Since it's based on Electron, they might need to delete the `~/.config/<whatever bitwarden uses>/GPUCache` directory. I have this invisible text issue with VSCode and Chromium after every weekly packages update, because of Mesa updates I believe.
I need passwords outside of the browser quite frequently (when SSHing to servers and so on), and the official Electron app just feels clunky and heavy to use and keep running constantly in the background. So creating a small and lightweight client optimized for my own usage patterns has been really useful. It may be useful for others, too, while the official client is broken.
Yes, but it is quite uncomfortable to use, requiring you to get a session key and storing it somewhere. Instead, I've had good experiences with [rbw]. Maybe that would also be interesting for GP.
It's just that keypass seems to me more reknown (I had never heard of Enpass before), so I would have assumed one would have compared both before choosing one or the other. I was then wondering what were the benefits of Enpass over Keypass. Not that I have any preference or bias: I know keypass and wondered how it compared to a similar solution.
Yeah lol, I used Linux until the time I was locked out of my LOCAL PC because of something goofy on a Linux update side. I'm on Windows now. You get the point !?
It seems like you're trying (and failing) to suggest that my reaction was akin to becoming frustrated with linux and returning to Windows.
This is a silly thing to assert. There are lots of password managers, but there's no good reason for a locally-run one to lock me out because the software vendor fucked something up.
Whatever one of these password managers you may use, always remember to regularly export to the cleartext. Keep a 50 megabyte encrypted container around for it. Mount, export, unmount. Whenever you remember to do it, at least every couple of months. Even if it's not always up to date at least you won't be locked out of everything when these situations happen.
As a user of pass for like 4 years, I enjoy reading all those silly threads on password managers doing this and that. Fantastic. And it’s not even an upgrade to use the GUI app here, I can take any often used password of mine with pure Ctrl + R in my terminal, just a second and it’s here, with no need to do extra backups, all the history is in git, and no party will ever change anything about my passwords.
Nearly all of my need for passwords is web-related. Autofill is incredibly convenient and also an anti-phishing measure, because it won't autofill fake sites, which would give me time to notice something was up.
There doesn't seem to be major super popular audited autofill stuff, seems like the ecosystem is mostly smaller projects and the main focus is on the CLI.
The remainder of the times I need passwords are mostly on mobile.
2. Of course pass has mobile version, and to my liking it looks and works much better than 1Password that I migrated from. (And to my liking as well Bitwarden looks much worse, if we would ever happen to talk about looks in a password manager, lol. Of course that is highly subjective.)
3. I have shared stored with my work mates. That is different hit repositories that has those text files encrypted with more than one gpg key, and it works so incredibly well. And is free, forever. We manage that with gopass (a fork written in Go), as it’s easier to work with for not-so-techies.
For Android the mobile app seems to be last updated in 2021 and not compatible with the latest Android version. I would switch to pass immediately if they had both a well maintained and audited browser extension and mobile app.
I won’t argue on the mobile Android, as I don’t have the latest and greatest Android, but the app is quite good on Android. My iPhone is fine with latest version, though.
Pass is just text files encrypted with gpg. I needed just one password on one work computer, where I had my gpg key, but not all my passwords. Decrypted the file and that was it.
Honestly, I cannot get the longing to store your passwords with some company that claims it would be free and open source forever. What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.)
The server is open source too and there's even two separate implementations of it. The official one and a community one named Vaultwarden. Bitwarden is fully open source and you can very easily selfhost it.
> What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.)
You didn't even bother to click the link and educate yourself did you? The server, client and mobile app are all open source. You can even store the encrypted DB yourself on your own server.
Although, I don’t see why I would self-host BitWarden for my family, when their needs are 10 passwords for social media and bank apps. It all stored in their default iPhone (or Android) password managers and I just have the duplicate of sensitive (usually bank) info in my pass vault as well. That works for me very well, as if I would ever need to migrate my mom, aunt, wife or anyone else, I can easily copy those 10 passwords manually. And its zero maintenance system for me.
