3 ms·
> and you don't want to trust someone else's service You still have to trust Bitwarden aka someone else's service?
by KomoD 2y ago
> and you don't want to trust someone else's service
You still have to trust Bitwarden aka someone else's service?
- jacooper 2y agoIts e2e encrypted, and the client and server code is open source/source available.
- notpushkin 2y agoThis is also end-to-end encrypted, and the client and server code is open source/source available. The reason to use Bitwarden could be that you already trust it with something else, and could have taken time and audit that it is indeed legit, or trust others to complain loudly if they find something wrong with the code. Personally, I’d self-host it (or the open source, lighter on resources Vaultwarden), just as an additional safeguard.
- hypeatei 2y agoHow can you guarantee the build is from the open source code? (i.e. doesn't contain a small patch with hostile behavior)
- EasyMark 2y agoYou probably can’t but if you’re one of those people who keeps passwords with Bitwarden, you probably trust them, and it’s nice to have this service as well.
- bachmeier 2y agoYeah, I didn't word that very well. We tend to trust services like Bitwarden and Fastmail. I should have probably said a service you've never heard of.