33 ms·

Bitwarden raises $100M

• stereoradonc 4y ago
  Even better! Kudos to the team. A viable alternative to 1Password and others. I agree there are open source alternatives available, but I prefer to pay for the premium version, which works across all devices. Good stuff.
• bodge5000 4y ago
  Been strongly considering switching from Dashlane (no idea why I chose it originally, but here we are) to Bitwarden for a while now. Despite some of the comments I don't think this changes anything, though I might just wait a little longer.
• stoplying1 4y ago
  As folks talk about migrating, largely to yet another (insert another startup-themed password manager), I can't help but wonder. Which has taken more time? Learning how to use gopass and a yubikey, or migrating password services every few years and paying hundreds for arbitrarily pay-walled features? Edit: idk, maybe there's some UX aspects of the password sharing features that are more important to other folks, otherwise, the diy option is not that hard, or a UX sacrifice.
• jeffalyanak 4y ago
  This makes me very glad that I switched my self-hosted password manager from Bitwarden to Vaultwarden. It implements the Bitwarden Server API so I can still use the same client applications. I strongly suspect that this new VC-funded Bitwarden will eventually close off their applications API and client applications, but with an open-source server API provided by Vaultwarden it should be possible to create new, open-source clients, too.
• latchkey 4y ago
  After posting a simple comment, now I'm getting emails from Bitwarden... "Additional security has been placed on your Bitwarden account. We've detected several failed attempts to log into your Bitwarden account. Future login attempts for your account will be protected by a captcha." Thanks HN! =)
• woodbinebeach 4y ago
  I am afraid that my free tier plan data will go away. As for the self-hosting option, I am concerned that I don't have enough infrastructure to ensure the safety of my data. I wish their backend supports cheaper static store like object storage instead of full-featured database.
• stjohnswarts 4y ago
  This worries as a Bitwarden customer of several years. The bigger a company gets the worse its treatment of customers gets. It's not 100% true but in my experience it happens most times. I guess I should just write my own probably much less secure password keeping database just for fun as a backup and export my passwords often and keep them more local and unsecured than if it were just in the cloud. I suspect they will end free tier service in the next couple of years as well.
• slap_shot 4y ago
  I shared an office and an apartment with Kyle in 2010 and I have vivid memories of him routinely talking how bad the state of password managers was at that time. I've been a happy customer since 2017. It's been surreal watching the BitWarden team do what they have over the years. Congratulations!
• renewiltord 4y ago
  Excited to hear this. The most important use case for me that is unmet with Bitwarden is a shared vault in a company that has some pernissioning etc. It would be cool if there were a Bitwarden "extension vault" that is only accessible so long as you are employed somewhere and which suggests rotation as part of offboarding etc. Anyway, congratulations and good luck. How much would I pay for that? Perhaps with ACLs and stuff I think $10 / user-month
• therealmarv 4y ago
  but why? I don't see the main core have any bigger value at all (a few millions yes, but not more)
• deleted 4y ago
  [deleted]
• yakorevivan 4y ago
• motohagiography 4y ago
  This is a smart play. They are one of the very rare consumer security products in the market and they have a lot of enterprise traction. Their average user lifetime will probably average a decade, and identity is an immensely sticky tech. Just as a channel to those users, they would be an asset to some megalithic platform (the way whatsapp was to facebook) who wanted to acquire users to sell other products into. I could see a defensive acquisition by one of them in the near term while it's still cheap. I was lucky enough to have a brief exchange with their CEO on his recent customer interview tour, and my impression was his product view was enterprise focused, which made sense in the context of this raise now. My relatively cold read was he seemed laser focused on a kind of "do what we do really well," philosophical vision on their current product, which I think is a strong asset to secure their LTCV with current customers, and that will drive their valuation. However, I get overexcited at the growth prospect because security products are never what anyone but security people actually want, and all the products in the identity space suffer from the same problem of being top down management frameworks with integration and federation as just something you say but never do. A consumer security product people actually choose for themselves and want their employers and services to integrate with because they already like the experience of it, is just infinite level growth potential in a market of slow moving dinosaurs. Okta's massive expansion in just the last decade established that the gerontocracy of enterprise behemoths was too slow footed to respond to an incursion into the very foundation of their market (user identity), and what impressed me about this raise is that I think a well capitalized startup with traction could absolutely sack it.
• Linda703 4y ago
  [dead]
• sizzle 4y ago
  serious question, is there any benefit to a password manager if you are using the Apple ecosystem via your Keychain across devices for password management with pin and faceID?
  • chmaynard 4y ago
    Not really, unless you're uncomfortable using Safari and Keychain Access.
  • valarauko 4y ago
    As a current 1Password (10+ years in Lastpass, 3 years in Bitwarden) user in the Apple Ecosystem, here the value adds for me: - Ecosystem agnostic, from before I was all in on Apple - Ties into other services I use seamlessly * Fastmail masked emails for signups * Privacy.com one time use cards/vendor locked cards for signups Other add on I'm more dubious about: - 1Password supposedly alters password suggestions based on the domain, adjusting password length requirements, special symbols, etc
• vinay_ys 4y ago
  In the next couple of years, I expect FIDO2 Passwordless Auth to be ubiquitous, natively supported by all OS platforms. Built-in authentication credentials managers within Apple and Google/Android platforms will get more focused attention to improve them significantly. I suspect this should basically render the consumer market not monetizable. So, their free forever strategy here is aligned. In corporate market, I would expect more ubiquitous integration of cloud hosted identity providers and separate SSO auth providers (which will do MFA with device bound certs, biometric auth and FIDO2 auth) with all the services and they would all be protected behind BeyondCorp style VPN solutions (think Cloudflare, Tailscale etc). In this market, I wonder how they will continue to grow.
  • dabeeeenster 4y ago
    Why is it impossible to find out what the typical user experience of FIDO2 Passwordless Auth is? Every time I try and learn it's just a sea of acronyms I've never heard of before. How do I explain FIDO2 Passwordless Auth to my mother?
    • judge2020 4y ago
      When you sign up for an online account, instead of inputting a password, your login is synced via your browser profile, or more likely, an account / app on your phone. To log in, you'll always either need to be signed-in on your browser, or scan a QR code on a computer to sign in to your account (WebAuthn over BLE, or cloud-assisted Bluetooth Low Energy (caBLE)).
