3 ms·
With any password manager, encryption happens client-side. A malicious or compromised host could make off with your encrypted vault, but that would not by itse
by Majromax 6y ago
With any password manager, encryption happens client-side. A malicious or compromised host could make off with your encrypted vault, but that would not by itself compromise passwords.
- colejohnson66 6y agoOP is arguing that the software could be changed to upload your encrypted version as usual, but also silently upload your unencrypted version. Either unintentionally (bug) or intentionally (tin foil hat saying NSA)
- Majromax 6y agoThat would require changes to the client as well, however, and as I understand it bitwarden_rs still uses the standard client-side Bitwarden addon/applications/apps.