4 ms·
Hm, with all that talk about "zero knowledge architecture", I thought your vault file would be encrypted "in one piece", not just the passwords. If they have th
by rob74 4y ago
Hm, with all that talk about "zero knowledge architecture", I thought your vault file would be encrypted "in one piece", not just the passwords. If they have the URLs in clear text, that's not really zero knowledge, now is it? And why do they need the URLs anyway, when I can share the passwords just fine from my local PC? Statistics?!
- sf_rob 4y agoHonestly, URLs are a potentially massive threat vector themselves. Are the urls associated with individual users either directly or in a bucketed fashion? Seems like no to the former but the release leaves a lot to be desired.
- Arbortheus 4y agoIs anyone aware whether Bitwarden encrypts everything, or just the passwords like lastpass?
- aiisjustanif 4y agoAccording to Bitwarden it’s all Login information (including usernames, passwords, URIs, TOTPs, etc.). [1] [1]: https://bitwarden.com/help/vault-data/ https://bitwarden.com/help/vault-data/
- Arbortheus 4y agoNice, thank you