    • vinay_ys 4y ago
      Most general case consumer explanation is likely this: No more passwords. Your biometric authentication along with your Apple/Google account on your iPhone/Android phone is all you need. A more detailed blurb would be: You sign-up and sign-in to websites/apps simply by responding to a biometric unlock prompt of your phone (same as unlocking your phone with DoubleClick side button + FaceID etc). Your sign-in details are saved to your iCloud / Google account. You can sign-in to the same website/app on another device (iPhone/Mac; or Android/Chrome device) by signing into your cloud account. For Pro users, there may be more advanced flow: Instead of using built-in phone authenticators, you may use a reputed third party secure authentication app paired with an external FIDO key (like yubikey) to do the same thing. In it's most secure configuration, it may combine device binding secret unlocked with biometric auth, an physical FIDO key you possess, and a cloud hosted MPC key that is used based on fuzzy signals like your device location and other fingerprint data etc. All this gives you secure multi-factor authentication that is safe against phishing, theft, loss etc.
• lvl102 4y ago
  Here comes price hikes. This is why I kept asking these guys if they had a lifetime sub.
  • themagician 4y ago
    In a world where the average hardware cycle is 1-2 years, the software cycle before obsoletion is 3-5, perpetual subscription is the only way. Software written today for consumer devices like iPhones and Android devices will break is 2-3 years if not maintained, and often much sooner than that. It sucks. Gone are the days where you could buy Microsoft Office and run it for 10-15 years.
• buro9 4y ago
  The code for the server is AGPLv3 https://github.com/bitwarden/server https://github.com/bitwarden/server , with only things in the /bitwarden_license/ directory being proprietary. The code for the mobile apps is GPLv3 https://github.com/bitwarden/mobile/blob/master/LICENSE.txt https://github.com/bitwarden/mobile/blob/master/LICENSE.txt The code for the clients is GPLv3 https://github.com/bitwarden/clients https://github.com/bitwarden/clients These are all copyleft... with a CLA (contributor license agreement). It's the CLA that allows them the ability to dual-license for the server. The VCs must really believe the company can produce a product based on Enterprise sales which would deliver a value North of $1B. And perhaps they can, as Bitwarden as we know it could be considered a strong beachhead to allow them to expand into other auth markets that have high value (hello Okta, Auth0, etc). But this doesn't seem that scary for Bitwarden users at this point.
  • Trung0246 4y ago
    What's in the bitwarden_license folder btw?
    • sodality2 4y ago
      Looks like some code regarding Bitwarden Enterprise
  • Jenk 4y ago
    > hello Okta, Auth0, etc YSK they are one and the same. Okta bought Auth0 in 2021[0] [0]: https://www.okta.com/press-room/press-releases/okta-completes-acquisition-of-auth0/ https://www.okta.com/press-room/press-releases/okta-complete...
• elric 4y ago
  Good. Maybe now they can finally get around to fixing some of the rough edges for enterprisey customers. Onboarding new users is a pain. The audit UI is a pain. There is (still!) no way to share a password with another user within the same organization (except by creating a Collection and granting access to that, that's not what you want when you're creating an email account for a user and want to give them their initial password). That, and their UI is pretty cluttered and ugly, though the latter is subjective.
• euclaise 4y ago
  I really like bitwarden, but I do wish their internal API was more clear/open so 3rd party clients were easier to write. There have been a few times where I've been on an obscure OS on a device too slow to run a modern web browser, but wanted to use Bitwarden.
  • mdaniel 4y ago
    As another perspective, by documenting that API, they're promising to retain backward compat and the documentation burden that comes with it. As long as it remains an internal API, they can fiddle with it as fast as they can get their old codebase off of it Since their codebase is in the open, and there's already at least one other Open Source implementation, that's likely about as "clear/open" as its going to get unless this newfound $100M spawns an API team or something
• SlickStef11 4y ago
  I love Bitwarden. Super happy about this. Congrats to everyone!
• rrauenza 4y ago
  How is the user experience of bitwarden vs lastpass? I find lastpass clunky.. ipad app is flakey (or is it the iOS integration layer itself?) Integrating with chrome, iOS, etc, I assume is a difficult problem so I've assumed most password managers have the same issues. But it drives me crazy they haven't innovated much either, e.g., searching for specific passwords in my vault. I have to export it to excel and then look for them, then make sure / hope that the excel file didn't drop any temporary file copies anywhere.
  • MichaelVangard 4y ago
    I just logged in via Bitwarden on Safari to reply here. My vault is self-hosted via the Vaultwarden project, which is a lighter-weight implementation written in Rust. It is hosted on the free tier of GCP, which is proving more than enough for personal use. The self-hosted server interoperates flawlessly with the official Bitwarden clients. I have no complaints regarding the user experience on MacOS/iOS/iPadOS. However, I was not a fan of the user experience on Android. I recently setup Bitwarden for a couple family members who use Android and it definitely didn't feel as frictionless as it does on my Apple devices. Not sure if that's because of how Android implements password managers or how the Bitwarden app for Android is implemented.
• truthwhisperer 4y ago
• 2pEXgD0fZ5cF 4y ago
  Well, guess it's time to cancel my subscription and start preparing my departure from Bitwarden...sad to hear this.
• plaguepilled 4y ago
  This is fantastic. Bitwarden is a great service and them having more resources to do yet another thing The Right Way is only a good thing in my books. Really keen to see what they produce.
• unixbane 4y ago
• webworker 4y ago
  Well I supposed authn landing in Safari this fall is good timing (for us) as a backup option
• mikestaub 4y ago
  Maybe with this new money they can fix the only bug stopping me from ditching LastPass https://github.com/bitwarden/clients/issues/2304 https://github.com/bitwarden/clients/issues/2304
• tobiasbischoff 4y ago
  Oh $100m VC injection, exactly how 1Password started going to garbage..
• edwnj 4y ago
• deleted 4y ago
  [deleted]
• aborsy 4y ago
  I would never have someone else manage my passwords for me. You have to trust the server. It could serve the user with malicious JS code or an app update at any time. You can self host it though.
  • shapefrog 4y ago
    Host your own bitwarden instance then.
    • j7j7j7j7 4y ago
      I'd rather use KeepassXC with Syncthing
      • Melatonic 4y ago
        Yea KeePass (any flavour generally) + any of the sync tools works super well. Plus you do not need to trust the sync tool company to also be your password manager company :-)
  • michaelmior 4y ago
    If you self host, your server could still be compromised. I think the primary thing making that unlikely to happen with a self-hosted instance is being a very small target.
  • veltas 4y ago
    You might not, but the vast majority of people unfortunately already trust companies like Google with their passwords. Likely though they will be stored and kept properly, and there won't be leaks. I only said 'unfortunately' because it hands dependence over to Google. Loss of access is the main concern.
