Privacy

4703 readers

190 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

Quiet Changes in Bitwarden (itsfoss.com)

submitted 1 week ago by cm0002@europe.pub to c/privacy@programming.dev

12 comments fedilink hide all child comments

I have been using Bitwarden for around 7~ years. Subscription for this long too, at 10USD p/year. I will be switching due to lack of transparency, and would love to hear others thoughts on this.

The linked article goes into further detail, but here is a small summary that very much concern me / are sus:

that 10USD per year has gone up quietly . I just checked and I have no email telling me it's increased. It renews in like 2 months, so this is good timing for me

Originally Bitwarden had values as apart of the acronym "GRIT". Gratitude, Responsibility, Inclusion, and Transparency. They have changed the last two words to "Innovation, Trust"

There is now a new CEO, this was not announced and the only reason people outside of Bitwarden know is that someone saw this change on LinkedIn

The free tier momentarily disappeared from their product page for about a month (april14-may14). People were likely still able to make free accounts during this period. Bitwarden says it was a marketing mistake

The price hike is one thing, but for me the acronym change is most concerning, which is why I will be looking at another password manger (probably keepassxc)

all 13 comments

sorted by: hot top controversial new old

[–] treeofnik@discuss.online 1 points 3 days ago

Interesting enough I got an email today (about a month from renewal) stating the $5/year price bump. Hmm

[–] 0x0@infosec.pub 25 points 1 week ago

Silently replacing the ceo is a big red flag for me considering the rest.

Glad i never started with bitwarden

[–] csolisr@hub.azkware.net 16 points 1 week ago (1 children)

I'm personally self-hosting Vaultwarden precisely to skirt around this issue, but who knows how long will it take for Bitwarden to take the ball home and block Vaultwarden from using the mobile client and the browser add-on.

[–] Luminous5481@anarchist.nexus 1 points 1 week ago (1 children)

I'm pretty sure that's not going to happen. if I remember correctly, vaultwarden is helping bitwarden optimize their server since theirs is so much heavier than vaultwarden to run.

[–] lka1988@lemmy.dbzer0.com 2 points 1 week ago

That doesn't really matter. Companies who pull this shit can absolutely rugpull the community, and many have done so already.

[–] leraje@piefed.blahaj.zone 8 points 1 week ago (1 children)

I switched to Keepass flavours for desktop and Android and use syncthing (desktop) and syncthing-fork (android) to keep the db synced - works perfectly so far.

As for the reason - same as you OP.

[–] lka1988@lemmy.dbzer0.com 3 points 1 week ago* (last edited 1 week ago) (1 children)

Check the OP again. They're a serial poster in many, many subs.

Related to the article though: I also use KeePass in many flavors. Recently got my wife on it as she jumped ship from Apple straight to a used Pixel with Graphene OS (her request). Solid password manager.

[–] placebo@lemmy.zip 6 points 1 week ago

that 10USD per year has gone up quietly . I just checked and I have no email telling me it’s increased. It renews in like 2 months, so this is good timing for me

Same. I've finally migrated to vaultwarden because of that.

[–] southsamurai@sh.itjust.works 6 points 1 week ago (1 children)

Problem is that I prefer having some things external. Self hosting means maintaining all the hardware, and that can be an issue when shit goes major wrong. So some vital stuff like a password database, it's just not something I'm going to dick around with the usual sync back and forth on my own stuff.

And bitwarden fills that need best so far. I haven't found anything else anyway

[–] bitfucker@programming.dev 3 points 1 week ago

Keepassxc is even better in that regard. You can upload your database to backblaze for example or really any other cloud storage because the database is stored encrypted

[–] Flagstaff@programming.dev 4 points 1 week ago

Props to the detectives watching for these tiny changes! I don't know how they do it...

[–] artwork@lemmy.world 2 points 1 week ago* (last edited 1 week ago)

Apologies... to clarify, you've been using Bitwarden for a local password manager as the awesome KeePassXC you mentioned?

Yes, you may sync the KeePass databases manually, but... considering your investment to the vendor mentioned, I am sorry, it feels like you may not find it an alternative you expect to replace the service with.

If you are capable to set a custom synchronization for the KeePass databases across your environments and devices, then you should find KeePassXC or similar clients a marvel.

Yet, just in case, have you checked out the following project?:
- https://github.com/dani-garcia/vaultwarden