3 ms·

It is not someone else computer. It is your password encrypted that get uploaded. Your passwords are only decrypted locally. Feel free to check their app for th

• wmkn 4y ago
  Unfortunately because of the way Bitwarden works you should consider your passwords compromised when Bitwarden itself gets hacked - regardless of vault encryption. Especially if you ever used the web login. To access your account you need to type your master password, the same password that is used decrypt your vault. If a competent hacker gains access to the Bitwarden servers they could install a compromised login page that logs master passwords and with that gain access to password vaults. Sounds far-fetched maybe, but your password security depends completely on the ability of Bitwarden to protect their servers. The encryption is just a minor hurdle once the servers are compromised. Note that 2FA doesn’t help since it is not used for vault encryption.
  • darkwater 4y ago
    If you never use the web frontend that should not be possible (unless the local app/browser extension send the full password over the wire and not the hash).
  • skoskie 4y ago
    Right or wrong I like the way you think.
• chrismorgan 4y ago
  > Feel free to check their app for that First-party end-to-end encryption is broken by design, especially in the presence of auto-updating.