Hacker News Reader

Comment by CraigJPerry | Hacker News Reader

Bitwarden migration was flawless for me. Impressive given how mangled the csv export i got from lastpass was!

I really dig the 2FA auto-copy to clipboard feature in bitwarden.

Does Bitwarden support a keyword shortcut that brings up the password search? (outside of browser preferably), couldn't find one.

It appears not, since there's a feature request for it: https://community.bitwarden.com/t/global-keyboard-shortcut/3... (and their keyboard shortcuts doc doesn't mention any such thing)

Yet another fine reason to use 1Password, which puts a lot of time and attention into user experience stuff like this. I know Bitwarden is the Internet's darling, but holy hell the user experience is so aggressively bad

Thanks! Any idea of how 1password compares with bidwarden in terms of security?

I would give 1Password the advantage if for no other reason than they've been at it longer, and thus have seen more crazy stuff. I believe Bitwarden claims to have multiple security audits, so I do believe they take it seriously, but (and this part is just my opinion) they execute so much other stuff so poorly that alone lowers my trust in them. For clarity, 1Password also has multiple security audits, and have done a very good job of publishing the specifications for their formats, which further contributes to my trust in their execution

Bitwarden's previous(?) on-premises deployment script was a raging tire fire, which I openly admit is not exactly a _security_ issue, but it further lowers my lack of faith in them

With all that said, I think both Bitwarden and 1Password are miles and miles ahead of LastPass, so one will for sure be better off just picking one and trying it out. It seems to be a reversible decision, if you wanted to switch again

In other threads about this I was reminded that 1Password also has a security key that is known only to the client, and thus would not be leaked in the event of a cloud breach. In order to unlock the vault, one needs both pieces of information: the secret key and the master password. The secret key is cached on the client, which is why I had forgotten about it, but it is required for unlocks nonetheless

Thus the advantage goes to 1Password here, since Bitwarden does not require that "second factor" known only to the client (and I'm not talking about 2FA for logins, I mean for the vault)

> the 2FA auto-copy to clipboard feature in bitwarden

is that if you're using bitwarden's 2FA authenticator instead of e.g. authy?

Correct. It auto copies the code if the TOTP secret key has been set for that item.

bitwarden's TOTP only runs on android/ios and not the mac app?

Reply on news.ycombinator.com