Hacker News Reader

Comment by havnagiggle | Hacker News Reader

What exactly is Bitwarden getting you if you're doing this copy process? I have only used Keepass and haven't read why Bitwarden would be superior for some scenarios over what I am already doing.

View on HN

> haven't read why Bitwarden would be superior

1. Out-of-the-box integrated sync with a dedicated default host: keepass has 8 different sync plugins, all with different levels of maintenance & UX, each for separate sync backends, all requiring separate 3rd party backend account setup

2. Consistent cross-device features & UX: Keepass has 3 browser plugins with varying levels of browser support (not sure if any have mobile support?)

On top of the above, Bitwarden is open source and allows self-hosted sync

I didn't know KeePass(XC) had sync plugins, let alone eight, since I just sync the file myself as part of the same infrastructure that syncs everything else under my homedir.

Yeah I just have my KeePass file in my own Nextcloud and I can access it on any device. I have never needed to mess with a sync plugin.

Do you sync your homedir to your phone? I presume you're an android user?

Linux user. My phone runs postmarketOS.

3. Easy password sharing, free for 2 person organizations.

Yes! This too. My partner & I have used this for shared / family / household billing accounts / etc. for years.

> What exactly is Bitwarden getting you

1.) Redundancy. Can't get at my KeepassXC?, then I try Bitwarden. Can't get at my Bitwarden? Then I try KeepassXC. Can't get access to both? Then I'm screwed (but this is unlikely).

2.) Browser extension. I like to be able to login easily to sites using their extension.

3.) LOCKSS (Lots of copies keeps stuff safe). Having a cloud-based mirror of my login entries stored in Bitwarden is marginally better than solely relying on KeepassXC.

4.) Logging into KeepassXC is sometimes more complicated than logging into Bitwarden. I have a long seven word passphrase for KeepassXC, and use a keyfile which I have to 'hunt down' in the filesystem each time I go to access KeepassXC (I have disabled the ability to store the last used database & keyfile for security reasons). With Bitwarden I just open the app and if it's unlocked, I get quick access to everything.

What does the painful process of hunting for a keyfile offer in terms of security when bitwarden on the same machine doesn't have that protection?

Thanks! I will probably just stick with Keepass but this was a nice write-up to consider.

1) I have my database replicated several places already. Cloud storage, mobile, FTP server, etc.

2) I don't use a browser extension on desktop, but I know there is one. On mobile the accessibility permissions allow it to suggest login information both in third party apps and in the browser. I've found it works fairly well. If you aren't able to open your database quickly it might not be as convenient.

3) This sounds the same as what I was considering for (1). Historical backups would be important for recovering from possible corruption, but I have not run into this yet for Keepass.

4) Understood. Bitwarden doesn't support keyfiles?

I have been close to splitting my Keepass DB up into several, but haven't pulled the trigger on that effort.

4. is ... interesting :-) You made access to KeePass more obscure for "security reasons." But fear not: "With Bitwarden I just open the app." Okay cool.

I manually export my Bitwarden vault to KeePass from time to time as well. The benefit of still using Bitwarden for me is that I can access and update my main vault from any linked device (desktop PC, laptop, phone) without needing to synchronize data between devices. It's far from an ideal way, but you can have a little more confidence that you will have access to your data (although it might be a slightly outdated snapshot of the data) even if you can't access the Bitwarden server. That is exactly what happened today, and I was still able to retrieve my password from the local copy.

My understanding that BW have superior auto-fill features and wide support for different OS. Keepass don't have auto-fill for browsers, Keepass have to rely on third-party to provide the auto fill features and various apps for all variety of OS.

I'm a Keepass user since 2006 and never had a problem with them. My database is saved in OneDrive and always keep local copy in my system. If OneDrive is down, my local copy is always there for me.

KeePassXC does have auto-fill for browsers. And also Auto-Type which allows you to enter your credentials to _any_ application possible. All this works without any third party plugins.

Reply on news.ycombinator.com