something that is free?

Well let me ask the much more obvious question, for something as important as protecting your passwords, why on earth would you go with a proprietary service where you have no idea about the security, that could take away your access at a whim without any recourse for you?

Because much like privacy, password security shouldn't always be only a premium option.

Plus like the parent said, proprietary code is a deal break for lots of people.

> Because much like privacy, password security shouldn't always be only a premium option.

So then who foots the bill? Password managers are the duct tape used to protect a user because we don't inherently trust application providers.

> proprietary code is a deal break for lots of people

Sort of. First, "lots of people" seems like "lots of people" because we're on HN. The wider population doesn't care whether your application is proprietary or not - they just want something that works. Apple's wall garden is proof of this. Second, you can still charge for a product and it be open source. An application being open source simply provides an audit log of the code and allows for "wisdom of the crowd" when it comes to bug and security issues. So yes I agree that having a password manager be openly auditable is a great feature, but I (and many others) likely would rather have the features of strong UX and known tenure (OSS tools get abandoned all of the time) then we would having an auditable source code.

Bitwarden does charge for certain features like TOTP support, organizations, and enterprise features. They manage to have subscription income while remaining open source, whereas 1Password chooses to keep its code closed source.

If you are saying that Bitwarden is worse because it offers a free plan, I disagree. It's nice that Bitwarden offers a security-audited* password manager to those who can't afford a subscription, who aren't ready to pay for one, or who don't have the means to make payments online. Unlike 1Password, Bitwarden is not pressured to deliver high returns to venture capital firms, and Bitwarden can focus on providing its product to its users at superior price points.

* https://bitwarden.com/help/article/is-bitwarden-audited/#thi...

> Unlike 1Password, Bitwarden is not pressured to deliver high returns to venture capital firms, and Bitwarden can focus on providing its product to its users at superior price points

Well said - and this is the important part of the 'non-proprietary' argument of mine (above) - right now I consider 1Password's real customers being their shareholders/investors, not its users - the users are just another tool they use to bring value to their real customers (investors,etc.).

BitWarden's customers are their actual users.

> If you are saying that Bitwarden is worse because it offers a free plan, I disagree.

For the record, I'm not. The overall discussion was that charging for a product was somehow bad. Bitwarden does charge for their product, just at higher tier levels. My bigger point is that you do want a provider that is going to stay solvent so charging money (which Bitwarden also does) is not some perverse way of satisfying customers.

> So then who foots the bill?

Whoever wants to pay. Doesn't mean a product should be dismissed simply because it's "free".

People and businesses are storing their data that these passwords protect using free operating systems.

Yup. In fact just today my partner was struggling witha problem with 1Password that she uses at work, asking why it wasn't as simple as BitWarden.

That’s likely because they are used to BW first and was learned at home. This sort of ”phenom” happens all the time and is not only about the actual product.

There will be exact examples of the opposite happening.

I'm looking forward to Bitwarden implementing multiple account logins ("client profiles") [1] on their roadmap [2], before doing a gradual switch away from 1Password. Any time now!

[1] https://community.bitwarden.com/t/account-switching-log-in-w...

[2] https://community.bitwarden.com/t/bitwarden-roadmap/12865

Same. Works great for my wife and I.

All that Fed money supply has to go somewhere.

https://fred.stlouisfed.org/series/M1SL

Agreed. It's beyond nuts evaluation at this point.

Reply on news.ycombinator.com