DEV Community

Discussion on: What do you use for password management?

 
yaser profile image
Yaser Al-Najjar • Edited

The code is open source but you can just use the cloud version.

Yep, and I'm not really into self-hosting my own Bitwarden (which seems pretty safe).

The problem is that you take their words for granted, call me paranoid, but I never trust these words:

Bitwarden does not store your passwords

Why are you providing me the service then? Nothing comes for free dude!


Yes, Troy is pretty popular in the security scene, but again once I heard Gary Vee saying that we (humans) can sniff if someone is selling us something, this is what I mean:

troyhunt.com/have-i-been-pwned-is-...

Thread Thread
 
matteojoliveau profile image
Matteo Joliveau

Bitwarden, like many others, has a free plan and a couple of paid plans that add features like secure team-shared credentials (think developers sharing servers root passwords in an organization), encrypted file storage and security audit logs. As @rhymes said you don't have to take THEIR word for granted, they have been audited by security experts and deemed acceptable. They publish peer-reviewed papers about their crypto setup and have a good reputation.

If this is not enough for you, that's totally fine. But you're really falling deep into paranoia because no real reason for not trusting them has been found yet.