Hacker News new | ask | show | jobs
by dastx 2069 days ago
Bitwarden is great, but I'm getting frustrated at their ridiculous excuses for not implementing fixes.

For the longest time bitwarden has been broken in the firefox's private browsing after mozilla deprecated some apis due to security concerns. They've given alternatives but they are just refusing to fix it, to the point of basically saying mozilla needs to fix the issue. What's sad is a similar mechanism is used in their chrome extension. Someone even raised a working PR that the CTO wasn't fully happy with, and asked for changes (which is fair), but the PR hasn't moved since, so I'd have expected the Bitwarden employees to take it and fix it up.

It's absolutely ridiculous to still not have this fixed years later.

By contrast, I was a 1Password customer at the time this change got introduced, and they'd pushed out a fix not long after.

I will be trying to Linux client, and if it's good enough, I'm certainly switch away.

3 comments

+1 on 1Password's dedication to fixing issues. I had an obscure field selection issue on their web view and pinged the support email. It was fixed a few days later and they updated me on it.

I switched to 1Password from KeePass after 5 or so years because I just got tired of maintaining the data locally and keeping it in sync on my devices that I need the passwords on. I just backup the 1Password database locally now to calm some paranoia.

Is there any reason not to host a Keepass database on any generic cloud service? That's what I'm doing at the moment. I've never encountered any sync issues or conflicts, and take backups every now and then in case that happens.
No reason, yours is the best option IMO. You have a secure container, with a sync service of your choice. It's more transferable so you can easily migrate if you want to.
I’ve been a happy one-password customer for several years and I switched to the family subscription model to get my parents away from their little notebook of passwords. I had self-hosted a PHP based password manager for a handful of years, before switching to 1P because I wanted a “real app” with tighter OS integration. I’ve had 3 gripes and this solved one of them. The other 2 are

1) Their insistence on 1PasswordX- I want a desktop app, I want tight integration, the browser extensions work just fine if I need something quickly. 2) Poor/no support for key management- storing ssh keys as an encrypted notes is a bad work around.

As someone who can’t install 1Password many places where I have worked, 1Password X has been an amazing option.
1Password X is a sad excuse for a Linux client. Compared to the great experience one gets on MacOS (haven't used it on Windows), 1Password X is a child's toy, and a bad one at that. It did improve a bit not very long after I left 1Password, but Bitwarden hasn't been better.
I’m not saying it’s bad, it’s just grossly inferior to the native app on both macOS and Windows.
In defence of the notebook of passwords, there tends to be minimal overlap between opportunistic neighbourhood burglars and identity thieves.
Fair point- I guess digitization was somewhat selfish. A centralized DB makes it easier when I’m trying to help them with something remotely, and the “Shared Vault” facilitates easy communal logins (Netflix, Hulu, etc...)
100% agree and I did the same with my own parents.
Just so you're aware, it's a limitation within Firefox and Private mode - not Bitwarden.

```

The Bitwarden browser extension does not completely function in Firefox’s private browsing mode. This is a known issue specific only to Firefox. You will see a message indicating so when you try to open the Bitwarden popup window in a private window. We have discussed the problem with Mozilla, however, they seem unable to fix it so that extensions like Bitwarden can function entirely in private mode. ```

https://bitwarden.com/help/article/extension-wont-load-in-pr...

As I mentioned, this stopped working after Mozilla deprecated, and subsequently removed an API due to security concerns. When viewing the docs for said API, they have clearly outlined an alternative mechasmin. They have still stuck to blaming Mozilla.

An individual raised a working PR to fix this that got reviewed and some changes were requested. The individual must have abandoned the PR or something because it hasn't moved since. I would have expected Bitwarden devs to pick this up and get it merged, and address the PR changes themselves since OP isn't addressing the issues.

"By contrast, I was a 1Password customer at the time this change got introduced, and they'd pushed out a fix not long after."
Bitwarden works in private mode.

Right Click on the field > Bitwarden > Autofill

That only works if your vault is unlocked. Which is a pain, having to open a non private window, open the vault then go back to private.

Otherwise it pops up bitwarden in their top right and says it isn't available in private mode for this browser