  • chrismorgan 4y ago
    I use Vaultwarden (formerly bitwarden_rs) just for myself. I still use the Bitwarden extension in Firefox, which is a similar attack surface to what you describe, though probably a shade less vulnerable in practice. I’d like to replace it with something leaner and functionally superior (it’s pretty heavy, and has the major problem of mostly not working in Private Browsing windows, and some other timing/focus issues that I suspect stem from the same bad design), but I have too much other stuff I want to use. I don’t serve the Bitwarden web interface on my server at all, but I could.
• deanmoriarty 4y ago
  I moved from LastPass to Bitwarden a few years ago because of the nimbleness and simplicity of it, it felt so refreshing. How much time do we have left before Bitwarden gradually becomes as bad as LastPass for the sake of high growth? 2-3 years? I’m not passing any judgement on this raise, entrepreneurs do what they gotta do.
  • xoa 4y ago
    >How much time do we have left before Bitwarden gradually becomes as bad as LastPass? 2-3 years? I’m not passing any judgement on this raise, entrepreneur do what they gotta do. Bitwarden though actually has an API, and in turn interesting community implementation potential such as the Rust-based Vaultwarden [0]. While I agree seeing them get a huge round does raise some concern in terms of the revenue generation pressure (1Password sticks in my mind as a worse example though with their switch to forced subs-only, no local/non-1P vaults, abandonment of native apps etc), to me the real sign would be if they broke self-hosting. But even so, of course with self-hosting one could simply stop there. Doesn't feel like quite the same situation as 1P or LastPass where one was really in a fully vs partially proprietary system. I'd be OK with paying for updates to quality clients though so long as it was a regular payment system (not paying means staying on that version vs having it stop working). ---- 0: https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
  • deleted 4y ago
    [deleted]
• nicoburns 4y ago
  Well that’s annoying. I guess the clock is ticking on Bitwarden becoming user hostile. I can’t see how they’ll be able to produce a return on that investment at their current price points. Having said that, I do think there is an opportunity for Bitwarden to expand into application secret management, and that could be a lucrative market with big enterprise customers if they get it right. The announcement seems to be a generic “nothing will change” announcement though, which doesn’t inspire confidence as: - These are almost always reneged on later - Clearly something has changed (or why bother getting investment), they’re just not telling us what “we can deliver on our roadmap more quickly” could not possibly be more vague.
  • deleted 4y ago
    [deleted]
  • lathiat 4y ago
    I agree. That’s a huge investment for a product with a currently very low individual user price. I expect to see a rapid push to enterprise with individual users left behind and a lot of broken stuff along the way :/
  • masklinn 4y ago
    How much they chase growth and how much further investment there is will probably be one of the big concerns. Also how much ROI the investors expect. The market does seem to have space, 1password has an estimated ~235m revenue, and lastpass and dashlane ~70m. And all of them are quite a bit larger than the latest headcount I saw for bitwarden (reap. 800, 400, and 400, versus <100 for BW). But it is worrying, especially with bitwarden having low TCOs currently, especially for the free-er side of the offering.
  • deleted 4y ago
    [deleted]
  • Cederfjard 4y ago
    > I do think there is an opportunity for Bitwarden to expand into application secret management You mean like they mention in the announcement that they will be doing?
• leoedin 4y ago
  In many ways it's a shame when a useful tool turns into a high growth startup. They're going to hire a bunch of developers who will need to justify their existence by adding features, they'll probably eventually either fail or get purchased and shut down. And then all the overly complex applications will start to rot. What's wrong with saying "this is a useful tool" and leaving it at that?
  • shapefrog 4y ago
    "A million dollars isn't cool. You know what's cool? A billion dollars."
  • deleted 4y ago
    [deleted]
  • usrusr 4y ago
    Particularly if it's a trust-centric product like this. Sure, I wouldn't expect outright secret exfiltration no matter how bad it gets, but switching password management providers isn't exactly what you want to happen on a regular basis. (yes, this form of lock-in has most likely been a big factor in the investment decision)
• noncoml 4y ago
  It’s the password manager of my choice. I hope they manage to survive. Maybe they should try increasing their annual fee. At $10/year it’s a steal
  • bogwog 4y ago
    I wonder what their costs are like? I'm not familiar with all the features of Bitwarden in particular, but a password management service is basically E2EE cloud storage for very tiny files, a simple account system, and then a bunch of clients. Building and maintaining clients for all operating systems and browsers probably costs the most, but it can likely be done by 1 or 2 full time engineers. Or am I completely underestimating the complexity of something like this?
• NickHoff 4y ago
  Bitwarden already does one thing well. It's everything I'm looking for - open source, costs money but not much ($10/yr), 2FA, clean interface. I'm happy for the new investment, but I hope they don't start adding new things just for the sake of growing. Also - to the people who analyze funding rounds - $100M sounds like a huge amount to me. Why would a password manager need so much money?
  • alex_suzuki 4y ago
    Marketing
  • pavlov 4y ago
    Enterprise sales presumably? A $100M round probably means a valuation around $500-600M. They now need to grow the company to a couple billion so it can either go public (when the IPO market is alive again in a few years) or be sold to a bigger enterprise player. $10/year customers are completely irrelevant to a company at this stage. Open source is nice as a sales bullet point, but not a central focus.
    • GekkePrutser 4y ago
      I don't really want them to grow. Growing usually means overinflated expectations and when they aren't met by the new products they will try to retrieve the shortfall from their existing customer base with additional monetisation, driving them away in the process. I hope it won't go this way here but such a cash buyin is usually the start of a difficult time. > $10/year customers are completely irrelevant to a company at this stage. Yet it's exactly the plan most customers and supporters would be on. So in other words, we don't matter anymore. This is why we can't have nice things :(
      • noirbot 4y ago
        When 10/year is often less than .01% of even a junior developer's salary with benefits, then yea, that does kinda mean we can't have nice things, if nice things require a few devs to implement. We've all gotten so used to getting things where the VC discount was already fully priced in over the last decade that we're deeply conditioned to expect everything to be sold at VC subsidized prices, which it turns out isn't really economical for most non-VC backed businesses to sell at. I'm sure someone will, like clockwork, reply to me that that could be done by one developer in C, sold for $0.50 and then never patched again because UI designers just mess everything up and no one should have a smartphone anyway. If that's your idea of "nice" then you're likely living a happy life, but if you expect a UI and reliability like even oldschool 1Password or Lastpass, then $10/year isn't buying you that level of development and support.
• sneak 4y ago
  The trend of open source spyware is really worrisome to me. More often than not these corporate open source projects include spyware features (Bitwarden included) that phone home without user consent. They claim selfhosting is a goal, yet their published client will report on your activity to Microsoft without your consent.
  • endigma 4y ago
    Citation (code snippet(s)?) please.
