4 ms·

Then why encrypt it in the first place? That's the point the author makes (text in bold).

• prophesi 4y ago
  It's a choice on the user to weaken the encryption. I don't use Bitwarden, but if they communicate that properly to the user, it's a valid compromise for convenience-versus-security.
  • yazzku 4y ago
    This doesn't answer the question. Why is there a choice to encrypt something when it's completely unnecessary (according to their threat model)? No point in building unnecessary complexity into software, especially software meant for security.
    • prophesi 4y ago
      The client-side lock of 5 PIN attempts solves the much more common threat model the layman is concerned with.