3 ms·
This is the kind of thing where more paranoia is better. Their service is a big fat target. I don't understand how you can't be disturbed by that.
by heliodor 6y ago
This is the kind of thing where more paranoia is better. Their service is a big fat target. I don't understand how you can't be disturbed by that.
- SpaethCo 6y agoAll the encryption happens client-side. For this to be a problem you not only have to gain access to the blobs stored on their service, but you also have to be able to decrypt them. I expect they probably pay more attention to abnormal access than most self-hosted users would as well, so you'd actually know about a data leak faster so you could rotate your passwords.
- TheFlyingFish 6y agoPersonally, I'm more comfortable with a service that has entire teams whose entire job is finding and fixing holes in the service than I am with something I toss on a server somewhere and forget about for months at a time. Realistically, which is more likely? 1) That 1Password gets breached and loses their customer information, or 2) that I install Bitwarden on my server, somebody discovers a hole in it, I don't hear about it for a while (or do but don't have time to update), and get all my passwords stolen? For me, the second seems more likely, so I'm happy to stick with 1Password.