    • dwbit 4y ago
      Bitwarden only uses Visual Studio for crash reporting, but you can skip this altogether by grabbing the F-Droid build or self-hosting. More info here: https://bitwarden.com/help/security-faqs/#q-what-third-party-services,-libraries-or-identifiers-are-used-in-my-bitwarden-account https://bitwarden.com/help/security-faqs/#q-what-third-party... F-Droid: https://mobileapp.bitwarden.com/fdroid/ https://mobileapp.bitwarden.com/fdroid/ Self-hosting: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/
      • mdaniel 4y ago
        One should exercise caution about their on-premises installer, as they play fast and loose with version pinning. It's like many things in life: it works fine until it doesn't, and then debugging it will be some "oh no"
    • pbhjpbhj 4y ago
      Not sure why dwbit's comment got killed, they furthered the conversation and sourced information well by, inter alia, linking to "What third-party services, libraries or identifiers are used in my Bitwarden account?" on Bitwarden's FAQ (https://bitwarden.com/help/security-faqs/#q-what-third-party-services,-libraries-or-identifiers-are-used-in-my-bitwarden-account https://bitwarden.com/help/security-faqs/#q-what-third-party...).
• duiker101 4y ago
  Bitwarden is just great! One of the few pieces of software I am really happy to pay for.
• wanderingmind 4y ago
  Ok I have been putting off for sometime now, but looks like it's time to learn to host Vaultwarden
  • luoc 4y ago
    It's ridiculously easy, especially if you use SQLite. The only downside IMO is that they take the Bitwarden frontend as is which expects the full feature set to be available. For instance, if you disable email 2fa via the admin interface (the only component vaultwarden add to the frontend), trying to set it up in the app fails silently.
• yewenjie 4y ago
  > The Bitwarden business model will not change Bitwarden remains committed to A fully featured free version, forever An open source architecture The ability to self-host Advanced business features This is great!
  • 2pEXgD0fZ5cF 4y ago
    > This is great! Why? What is a promise like that supposed to be worth? Even if the people making it are completely honest when saying this (which I now doubt), once leadership changes this will go out the window quick. This is in line with "Keeping our users happy is our main priority" and other quotes from the infinite pool of empty PR speak.
  • Macha 4y ago
    If you can trust that will stay at the end of the honeymoon, which is very much not a given in these cases. At least vaultwarden is independent and someone can fork the clients when needed.
    • ryukafalz 4y ago
      Right - the benefit of FOSS is that we can keep using it as-is if we need to. I think that leads to excellent business incentives from the user’s standpoint. I’m currently a paying Bitwarden customer for convenience’s sake, but if they start messing it up I’ll just go host it myself.
    • zuhsetaqi 4y ago
      How is vaultwarden more independent than bitwarden? Aren't they both FOSS and can be forked?
      • acatton 4y ago
        bitwarden server is mostly written by bitwarden's CTO. [1] If tomorrow bitwarden decides to do "a mongodb" (= violating the AGPL, and make it closed-source), you would have to spin up a new community to maintain the AGPL fork. [1] https://github.com/bitwarden/server/graphs/contributors https://github.com/bitwarden/server/graphs/contributors
• running101 4y ago
  Keypassxc,keypassxc browser plug-in, strongbox app for iPhone. Cloud drive of your choice for syncing. Works well
  • freeplay 4y ago
    This is the stack I used before switching to bitwarden/vaultwarden. Couple of reasons why I switched: - I selfhost it on my NAS so I don't have to depend on a 3rd party to sync all of my password (even though they are encrypted). - If I need to access my passwords from a new/temp machine, there's a web UI I can access very quickly - The client is much prettier and nicer to use. The KeyPass clients all felt very dated and clunky.
  • Random_Person 4y ago
    I've been on KeePass + Dropbox since Dropbox first became a thing and I have yet to find a reason to do it any other way.
  • sha-3 4y ago
    Or SyncThing. This setup works and more people aren't considering it. The UI is great and the desktop app is not Electron based.
    • blep_ 4y ago
      I used to do this. I finally had to switch off of it because the Syncthing Android experience is so bad (necessarily, because Android is bad). I had many instances of not noticing Android had killed the Syncthing backend again despite being explicitly told not to, and then I had two out-of-sync password databases and would have to go merge them again. I'm still bitter about it, because Syncthing as a syncing layer is so much more elegant than everyone implementing their own server and sync protocol.
• bilekas 4y ago
  This is interesting I guess. But can't say it's something to be excited about. I've been using vaultwarden purely because I wanted to play around with rust and it turned into my favourite manager of all time. 10/10 would recommend!
  • yewenjie 4y ago
    But isn't it just a clone of the Bitwarden server without any extra feature?
    • fyvhbhn 4y ago
      What's your point?
    • napkin 4y ago
      Not 'just a clone'. vaultwarden is based on a totally different platform, and is less resource hungry. In particular, it consumes much less RAM.
    • chrismorgan 4y ago
      I’ve been using Vaultwarden for just myself for at least a couple of years now, and it’s at 32MB of disk space (<3MB of icon_cache, <1MB of database, the rest app). The current server process, at six weeks of uptime, is at just under five minutes of CPU time (average usage 0.01% of a core), and just under 24MB of memory used (RSS). That’s feature. (As a matter of fact, it’s grown quite a bit since I started using it; it used to be under 20MB of disk space and 10–15MB of RSS.)
      • wpietri 4y ago
        I really miss seeing numbers like that. I'm in something like my 5th week of a Dropbox support ticket where they seem to think it reasonable that the headless client uses an extra 100MB of RAM every hour, eventually using 20-30GB of RAM, at which point I restart it and watch it start climbing again.
      • xani_ 4y ago
• vishnuharidas 4y ago
  I always enjoyed the value that Bitwarden provides: free to use, password generator, and a vault to keep other texts. But somehow I never got the TOTP working. Once I locked out of Bitwarden because of Cloudflare blocking my IP address for some unknown reason. I restarted my router and the problem got fixed.
  • infinityio 4y ago
    > But somehow I never got the TOTP working. I think bitwarden's TOTP generation is a paid feature, but it still provides the option to store the secrets in the free version
• fyvhbhn 4y ago
  Looking forward to autotype
• RcouF1uZ4gsC 4y ago
  This actually worries me. Bitwarden will now be pressured to try to grow and monetize to make a return on that investment.
• alberth 4y ago
  Does vaultwarden have plans to reimplement everything Bitwarden does so that we another option?
  • elashri 4y ago
    Not everything, on their wiki page (1) they have a list of missing features. They alao state that some of them probably are not going to be implemented. At least unless someone contributed any of them. [1] https://github.com/dani-garcia/vaultwarden/wiki#wiki-pages-b https://github.com/dani-garcia/vaultwarden/wiki#wiki-pages-b...