> Keep a 50 megabyte encrypted container around for it. Mount, export, unmount
Which of the options do you think would be easier to work with on your smartphone? The are many PGP implementations for smartphones in the case you have to recover. Just move the file.
Yet another example of why Electron sucks. Is it really that hard to make a native client, especially these days when we have so many cross-platform development frameworks?
53 comments
[ 3.6 ms ] story [ 116 ms ] threadhttps://github.com/bitwarden/clients/issues/6560#issuecommen...
Edit: https://github.com/electron/electron/issues/40366#issuecomme...
I need passwords outside of the browser quite frequently (when SSHing to servers and so on), and the official Electron app just feels clunky and heavy to use and keep running constantly in the background. So creating a small and lightweight client optimized for my own usage patterns has been really useful. It may be useful for others, too, while the official client is broken.
I've used to rbw for a rofi (and rofi-like frontend): https://github.com/fdw/rofi-rbw/
[rbw]: https://github.com/doy/rbw/
I'm on enPass now.
More on that in this comment: https://news.ycombinator.com/item?id=38316704
It doesn't support the platforms I use, so it's a nonstarter.
This is a silly thing to assert. There are lots of password managers, but there's no good reason for a locally-run one to lock me out because the software vendor fucked something up.
[0]: https://github.com/bitwarden/clients/issues/6560
https://www.passwordstore.org/
As a user of pass for like 4 years, I enjoy reading all those silly threads on password managers doing this and that. Fantastic. And it’s not even an upgrade to use the GUI app here, I can take any often used password of mine with pure Ctrl + R in my terminal, just a second and it’s here, with no need to do extra backups, all the history is in git, and no party will ever change anything about my passwords.
There doesn't seem to be major super popular audited autofill stuff, seems like the ecosystem is mostly smaller projects and the main focus is on the CLI.
The remainder of the times I need passwords are mostly on mobile.
2. Of course pass has mobile version, and to my liking it looks and works much better than 1Password that I migrated from. (And to my liking as well Bitwarden looks much worse, if we would ever happen to talk about looks in a password manager, lol. Of course that is highly subjective.)
3. I have shared stored with my work mates. That is different hit repositories that has those text files encrypted with more than one gpg key, and it works so incredibly well. And is free, forever. We manage that with gopass (a fork written in Go), as it’s easier to work with for not-so-techies.
I never use web app, so cannot comment on that.
Bitwarden is entirely open source?! https://github.com/bitwarden/
You aren't even locked in to using them as the data store.
Honestly, I cannot get the longing to store your passwords with some company that claims it would be free and open source forever. What is free and open source by the way? Their client? What about their server they store your password? (I assume you can sync that to their server, I’m not their customer.)
You didn't even bother to click the link and educate yourself did you? The server, client and mobile app are all open source. You can even store the encrypted DB yourself on your own server.
I quite like it when I interacted with it, but personally I prefer pass as way simpler and more elegant solution.
Although, I don’t see why I would self-host BitWarden for my family, when their needs are 10 passwords for social media and bank apps. It all stored in their default iPhone (or Android) password managers and I just have the duplicate of sensitive (usually bank) info in my pass vault as well. That works for me very well, as if I would ever need to migrate my mom, aunt, wife or anyone else, I can easily copy those 10 passwords manually. And its zero maintenance system for me.
> Keep a 50 megabyte encrypted container around for it. Mount, export, unmount
Which of the options do you think would be easier to work with on your smartphone? The are many PGP implementations for smartphones in the case you have to recover. Just move the file.
What is faster to setup? A container or your already installed command?
What is easier to move and more portable? Your container or a pgp encrypted file?
Do you move your encrypted file into Dropbox or your encrypted container? ;)
>>and more portable than GPG.
LLM's have hallucination too ;)