5 ms·

Bitwarden Was Down

46 points by gwerbret 2y ago

RockRobotRock 2y ago
Can confirm. The browser extension usually works just fine when offline, but in this case my vault was logged out and I'm entirely without access. Still works on mobile, so it's not the end of the world.
- Mashimo 2y ago
  You can still log into the browser extension without internet, right?
  - linsomniac 2y ago
    I couldn't during the outage. I happened to be able to get a password I needed from my Android phone, but my browser extension and Mac desktop app both asked me to login and were stuck.
- rstuart4133 2y ago
  > Still works on mobile, so it's not the end of the world. Didn't for me. Granted, I have several identities and I was switching between them. Perhaps the one I was switching too was no longer cached. If so, I consider that a bug. I also consider what happened to be a bug - the Android App crashed. Oh wait, it's still crashing. So the outage isn't the cause. Did I mention I'm growing to dislike this Android Bitwarden App with a passion. It's slow at opening (why not open the cached version and download the up-to-date version in the background), it sometimes takes so long to do something Android brings up the "it's taking too long, want me to kill it" dialogue, it takes a long with for the keyboard to display the "Fill in with Bitwarden" prompt, presumably because it takes so long to process intents.
linsomniac 2y ago
Their status page said they were doing updates from 9-11PM US EST, but around 10:40 I first noticed problems. They updated it around 10:55 to say they had reports of problems and were investigating. I just tried again at 11:40 and it's working for me. https://status.bitwarden.com/?locale=en https://status.bitwarden.com/?locale=en
toxinu 2y ago
Only bitwarden.com is affected, not bitwarden.eu
sixhobbits 2y ago
I encountered this weird issue yesterday[0] (forum post is not mine but I also could not log in with Safari). It made me think I had somehow forgotten my master password for a while. maybe its time for a new manager. Any recs? [0]https://community.bitwarden.com/t/cannot-login-to-vault-by-safari-mentioning-username-or-password-is-incorrect-but-works-fine-by-firefox/78602 https://community.bitwarden.com/t/cannot-login-to-vault-by-s...
- kioleanu 2y ago
  I’ve heard LastPass doesn’t have any downtime
sschueller 2y ago
In an ideal situation all vaults should be stored locally and all that bitwarden does is sync them. Probably the primary reason I dont use these services even the self hosted version and stick to KeePass for now.
- nine_k 2y ago
  If you updated KeePass data on two machines, in a non-conflicting way (e.g. added two different logins), is there a good way to merge these changes during synchronization?
  - moepstar 2y ago
    I think you should still „synchronize with file“ beforehand.
  - peckemys 2y ago
    I don't know about Keepass, but you can do that with KeepassXC, which has a "Database > Merge from database..." option. There is also the Keeshare [0] feature to share some/all entries between databases [0]: https://keepassxc.org/docs/KeePassXC_UserGuide#_database_sharing_with_keeshare https://keepassxc.org/docs/KeePassXC_UserGuide#_database_sha...
- nicoburns 2y ago
  I believe that is the case. Or at least it can be set to work like that. There is also an E2E encrypted copy in the cloud.
  - attendant3446 2y ago
    I don't believe that is the case. Bitwarden works very unpredictably on a bad internet connection. The failed sync attempt can hang the whole application (or browser extension). I have this issue occasionally when Bitwarden shows that my vault is empty after a failed sync attempt. If sync will be not possible, then I don't have an offline copy of my passwords. Also, your local copy (if it works) is read-only. You can't edit anything without an internet connection. So no, it's more like you have a read-only local copy, but it's an internet-first service - this is my main issue with Bitwarden and the reason I'm migrating back to KeePass.
nine_k 2y ago
It's maybe a good time to look up again the information on how to self-host bitwarden: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/
- myrion 2y ago
  Unfortunately the self-host documentation isn't great and the deployment options are quite limited. Sure, it's at least dockerised, but it requires root privileges (so no running it in a secured kubernetes env) and forces you to use MSSQL as the db (so pay up for that or hope that express works). It's also unfriendly to automated deployment, with several manual steps and regular rebooting requires.
  - fredski42 2y ago
    Just use vaultwarden https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
    - cube00 2y ago
      Make sure you go into that eyes wide open, I misguidedly thought there was some communication between Bitwarden and the open source vaultwarden but there is not. I've been burnt by things breaking as Bitwarden updates the client and vaultwarden tries to keep up without any advance notice of the changes until someone reports it's broken.
      - kioleanu 2y ago
        I prefer Vaultwarden because it’s much much easier to set up and had only minimal problems, the only one I could think of being some inconsistent behavior when syncing passwords for the clients inside organizations. I find the setting up of Bitwarden locally gruesome. There was a breaking change when I updated to iOS 18, but by the time I’ve noticed that, it was already fixed in an update.
Refusing23 2y ago
The US bitwarden servers were down - not the european ones accoriding to that little overview. my workplace selfhosts it, so its not affecting us.
- mmooss 2y ago
  > my workplace selfhosts it, so its not affecting us. What is more reliable (ignoring hindsight), Bitwarden's service or your workplace's systems?
  - gpi 2y ago
    We self host too for about 60 users and it has been very reliable
  - roydivision 2y ago
    Cached self hosted with Bitwarden as upstream master. (Edited - added 'upstream')
    - linsomniac 2y ago
      I was just wondering if that was an option... Pointers on how you do that?
  - bravetraveler 2y ago
    Self-hosted things, in my experience, tend to be more reliable. More expensive, too. Worth it. Considerably less churn if done well. That said... reliability/administration is what I do for work. I'm biased. For instance, skip traversing the internet for in-office deployments/credential use. Also: incentives. PMs or engineers at another company have incentives that don't always align with reliability for yours. Vaultwarden deserves a mention, happy hoster for years here.
    - mmooss 2y ago
      I agree with those points but there's another side to it, of course: The economy of scale of service providers allows reliability, in important ways, that most people can't match by self-hosting.
udev4096 2y ago
This is why I self-host vaultwarden
- ok_dad 2y ago
  How often does Bitwarden go down? I’ve been paying for it for years and years, but I can’t recall it having enough issues to risk self hosting and messing up the configs myself. I’m certainly less reliable as an admin than they are, my computers are always having issues!
  - pixxel 2y ago
    Unless you use BW every minute of every day, including when you sleep, then you’re in no position to counter self-hosting with your anecdote.
    - from-nibly 2y ago
      No that's actually relevant that he doesn't use it every minute of every day. His anecdote is for his use, and it informs his decision. But I'll add another anecdote. I have had the same experience. I have never noticed any downtime from bitwarden but my 3 node kubernetes cluster that would host vaultwarden has gone down multiple times. Sometimes just for maintenance. I self host a lot of stuff but my password vault is not one of them yet.
    - ok_dad 2y ago
      No, it’s well known that hosting your own stuff usually isn’t as reliable. Unless you’re a professional at hosting servers, it’s probably less safe and less reliable than the paid service. Hosting a server for years and years is hard!
      - udev4096 2y ago
        It's not. The barrier for hosting highly available and low-resource services has significantly decreased over the years. As much as I don't like docker and docker-swarm, it has made it easy for an average developer to become an average sysadmin
aceazzameen 2y ago
Interesting. I used it on my phone around that time without issue. Maybe it was already unlocked and I only had to use biometrics to unlock it locally.

