4 ms·

My topics: - Bitwarden is becoming risky to use? - the next Bitwarden? So many people recommend Bitwarden now. I am a paying customer from the first day and ha

My topics: - Bitwarden is becoming risky to use? - the next Bitwarden? So many people recommend Bitwarden now. I am a paying customer from the first day and have been using it on all my devices. Bitwarden followed my Lastpass experience, similar to what OP has described. Now, Bitwarden's popularity is troubling me. It has become already large enough to be an attractive target for attacks. The bigger it gets, the more lucrative it is for attackers. Similar to the Windows vs. OSX discussions 10 years ago: viruses spread on Windows, because it was big. Hence, I am starting to worry about using it and asking myself what "the next" Bitwarden is. What do you think? Is my reasoning going into the right direction? Do you see the point reached where Bitwarden has reached critical mass? What would you recommend as "the next" Bitwarden?

jzymbaluk 6y ago
Bitwarden is open source and regularly audited, which is not something you can say about Lastpass. Your thinking about Bitwarden becoming a more valuable target is probably directionally correct, but at least anecdotally, I think the biggest target in this space is going to remain either the built-in Chrome/iOS password managers, or Dashlane, which is a product that advertises widely on Podcasts, etc.
senectus1 6y ago
How big the target is has very little to do with how safe it is. virus' spread a lot more on windows because of MS's shit stance on security. It an even more popular OS now but the virus landscape is a hell of a lot more limited because they started to take security more seriously. They still have a way to go.
nacs 6y ago
The way that Lastpass and Bitwarden (which seems to have followed most of the security architecture of LP) is designed, it makes it very resistant to attacks. The passwords and all data are encrypted on the client side and the server has no way to decode your passwords so even if Bitwarden's password was stolen, the passwords within the accounts are as secure as the Master password you chose. Also the fact that the server side is fully open-source (and not just the client) means you could switch to using your own servers at any time.

jzymbaluk 6y ago

Bitwarden is open source and regularly audited, which is not something you can say about Lastpass. Your thinking about Bitwarden becoming a more valuable target is probably directionally correct, but at least anecdotally, I think the biggest target in this space is going to remain either the built-in Chrome/iOS password managers, or Dashlane, which is a product that advertises widely on Podcasts, etc.

senectus1 6y ago

How big the target is has very little to do with how safe it is. virus' spread a lot more on windows because of MS's shit stance on security. It an even more popular OS now but the virus landscape is a hell of a lot more limited because they started to take security more seriously. They still have a way to go.

nacs 6y ago

The way that Lastpass and Bitwarden (which seems to have followed most of the security architecture of LP) is designed, it makes it very resistant to attacks. The passwords and all data are encrypted on the client side and the server has no way to decode your passwords so even if Bitwarden's password was stolen, the passwords within the accounts are as secure as the Master password you chose. Also the fact that the server side is fully open-source (and not just the client) means you could switch to using your own servers at any time.