• senectus1 4y ago
  does bitwarden scale up to 20-30-50 thousand users?
  • jillesvangurp 4y ago
    Why would you share passwords with that many users?
  • draugadrotten 4y ago
    I would love to hear the battle stories from a helpdesk from a 20K+ rollout of bitwarden. The UX might be a bit uphill for non-techies. (Example: Tab, Vault, Send, Generator, Settings are what is displayed for the main browser interface. Can you guess what they do? Selecting a Keyboard icon is "view account".)
• Octabrain 4y ago
  Glad for them and I really hope them to succeed in the long run, engrosing the list of successful bussiness based on OS. As a side note, I've been tempted so many times at this point on getting a payed subscription and getting rid of my "keepass+keepassdb sync via Google drive+keepass keyfile local copy on each device" for the sake of making things simpler. I've read how the internals work, checked the auditories, read forums etc. Everything looks great, but I am always paranoid of some security issue arising and my passwords being leaked. I have my entire life pretty much on my password manager and that being exposed would be disatrous at so many levels. Probably just me being irrational.
  • worble 4y ago
    I mean if your current setup works, why change it? I just hope you aren't too reliant in GDrive if your account ends up getting nuked as I've read so many times. While I recommend Bitwarden to my not-so-technical friends, I don't think I'm ever going to move away from my Keepass/Nextcloud setup, it just works for me.
  • tibanne 4y ago
    Only irrational thing there was your last sentence.
  • danparsonson 4y ago
    Maybe some sort of self hosting arrangement would work for you? I self-host Bitwarden behind a Wireguard VPN so it's only visible to devices I've authorised. Self-hosting comes with it's own risks of course but you would at least be in control of your data.
    • nabaraz 4y ago
      Interesting approach. Any blogs you could point me to? I am also looking to self-host Bitwarden.
      • danparsonson 4y ago
        For myself, I just followed Bitwarden's own instructions to get the server set up: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/ As for Wireguard, this looks pretty comprehensive: https://dev.to/tangramvision/what-they-don-t-tell-you-about-setting-up-a-wireguard-vpn-1h2g https://dev.to/tangramvision/what-they-don-t-tell-you-about-... There are nice mobile clients available for both BW and WG.
• RileyJames 4y ago
  We use BitWarden at work, we use their business/hosted offering. We pay them $3600 per year. Why is everyone so concerned? They’re popular enough in businesses. Their product is great for teams, hence why we pay for it. I’ve found it much better than alternatives. The killer feature for me has been safer account sharing, including 2FA (and I know it makes it somewhat redundant, but it’s safer than turning it off completely)
  • dmix 4y ago
    Indeed, they already have a business model, they won't need to cannibalize their open source password manager to make money here. They just need to grow the business side + offer new auth related services as they mention in the article. LastPass tried to grow the B2C business which put more stress on the consumer product.
• m-p-3 4y ago
  I'm quite happy with the premium service, and I see myself staying there for the foreseeable future.
• assholeconny 4y ago
• artogahr 4y ago
  Yeah it's nice and all but I wish they brought fingerprint auth to Linux already: https://community.bitwarden.com/t/linux-fingerprint-and-or-biometric-support/16715 https://community.bitwarden.com/t/linux-fingerprint-and-or-b...
• t6jvcereio 4y ago
  What's wrong with KeePassXC?
  • Tajnymag 4y ago
    Much more difficult syncability between desktop and mobile. Similarly, sharing a vault between multiple users is also quite more involved.
    • t6jvcereio 4y ago
      Sounds tempting, but my experience has been that when these nice companies raise a lot of money they go to shit. Dropbox comes to mind. Can you even imagine what kind of stuff they had to tell their investors in order to get 100m?
      • Tajnymag 4y ago
        That's where Vaultwarden (https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden) comes in. You can use the official Bitwarden clients and fully host the backend by yourself. You don't need to trust Bitwarden with your data and can probably upgrade only when you need to, as the clients surely have some sort of backward compatibility.
• kinnth 4y ago
  Bitwarden replaced lastpass for me and really i'd never go back. My only gripe is filling in card details, there is never a floating icon to click to do it automatically, you need to go to the menu bar and select the card. Apart from that all perfect!
  • Corrado 4y ago
    The only thing I miss from LastPass is the ability to store different types of credentials. Bitwarden offers a couple of basic things (login, credit card, identity, secure note) but LastPass allowed you to create new, custom credentials. One of the things I used to store in LP was AWS IAM creds. Sure, you can store it in a Bitwarden "secure note" but it sure was convenient to have a defined format for it.
  • thatsnotmepls 4y ago
    After lastpass announced you could only have 1 device in the free tier, I was gone too.
  • Vaslo 4y ago
    Same - between the great product, open source, and vault warden for self hosting, I have no issues giving them 10 bucks a year for them to host for me.
  • jakswa 4y ago
    "My only gripe is filling in card details, there is never a floating icon to click to do it automatically, you need to go to the menu bar and select the card." At one point I became convinced that this is actually a security feature. If I recall, an article demonstrated tricking users into entering their master password using those "in-browser" decorations. I could write some html/js to build your password manager icon/etc and trick you into thinking I'm your password manager? I now accept it as a necessary UX chore to leave the browser page, but would be interested in being wrong.
• andrewon 4y ago
  After lastpass, I am a little wary about password managers. Not sure when they plan to "monetize" me. Been using google password since lastpass turning on paywall. What's your opinion of Bitwarden? Reasons to give it a try? Having all passwords locked up is no fun.
  • ollyculverhouse 4y ago
    They charge for a premium plan, as per the article. We pay for a premium plan at our company.
  • nacs 4y ago
    Unlike both Google password and Lastpass, Bitwarden is open source on server and client side. This means if worst comes to worst, the community will fork the code and set up a new server or 2. I switched to it after the Lastpass changes and BW literally has everything LP had plus more. It even imported my thousands of LP entries on first try with no issues.
• intrasight 4y ago
  Honest question: what's the main benefit to using a password manager?
  • darknavi 4y ago
    Being able to have strong passwords without manually writing them down somewhere. All of my passwords are now at or near the maximum allowed character limits/complexity. A lot of password managers have some simple UI to show you your weak passwords and it's a but of a fun game when you first import all of your passwords. Take a few days and browse all of your accounts and either delete the account or beef up the password!
  • red_trumpet 4y ago
    Imo: Effortslessly different passwords everywhere. So if one of your passwords is leaked, you don't have to change passwords for all accounts.
• timwaagh 4y ago
  Happy user here. Congratulations to the company. Would be cool if they invested some into autofill functionality for their Android app because that doesn't seem to work as it should.