46 points by gwerbret 2y ago

Can confirm. The browser extension usually works just fine when offline, but in this case my vault was logged out and I'm entirely without access. Still works on mobile, so it's not the end of the world.

Mashimo 2y ago
You can still log into the browser extension without internet, right?
- linsomniac 2y ago
  I couldn't during the outage. I happened to be able to get a password I needed from my Android phone, but my browser extension and Mac desktop app both asked me to login and were stuck.
rstuart4133 2y ago
> Still works on mobile, so it's not the end of the world. Didn't for me. Granted, I have several identities and I was switching between them. Perhaps the one I was switching too was no longer cached. If so, I consider that a bug. I also consider what happened to be a bug - the Android App crashed. Oh wait, it's still crashing. So the outage isn't the cause. Did I mention I'm growing to dislike this Android Bitwarden App with a passion. It's slow at opening (why not open the cached version and download the up-to-date version in the background), it sometimes takes so long to do something Android brings up the "it's taking too long, want me to kill it" dialogue, it takes a long with for the keyboard to display the "Fill in with Bitwarden" prompt, presumably because it takes so long to process intents.

linsomniac 2y ago

Their status page said they were doing updates from 9-11PM US EST, but around 10:40 I first noticed problems. They updated it around 10:55 to say they had reports of problems and were investigating. I just tried again at 11:40 and it's working for me. https://status.bitwarden.com/?locale=en https://status.bitwarden.com/?locale=en

toxinu 2y ago

Only bitwarden.com is affected, not bitwarden.eu

sixhobbits 2y ago

I encountered this weird issue yesterday[0] (forum post is not mine but I also could not log in with Safari). It made me think I had somehow forgotten my master password for a while. maybe its time for a new manager. Any recs? [0]https://community.bitwarden.com/t/cannot-login-to-vault-by-safari-mentioning-username-or-password-is-incorrect-but-works-fine-by-firefox/78602 https://community.bitwarden.com/t/cannot-login-to-vault-by-s...

kioleanu 2y ago
I’ve heard LastPass doesn’t have any downtime

sschueller 2y ago

In an ideal situation all vaults should be stored locally and all that bitwarden does is sync them. Probably the primary reason I dont use these services even the self hosted version and stick to KeePass for now.

