5 ms·

I would say use bitwarden rather than the built in password managers of these browsers, it does a pretty good job and you aren't tied to one browser.

• stereoradonc 4y ago
  Ditto! Set up keyboard shortcuts (or in some use case cases), I let Bitwarden fill up credentials automatically. Miles ahead of 1Password (and their toxic optimism)
• Barrin92 4y ago
  A security researcher made a strong case against this advice. Injection of privileged components into the browser sandbox as well as opening you up to a lot of IPC vulnerabilities. https://lock.cmpxchg8b.com/passmgrs.html https://lock.cmpxchg8b.com/passmgrs.html
  • rascul 4y ago
    Is that relevant to Bitwarden? At least the first vulnerability in the article does not appear to apply to Bitwarden for me here, I'm not currently able to test the other two.
    • Barrin92 4y ago
      if you use the browser extension and turn autofill on it applies to Bitwarden as well. If you use the desktop version or an alternative like Keepass, which Tavis suggests, it's not an issue.
      • rascul 4y ago
        Ahh that's it, I'm not using autofill.