  • xd1936 4y ago
    My experience with the app's autofill using both the Android Autofill Framework and the Quick-Action Tile has been great. Can you talk more about what doesn't work well for you?
    • bmurphy1976 4y ago
      I'm not the op but I find the Android experience to be pretty terrible. It almost never gives me the option to auto-fill my passwords and when it does it's usually because I already went out of my way to open Bitwarden. It's very inconsistent and frustrating. I'm not running any weird Android version either. Pixel 5, stock OS, always up-to-date. The thing is, I've never used any other password manager on Android so I can't tell if the problem is Bitwarden or if the problem is Android.
      • coldblues 4y ago
        Have you checked if it's enabled in your accessibility settings? It needs to overlay itself over other apps. After having enabled it, it started working fine.
        • bmurphy1976 4y ago
          As far as I can tell it's enabled. The only other option I see is an option to turn on an overlay button but I definitely do not want ANY app drawing a button on my screen 100% of the time.
• Svoka 4y ago
  So many people here praising Bitwarden. I were using multiple password managers, but stuck with 1Password. Their last update is atrocious. I tried switching to Bitwarden and forced myself to live with it for 3 months. I gave up when it lost generated password. Apparently it is quite common with Bitwarden and bad connections, which I have a lot travelling to remote locations where I actually need to generate passwords. Both app and server need so much polish. Like this is literally like touching something from 00s and everyone seems to be content with it. I truly hope Bitwarden would put money to better their app and technology, focusing on User Experience, not on feature checklist.
• radiKal07 4y ago
  Any Apple-devices users here? Why would I use this instead of Apple built-in password manager?
  • ErneX 4y ago
    I use Bitwarden mainly because I can self host the server (vaultwarden). And even though I don’t use Windows much, it’s nice that I can use the win client there.
  • deliriumchn 4y ago
    other than getting out of icloud passchain jail, none. Personally I use bitwarden so I can have unified access to passwords on my windows laptop, iphone and android phones.
  • selykg 4y ago
    I think the biggest is simply having access to your data on non-apple devices and non-apple browsers. I.e. using it in Chrome or Firefox or whatever browser you want, as long as there's an extension that supports the browser it's likely available. You can store a lot more data in Bitwarden as well, including custom fields, so you aren't stuck with just a username and password and optional 2FA. With Bitwarden you can do security questions, a notes field, etc. Sharing with family is another big feature. Sharing your cable login, wifi password, streaming services, etc. There's a whole list of them, but I think those are sort of the top 3 for me.
    • sleepybrett 4y ago
      Keychain supports a 'secure note' type item which is just a blob you could drop some structured data into, but no way to specify a custom fancy form.
      • selykg 4y ago
        Right, but I often leave notes in my login items themselves. If the account doesn't use an email address to authenticate I might just put the email address in so if that email ever gets shut down I know which accounts need to be migrated, as an example of why I might do that.
• MaKleSoft 4y ago
  If you're a Bitwarden user and this doesn't worry you, you haven't been paying attention to the history of almost every company that has accepted VC funds. It doesn't matter how well intentioned the founders are - once you accept that kind of money, it's not your product anymore. You are now in the business of making money, nothing else, and those skewed incentives will start bleeding into their product and business practices sooner or later. As a company, Bitwarden has been a huge role model for me, and I hope they'll be the exception to the rule. But $100M is a lot of money, and I simply can't imagine it having a net-positive effect on the company and product. But we'll see... For anyone looking for a bootstrapped, open source alternative to Bitwarden, check out Padloc: https://padloc.app/ https://padloc.app/ https://github.com/padloc/padloc https://github.com/padloc/padloc (Disclaimer: I'm the founder)
  • tut-urut-utut 4y ago
    Now that you criticized Bitwarden for accepting the funding, please explain how is your approach different. Are you really not interested in monetization of your own product, and developing it only for the benefit of your users, without any economic incentive from your side?
  • stjohnswarts 4y ago
    Thanks for the recommendation of padloc. I will be checking it out tonight. I really enjoyed my time with Bitwarden, it was quiet and calm and no sudden surprises.
  • cdata 4y ago
    I don't have a well-formed opinion one way or the other, but it is interesting to me that this comment made it to the top of HN. By contrast, a submission about Tailscale raising the same amount of money had comments that simply sounded exuberant about the implications (https://news.ycombinator.com/item?id=31259950 https://news.ycombinator.com/item?id=31259950). Is it just that our anticipation (or foreboding) of the effects of capital infusion is biased by our priors about the company? Or, some other reason?
  • cies 4y ago
    Questions: * What makes you invincible to investment? * What makes you different from BitWarden? (they are also opensource, might have been bootstrapped too, also claim being autdited) You seem to only really be "an alternative", which is great, but you kind of oversell it I think. * "I simply can't imagine it having a net-positive effect" --> or do you mean on "your" company? Because, you seem to also sell a product: access to the hosted solution of your open source product. * Open source BitWarden server-side API implementations exist... Even in Rust (not that that matter that much given the nature of e2e encryption). * Are you not interested to one day provide an enterprise tier over you family tier? Disclaimer, I'm a satisfied user of BitWarden's free tier for some years. So here my main gripes with BitWarden: * There is an option to send them your password file for them to import it. This goes against their e2e philosophy that I believe it should have huuuuuge red tape, and it does not. They should deliver this type of functionality in a manner that I can run it on my local machine. * Horrible UX. I've often been searching where they hide the save or edit button this time. You're product looks nicer in this department. Good luck with your product! I'm a little busy, but I may give it a try some day. To me there is a safety in BitWarden not going belly up, and alternatives (self-hosting and your product) existing.
• jabart 4y ago
  Congrats to the Bitwarden team. Also wanted to mention it's a c# (dotnet) project for those who say dotnet isn't for startups.
  • CharlieDigital 4y ago
    .NET/C# SV startup here. Very encouraging to see the stack getting a big funding round. .NET/C# is a very underrated backend stack for startups. Stable, mature, secure, supported by one of the tech behemoths.
  • P5fRxh5kUvp2th 4y ago
    Why would .net/C# have anything to do with the success or failure of a startup? Is this some weird SV bubble thing I'm seeing?
    • jabart 4y ago
      Kind of? It's been labeled enterprise in the past and comments here suggest it's frowned upon. It still ranks high in StackOverflow's survey too.