nine_k 2y ago
If you updated KeePass data on two machines, in a non-conflicting way (e.g. added two different logins), is there a good way to merge these changes during synchronization?
- moepstar 2y ago
  I think you should still „synchronize with file“ beforehand.
- peckemys 2y ago
  I don't know about Keepass, but you can do that with KeepassXC, which has a "Database > Merge from database..." option. There is also the Keeshare [0] feature to share some/all entries between databases [0]: https://keepassxc.org/docs/KeePassXC_UserGuide#_database_sharing_with_keeshare https://keepassxc.org/docs/KeePassXC_UserGuide#_database_sha...
nicoburns 2y ago
I believe that is the case. Or at least it can be set to work like that. There is also an E2E encrypted copy in the cloud.
- attendant3446 2y ago
  I don't believe that is the case. Bitwarden works very unpredictably on a bad internet connection. The failed sync attempt can hang the whole application (or browser extension). I have this issue occasionally when Bitwarden shows that my vault is empty after a failed sync attempt. If sync will be not possible, then I don't have an offline copy of my passwords. Also, your local copy (if it works) is read-only. You can't edit anything without an internet connection. So no, it's more like you have a read-only local copy, but it's an internet-first service - this is my main issue with Bitwarden and the reason I'm migrating back to KeePass.

nine_k 2y ago

It's maybe a good time to look up again the information on how to self-host bitwarden: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/

myrion 2y ago
Unfortunately the self-host documentation isn't great and the deployment options are quite limited. Sure, it's at least dockerised, but it requires root privileges (so no running it in a secured kubernetes env) and forces you to use MSSQL as the db (so pay up for that or hope that express works). It's also unfriendly to automated deployment, with several manual steps and regular rebooting requires.
- fredski42 2y ago
  Just use vaultwarden https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden
  - cube00 2y ago
    Make sure you go into that eyes wide open, I misguidedly thought there was some communication between Bitwarden and the open source vaultwarden but there is not. I've been burnt by things breaking as Bitwarden updates the client and vaultwarden tries to keep up without any advance notice of the changes until someone reports it's broken.
    - kioleanu 2y ago
      I prefer Vaultwarden because it’s much much easier to set up and had only minimal problems, the only one I could think of being some inconsistent behavior when syncing passwords for the clients inside organizations. I find the setting up of Bitwarden locally gruesome. There was a breaking change when I updated to iOS 18, but by the time I’ve noticed that, it was already fixed in an update.

Refusing23 2y ago

The US bitwarden servers were down - not the european ones accoriding to that little overview. my workplace selfhosts it, so its not affecting us.

mmooss 2y ago
> my workplace selfhosts it, so its not affecting us. What is more reliable (ignoring hindsight), Bitwarden's service or your workplace's systems?
- gpi 2y ago
  We self host too for about 60 users and it has been very reliable
- roydivision 2y ago
  Cached self hosted with Bitwarden as upstream master. (Edited - added 'upstream')
  - linsomniac 2y ago
    I was just wondering if that was an option... Pointers on how you do that?
- bravetraveler 2y ago
  Self-hosted things, in my experience, tend to be more reliable. More expensive, too. Worth it. Considerably less churn if done well. That said... reliability/administration is what I do for work. I'm biased. For instance, skip traversing the internet for in-office deployments/credential use. Also: incentives. PMs or engineers at another company have incentives that don't always align with reliability for yours. Vaultwarden deserves a mention, happy hoster for years here.
  - mmooss 2y ago
    I agree with those points but there's another side to it, of course: The economy of scale of service providers allows reliability, in important ways, that most people can't match by self-hosting.

udev4096 2y ago

This is why I self-host vaultwarden

ok_dad 2y ago
How often does Bitwarden go down? I’ve been paying for it for years and years, but I can’t recall it having enough issues to risk self hosting and messing up the configs myself. I’m certainly less reliable as an admin than they are, my computers are always having issues!
- pixxel 2y ago
  Unless you use BW every minute of every day, including when you sleep, then you’re in no position to counter self-hosting with your anecdote.
  - from-nibly 2y ago
    No that's actually relevant that he doesn't use it every minute of every day. His anecdote is for his use, and it informs his decision. But I'll add another anecdote. I have had the same experience. I have never noticed any downtime from bitwarden but my 3 node kubernetes cluster that would host vaultwarden has gone down multiple times. Sometimes just for maintenance. I self host a lot of stuff but my password vault is not one of them yet.
  - ok_dad 2y ago
    No, it’s well known that hosting your own stuff usually isn’t as reliable. Unless you’re a professional at hosting servers, it’s probably less safe and less reliable than the paid service. Hosting a server for years and years is hard!
    - udev4096 2y ago
      It's not. The barrier for hosting highly available and low-resource services has significantly decreased over the years. As much as I don't like docker and docker-swarm, it has made it easy for an average developer to become an average sysadmin

aceazzameen 2y ago

Interesting. I used it on my phone around that time without issue. Maybe it was already unlocked and I only had to use biometrics to unlock it locally.