3 ms·
If I'm accessing my passwords via the clients that BitWarden the company distributes, then I'm still putting my trust in the company. Where the encrypted data
by andrewaylett 5y ago
If I'm accessing my passwords via the clients that BitWarden the company distributes, then I'm still putting my trust in the company. Where the encrypted data is stored is in many ways less important.
And the irony is that the one website I can't trust my password manager to protect me from phishing attacks on is the password manager's own web interface. So I always want to log in with one of the non-web clients, and only trust the web vault if I reached it via a known-good link (like the one in the settings panel of the browser addon and mobile apps).