However, a password manager should be as securely engineered as its possible to make it. If a malicious third-party were to somehow get control over Stripe’s domains or scripts, they’d be more likely to focus on stealing credit card information that passes through the payment service than in hijacking passwords You now also have to open the payments page before you’re exposed to any risk. The only third-party scripts that run inside the web vault now is Stripe, Bitwarden’s payment processor. The updated Bitwarden 2.0 web vault has reduced the risk by significantly reducing its reliance on third-party scripts. These scripts could theoretically make a copy of your login credentials and run off with your entire unencrypted password vault. In my last article on Bitwarden, I raised some concerns over the inclusion of untrusted third-party JavaScript inside the password manager vault. Third-party scripts are mostly gone from the web vault However, this is on my to-do list for the coming months so expect another update on that at a later time. I’ve also not yet had the time to look into self-hosting Bitwarden services myself. Unfortunately, Firefox for Android doesn’t support physical security keys so I can’t properly secure my Bitwarden account and get a decent user experience on Android at the same time. On a more positive note, Bitwarden’s extension for Firefox for Android works great and I don’t have to skip back and forth between apps to login to websites. It’s less than ideal but from my experience, the same thing also happens with LastPass and other password managers on Android. My login flow thus involves first attempting to use auto-fill, sighing, switching to the Bitwarden app and copy my login details, switch back to the app I want to login to, and pray that the app hasn’t dismissed the login prompt while I was away. I can have Bitwarden auto-fill in my login details into an app or webpage one day and then have it not work on the same app or webpage the next day. Bitwarden integrates with the platform provided auto-fill service a system that’s unreliable at the best of times. I’m not as happy with the experience on Android, however.
Bitwarden’s Linux app works as great as its MacOS and Windows brethren but it’s harder to install than a web app and doesn’t auto-update.
I use the Bitwarden desktop client on MacOS and Windows, but I prefer to use the Bitwarden Web Vault installed as a GNOME Web app under Linux. The Bitwarden desktop apps - available for Linux, MacOS, and Windows - are pretty great by comparison. LastPass only has an app for MacOS and a few failed attempts at different Windows apps over the years. Here are my thoughts and impressions after three months with Bitwarden. I’ve been happy with the decision overall. Three months ago, I wanted to move away from LastPass - who’ve lately have been dropping support for Firefox and other platforms - to an open-source password manager.
0 kommentar(er)