    • CharlieDigital 4y ago
      C# is a rarity in SV and startups in general. There's a resourcing constraint for a team hiring only geographically in SV. SV and startups are dominated by JavaScript/TypeScript and Python. It makes the parts of the team a bit more plug-n-play and in some calculus, makes it easier to grow the team as the company grows. There's also a bit of cultural asymmetry that may make it harder to hire experienced senior C# engineers. C# tends to be heavily used in enterprise so a startup competing for those resources may have a hard time because of that asymmetry with such engineers seeking more stability (both in terms of employment and codebase). Startups are built to go fast and break things which is the cultural opposite of enterprise where you plod carefully, plan, test, document, release, repeat. There's always some consideration that C# may be a liability at due diligence. I can understand to some extent since it's much easier to hire for JS/TS or Python in SV than it is to hire for C#. Not that it can't be done and C# as a language is close enough to TS that a strong TS backend engineer can easily be trained to C#.
• ChuckNorris89 4y ago
  I'm not referring to Bitwarden here but isn't this the standard M.O. of any SV startup? 1. Release great product for free 2. Attract as many free users as possible to signal growth to investors 3. Keep running the unprofitable free tier at a loss as long as possible using your massive VC war chest, while locking in your users with various gotchas 4. Once you reach critical scale and gained mass user adoption and you've obliterated your competition with your bigger war chest, start monetizing and rentseeking your locked in userbase and squeezing them so the VC investors can start getting their money back or cross your fingers for an exit from a FAANG with big pockets 5. Gain a lot of negative publicity, so now a lot of startups pop up like mushrooms after rain, to poach your disgruntled users and compete with you using the exact same M.O. you did. Rinse and repeat. Did I miss anything?
  • sammorrowdrums 4y ago
    4 also could add “try to avoid 5. by drawing up the regulatory ladder (such as YouTube becoming a bastion of large scale copyright enforcement)… so that it’s virtually impossible for startups to join the space.”
    • robertlagrant 4y ago
      Easiest way to do video copyright detection as a new video platform is to upload every video to Youtube and watch what it does.
  • elforce002 4y ago
    This is frighteningly specific.
  • MaKleSoft 4y ago
    You're absolutely right. Of course there is no guarantee that whatever alternative you seek won't turn out the exact same way. But unfortunately all you can do to punish that kind of behaviour is to vote with your wallet and move somewhere else. And hope it'll turn out better this time... There ARE people out there who are trying to build a profitable, ethical business instead of chasing unsustainable growth. Unfortunately the only way to find out who they are is by giving them a chance...
• bentt 4y ago
  More competition in this space is good for users.
• javajosh 4y ago
  That is a LOT of money. $100M. That's enough money for ~50 people to live on $100k/year for the rest of their lives. You could pick 50 thinkers, scientists, artists and say "hey you never have to work again, just do your thing". But instead you invest it in a startup that will almost certainly burn it up in a couple of years of 7 figure salaries for execs and fail. What a waste.
  • AmericanChopper 4y ago
    You could always get your own $100M and spend it however you like. Incidentally I have worked at more than one startup that had a burn rate of about $100M/year, and most of it went to engineering and sales salaries. The execs tended to take little to no cash comp.
  • YetAnotherNick 4y ago
    It's not giving away money. There is clear goal of getting more money back than they gave.
  • ndand 4y ago
    Not for the rest of their lives. 50 people can live on $100k/year for 20 years.
    • mrorbitman 4y ago
      if you assume typical stock market returns, ~$2M is enough to retire on and live on $100k a year of interest gained alone.
      • cma 4y ago
        Assuming you are using recent interest rates. If you mix in recent inflation rates too it doesn't work out in inflation-adjusted dollars like that, though hopefully a lot of that is transitory from covid (or maybe we have something worse than covid in the future).
• Sytten 4y ago
  Ho the sweet irony of people praising them over 1password not two weeks ago. Queue the typical HN, "I switched from Bitwarden to X" in a couple of weeks.
  • InTheArena 4y ago
    It's interesting to see the tone change. Some similar points being rasied, but without the "1Password is the anti-christ" tone of previous discussions.
  • nacs 4y ago
    The differentce is that Bitwarden is 100% open source (clients and server). If they do something stupid, I'll run one of 2 OSS servers available and it's done (or have someone else host it for me).
• bborud 4y ago
  I switched to Bitwarden when LastPass started using silly tactics to make customers pay. I didn't switch because of the price - the service pricing of Bitwarden was a pleasant surprise. I switched because I lost all trust in LastPass. Managing credentials and sensitive information is all about trust. The second I lose trust in that kind of service, I don't just stop using it, I will most likely never even consider coming back as a customer and I will warn people against them. I don't give second chances to services that are trust based. I'm pretty happy with Bitwarden so far. But if they betray my trust I'll be out of there in a day, never to return. I switched from LastPass to Bitwarden in a day. LastPass never gets a second chance. What the VCs have to understand is that if their greed makes them push Bitwarden to engage in silly tactics, they risk driving away their customer base.
  • TheKarateKid 4y ago
    LastPass pricing model is what turned me off. I am happy to pay for services I use regularly, but I remember the pricing model didn't seem appropriate for what they were offering. The short cutoff period added insult to injury. I checked out Bitwarden and it seemed like a better version of LastPass that just happened to be free. Their paid model doesn't appeal to me so I don't subscribe, but I would enjoy paying if they offered something that did. (Off-topic: Bitwarden seems like an exact LastPass clone all the way down to the UI. Do they share a similar codebase or something? Like was one forked from an OSS version of the other?)
    • godelski 4y ago
      Same, I even remember paying for LastPass for a bit. It was more that I wanted to support a service I liked (same reason I pay for other services). Though I find BW's paid model a bit surprising. I know it is only $10/yr, but the only real value here is 1GB storage and yubi/fido keys. I don't have yubi keys (they seem cool but also a pain in the ass) and 1GB seems rather small. Looking at Google, Dropbox, and Apple, storage pricings range from 4GB/$ (Apple) to 20GB/$ (Google's 5+TB plans). I'm willing to bet that offering 5GB would make it more worthwhile and a very small fraction of your users would actually use it. What are you going to store? Your passport photo and driver's license? I wonder if there would be a psychological effect here because it is really hard to tell if 1GB is enough or not. At least your average person has no idea.
• tamsaraas 4y ago
  So, the price for 3 millions active users is around 100m usd dollars. Or 3 dollars per a user vault. OK. Noted. It's time to switch then.
  • infinityio 4y ago
    do you mean $30/user?
• nXqd 4y ago
  how does bitwarden compared to 1password?
• efficax 4y ago
  that’s a lot of money for a password store
• thrdbndndn 4y ago
  Is this PSG related to Paris Saint-Germain?
  • SoapSeller 4y ago
    Nope. They are part of Providence Equity https://en.m.wikipedia.org/wiki/Providence_Equity https://en.m.wikipedia.org/wiki/Providence_Equity
• sys32768 4y ago
  With extra funding, hopefully soon their search results will show folder names so that organizing by folder makes sense in a search context.
