5 ms·

Bitwarden is a reasonable alternative, but it's important to be aware of the weak points compared to Lastpass (which IMO, makes it a good-enough-but-no-great-ch

Bitwarden is a reasonable alternative, but it's important to be aware of the weak points compared to Lastpass (which IMO, makes it a good-enough-but-no-great-choice). Autofill is relatively poor (it fails even on HN!). Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed). All in all though, I do support the recommendation, in particular, because Lastpass works extremely poorly on Firefox (at least, that's what caused my switch some time ago).

rsa25519 6y ago
> it fails even on HN! Huh, weird, it works fine for me in Firefox.
- toyg 6y ago
  Same here. I reckon some people set up their passwords manually, or didn't pay attention when creating the item, and now their URL-based autofill is screwed up.
juriansluiman 6y ago
> Autofill is relatively poor (it fails even on HN!). Autofill is much more customizable than LastPass afaik. You can both define how (domain)name matching should occur as you can have multiple entries to match. This means you can have instagram.com (as website) and androidapp://com.instagram.android (as app) which will use the same autofill entry. If you configure name matching correctly, any site should be able to provide autofill. My HN entry does match with news.ycombinator.com with default matching settings. But matching settings include hostname / domain name / starts with and even regex! > Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed). You can specify BW timeout settings. Even further, you can define if BW should lock the session (only a password is required to unlock) or if a sign-out is required. With a sign-out, you also need to provide your MFA if applicable. Time outs can happen directly (after autofill), after an amount of time (1/5/15/30 minutes or 1/4 hours) or upon closing the browser. So tbh, there is plenty to configure Bitwarden to suit your needs.
akvadrako 6y ago
> Autofill is relatively poor (it fails even on HN!). In what context? I found Autofill poor on Android for FF before I gave it the "draw over other apps" permissions. Otherwise I've only seen it fail on a few sites out of hundreds, mostly with weird login flows.
satysin 6y ago
I have yet to find a site that autofill fails on. Hacker News works perfectly for me and always has. As for Bitwarden locking (expiring) when the browser is closed, I disable that as my system is secured so locking the vault in the browser is overkill for me. My only real complaint with Bitwarden is the macOS app lacks TouchID support.
deleted 6y ago
[deleted]
Fnoord 6y ago
> Autofill is relatively poor (it fails even on HN!) HN Autofill works perfectly well for me with Firefox + Bitwarden extension on macOS (I know it also works with other combinations). If it does not seem to work, select a password field. Does it for me.

rsa25519 6y ago

> it fails even on HN! Huh, weird, it works fine for me in Firefox.

toyg 6y ago
Same here. I reckon some people set up their passwords manually, or didn't pay attention when creating the item, and now their URL-based autofill is screwed up.

juriansluiman 6y ago

> Autofill is relatively poor (it fails even on HN!). Autofill is much more customizable than LastPass afaik. You can both define how (domain)name matching should occur as you can have multiple entries to match. This means you can have instagram.com (as website) and androidapp://com.instagram.android (as app) which will use the same autofill entry. If you configure name matching correctly, any site should be able to provide autofill. My HN entry does match with news.ycombinator.com with default matching settings. But matching settings include hostname / domain name / starts with and even regex! > Also, Lastpass has a convenient timed expiry that doesn't work (well) on Bitwarden (BW will expire the login when the browser is closed). You can specify BW timeout settings. Even further, you can define if BW should lock the session (only a password is required to unlock) or if a sign-out is required. With a sign-out, you also need to provide your MFA if applicable. Time outs can happen directly (after autofill), after an amount of time (1/5/15/30 minutes or 1/4 hours) or upon closing the browser. So tbh, there is plenty to configure Bitwarden to suit your needs.

akvadrako 6y ago

> Autofill is relatively poor (it fails even on HN!). In what context? I found Autofill poor on Android for FF before I gave it the "draw over other apps" permissions. Otherwise I've only seen it fail on a few sites out of hundreds, mostly with weird login flows.

satysin 6y ago

I have yet to find a site that autofill fails on. Hacker News works perfectly for me and always has. As for Bitwarden locking (expiring) when the browser is closed, I disable that as my system is secured so locking the vault in the browser is overkill for me. My only real complaint with Bitwarden is the macOS app lacks TouchID support.

deleted 6y ago

[deleted]

Fnoord 6y ago

> Autofill is relatively poor (it fails even on HN!) HN Autofill works perfectly well for me with Firefox + Bitwarden extension on macOS (I know it also works with other combinations). If it does not seem to work, select a password field. Does it for me.