4 ms·

Bitwarden uses manual autofill which is nice. You hit ctrl shift L to fill

purplecats 5y ago
yeah i have it autofill (its a feature now) but it doesnt auto login. so i built an extension that waits for it to fill it in and then performs some safety checks and then logs in. finally the bliss i had with lastpass before i was forced to move to bitwarden.
- joenathanone 5y ago
  Can I get me some of that extension? https://i.pinimg.com/originals/cb/14/5d/cb145d466f1958ec101f4dadfb231242.jpg https://i.pinimg.com/originals/cb/14/5d/cb145d466f1958ec101f...
  - purplecats 5y ago
    here you go https://hastebin.com/cezuyehaxo.js https://hastebin.com/cezuyehaxo.js
rvz 5y ago
Well it still recognises to autofill in the password on a different subdomain as shown in the PoC by default, which is not good at all. To Downvoters: So in the PoC [0] with the default settings the author is completely wrong about their findings? even if you 'manually' autofill in the fields? So you are saying that the password DOESN'T get extracted out of Bitwarden from a different subdomain than where the login data was stored on by default then? [0] https://marektoth.com/blog/password-managers-autofill/ https://marektoth.com/blog/password-managers-autofill/
- joshuaavalon 5y ago
  There is a setting in URL of the password called "Match Detection"[1]. You can change it to "Host" if don't want it to match subdomain. [1]: https://bitwarden.com/help/article/uri-match-detection/#match-detection-options https://bitwarden.com/help/article/uri-match-detection/#matc...
  - ViViDboarder 5y ago
    > by default This is the point parent and the source article are making. Not whether or not it’s possible to be configured more securely.
Saris 5y ago
I wish it wasn't such a weird key combo though, it would be nice to do it with 1 hand.
- fomine3 5y ago
  I tend to forget that Shift and Ctrl is placed also on right side. (unless the keyboard is < 65%)
- mackrevinack 5y ago
  i use keepassxc and have auto-type it set to alt+x which is very quick to execute with either hand. you can even just use your thumb to hit both keys at the same time!
- pbhjpbhj 5y ago
  Use AutoHotKey to change it?

yeah i have it autofill (its a feature now) but it doesnt auto login. so i built an extension that waits for it to fill it in and then performs some safety checks and then logs in. finally the bliss i had with lastpass before i was forced to move to bitwarden.

joenathanone 5y ago
Can I get me some of that extension? https://i.pinimg.com/originals/cb/14/5d/cb145d466f1958ec101f4dadfb231242.jpg https://i.pinimg.com/originals/cb/14/5d/cb145d466f1958ec101f...
- purplecats 5y ago
  here you go https://hastebin.com/cezuyehaxo.js https://hastebin.com/cezuyehaxo.js

rvz 5y ago

Well it still recognises to autofill in the password on a different subdomain as shown in the PoC by default, which is not good at all. To Downvoters: So in the PoC [0] with the default settings the author is completely wrong about their findings? even if you 'manually' autofill in the fields? So you are saying that the password DOESN'T get extracted out of Bitwarden from a different subdomain than where the login data was stored on by default then? [0] https://marektoth.com/blog/password-managers-autofill/ https://marektoth.com/blog/password-managers-autofill/

joshuaavalon 5y ago
There is a setting in URL of the password called "Match Detection"[1]. You can change it to "Host" if don't want it to match subdomain. [1]: https://bitwarden.com/help/article/uri-match-detection/#match-detection-options https://bitwarden.com/help/article/uri-match-detection/#matc...
- ViViDboarder 5y ago
  > by default This is the point parent and the source article are making. Not whether or not it’s possible to be configured more securely.

Saris 5y ago

I wish it wasn't such a weird key combo though, it would be nice to do it with 1 hand.

fomine3 5y ago
I tend to forget that Shift and Ctrl is placed also on right side. (unless the keyboard is < 65%)
mackrevinack 5y ago
i use keepassxc and have auto-type it set to alt+x which is very quick to execute with either hand. you can even just use your thumb to hit both keys at the same time!
pbhjpbhj 5y ago
Use AutoHotKey to change it?