You are viewing a single thread.
View all comments
28 points

There was a related news recently, that bitwarden and other pw managers will be able to sync passkeys between devices. Won’t that solve these issues?

permalink
report
reply
32 points

My thoughts exactly. I use Bitwarden and passkeys sync flawlessly between my devices. Password managers tied to a a device or ecosystem are stupid and people shouldn’t use them. This is true whether you use passwords or passkeys.

That said, we cannot blame users for bad UX that some platforms and some devs provide.

permalink
report
parent
reply
4 points

Isn’t your password manager tied to an ecosystem with Bitwarden ?

I’m surprised people trust third parties to hold their passwords.

Wasn’t there multiple password managers that got powned over the years ?

If you can sync Passwords you are also more exposed than some unhandy secure local password storage.

permalink
report
parent
reply
7 points

Wasn’t there multiple password managers that got powned over the years ?

Pretty much only LastPass

permalink
report
parent
reply
4 points

I can use bitwarden on Windows, Linux, Mac, iOS, Android, on desktop app or using CLI. That’s a stark difference in comparison with built in Microsoft or Apple keychains. And yes, I trust Bitwarden.

permalink
report
parent
reply
-3 points

Bitwarden is not usable on Linux desktop, keeps asking for password. The password can’t be too short, so it takes some time to type it in. I turn off my computer when it’s not needed, so I would just need to type in the password when I turn it on again.

Anyone have a better solution?

permalink
report
parent
reply
10 points

Is “keeps asking for the password” the definition of “unusable on Linux”?

I have zero issue using this on Linux fwiw; yes, I am asked for password again on BW when I reboot/start my system. That is not inconvenient to me.

permalink
report
parent
reply
9 points

You could use your

to unlock the app instead of the password

permalink
report
parent
reply
1 point

A better solution is to disable vault lock. It is very much usable (mostly talking about browser extension).

permalink
report
parent
reply
14 points
*

Not in all situations. And in a way a user will not be aware of. The service or website can define what type of passkey is allowed (based in attestation). You may not be able to acutally use your “movable” keys because someone else decided so. You will not notice this until you actually face such a service. And when that happens, you can be sure that the average user will not understand what ia going on. Not all passkeys are equal, but that fact is hidden from the user.

permalink
report
parent
reply
3 points

I remain hopeful. Initially, when Keypass wanted to include a simple export option there was talk of banning them from using Passkeys.

permalink
report
parent
reply
1 point

It does*.

However when I’m trying to login with a passkey in my mobile browser, Bitwarden prompt isn’t showing up. I don’t know what’s wrong.

permalink
report
parent
reply
3 points

If you’re using Android it’s more than likely just an OS issue. I have had a lot of issues on my phone trying to use passkeys let alone just the password manager.

permalink
report
parent
reply
1 point

One of many reasons I hate android. In my experience the integration with technology: late and poorly polished, early and kneecapped, initially available then removed, or non-existent.

I think its partly the fragmentation in the Android community and mostly Google’s influence.

permalink
report
parent
reply
1 point

I’ve found on my android phone that the bitwarden prompt comes up more reliably if I tap on the password field instead of the username field.

permalink
report
parent
reply
1 point

This might be true, but I’m talking about passkeys, that never work :(

permalink
report
parent
reply
1 point

That’s weird, it works for me. Is there something you need to click on the mobile site?

permalink
report
parent
reply
1 point

What’s your browser-Bitwarden setup?

The same flow works for me on desktop (firefox+bw plugin).

permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 15K

    Monthly active users

  • 13K

    Posts

  • 567K

    Comments