• drumhead 4y ago
  Oh dear, this isnt good news at all. Now they're going to be under pressure to produce excessive returns to fatten the company up for an IPO or sale. Having seen what happened to Lastpass when it was passed around from pillar to post this saddens me deeply. Lets see what anti consumer measures they start introducing to force us to pay more. Limitations on the free tier look likely and price rises as well.
  • purim 4y ago
    It's weird seeing ppl downplay this exact scenario. They raised $100M, can they hit sales in a recession? Rates are rising for VCs, they need to generate a winner quickly more than ever. Just in time before the expected 75bps rate increase
    • wpietri 4y ago
      For sure. Taking venture capital increases the odds of a large success, but also increases the odds of total failure. VCs are perfectly willing to blow up a modestly successful business if it means a chance at a giant success. And from my perspective as a BitWarden customer, both of those outcomes could be worse for me. Obviously for failure, but many companies in their rush for new pots of money can do things that aren't great for existing customers. And then if those rushes don't work out, things like layoffs, reorgs, and other chaos can diminish customer focus, leading to long-term product decline.
  • number6 4y ago
    Look for vaultwarden
  • behnamoh 4y ago
    Here we go again: Some company (in this case, Bitwarden) "betrayed" its customers by doing what every other firm does. And Hn goes brrr over it. I wonder, aren't the majority of HNers working at a for-profit company funded by VCs? The hypocrisy is just intolerable at this point.
    • 4y ago
• sleepless 4y ago
  Question: all users of the free plan just don't use 2FA or Yubikey? I am amazed how that would be good policy in 2022. Nothing wrong with charging for a premium version, just curious how users handle things and why there seem to be so many users on the free plan. They all just don't know or care about 2FA?
  • herrherrmann 4y ago
    You can use other free apps for 2FA, e.g. Authy. That might even be better for security because even if your password manager account is hacked/leaked, you would still have the 2FA setup in a separate app/platform. That being said, it’s of course more convenient to have passwords and 2FA tokens in the same app.
    • latchkey 4y ago
      I just moved off Authy to Raivo. Authy traps you into their product... not something that you want.
  • deleted 4y ago
    [deleted]
• jdlyga 4y ago
  Well, if Bitwarden becomes the new LastPass, there's always room for another Bitwarden.
• highwaylights 4y ago
  I'd be really curious to know how much the move to passkeys has factored into this. I imagine it's an immediate threat to existing password managers.
  • ayewo 4y ago
    I think this has been factored into their plans [1] of bringing "consumer ease-of-use to Business users" which reads like they are moving away from the consumer market where widespread adoption of passkey will materially affect the revenues of all password management vendors. They are betting their future on the enterprise market and the announcement blog post links to their Partner [2] page—a central part of their strategy to gain a foot-hold in that market. In the enterprise market, inertia and regulations cause user habits to change much slowly relative to the consumer market that Bitwarden is most familiar with, plus enterprises are not price sensitive, so they can get away with charging really high prices, to justify their huge capital raise. 1: https://bitwarden.com/blog/accelerating-value-for-bitwarden-users-bitwarden-raises-usd100-million/#how-will-bitwarden-compete-in-the-market https://bitwarden.com/blog/accelerating-value-for-bitwarden-... 2: https://bitwarden.com/partners/ https://bitwarden.com/partners/
• zf00002 4y ago
  Wonder if they could have raised the yearly sub or added a tier to make that instead?
• Gareth321 4y ago
  Shit.
• Aeolun 4y ago
  Whatever the fuck do they need this for? I just cannot see any good reason to raise $100M. Hell, $10M might be too much.
  • thiht 4y ago
    I have exactly the same question. I can’t imagine needing $100M for developing this kind of product. Anyone has a guess?
• lern_too_spel 4y ago
  Lots of people worried about Bitwarden. Where are the people worried about PSG? As passkeys gain adoption, fewer people will need a password manager, and PSG is going to have a hard time getting their money back.
  • ayewo 4y ago
    Why should anyone be worried about PSG? Deals of this magnitude take months to close, especially considering the amount of money involved, so there's no point worrying about an entity whose raison d'etre is to earn a return from the management of other people's money.
    • lern_too_spel 4y ago
      Because they look like the biggest loser in this deal. Everybody else comes out ahead. In the short term, while password managers are useful, users get a better product, and Bitwarden's employees get paid. In the long term, users don't need this product, Bitwarden's employees find other jobs, and the investors have lost their money.
• thiht 4y ago
  What does a password manager company need $100M for? Aren’t they doing just fine without VC money? Wouldn’t $1M be largely enough?
• j7j7j7j7 4y ago
  I don't like that Bitwarden needs an external server so I use KeepassXC but for the people that do, I guess it is always time to fork it.
• ossusermivami 4y ago
  I moved to pass cli (on i3 with a simple rofi selector) and the FOSS android app https://github.com/android-password-store/Android-Password-Store https://github.com/android-password-store/Android-Password-S... synced over Syncthing and I never look back
• hbn 4y ago
  Not related to the fundraising, but a more general question I've had about password managers for a while: Why does anyone pay a subscription for their password manager when all you need is a client that talks to any old free cloud storage service (Dropbox, iCloud, Google Drive, etc)? I feel like I might be grandfathered in and they switched to a new model now, but I got Enpass years ago and haven't paid since. I sync my password archive through iCloud so I don't have to trust a random company to store my password archive safely. If anything, by doing that you're centralizing a ton of user logins in a single place that would be a great target if you found a way to hack in and read them.
  • jlund-molfese 4y ago
    Sync conflicts are pretty common with KeePassXC on Dropbox (iCloud, Google Drive are not viable options on Linux). I also didn't want to run the Dropbox client just to sync passwords. Paying Bitwarden $10/year made sense to me.
    • mdaniel 4y ago
      In my experience, sync conflicts are pretty common on SyncThing, too, which is often how I hear this paired ("use KeePassXC on Syncthing for the win" type deal) I think it's an impedance mismatch trying to take a single-user database format and trying to use it from multiple devices
    • hbn 4y ago
      Why would you need to run the Dropbox client to sync your passwords? Shouldn't the password manager client be able to talk to the service directly? I don't have an iCloud client installed on my devices (well, other than whatever is built into Apple devices) but Enpass just uses their APIs to sync passwords. Occasionally I have to reauthenticate on one of my machines but it tells me as soon as it loses access. Previously I synced it over Google Drive and I never installed a Google Drive client either.
      • jlund-molfese 4y ago
        It's totally possible, but that sounds like it would cost a lot of development time. The KeePassXC project in particular decided not to implement cloud connectors due to a lack of resources.