

So if someone does get hold of your details – you’re toast. By default (or, at least for me) – 2FA is not turned on by default. If your details do INDEED exist and someone compromises them, you’re done. There is no need to try it on my account though, promise!Īlso, it gets worse. On the same subject, I bet that most of the users who use Bitwarden re-use passwords for their Master Password, probably passwords that got compromised in the past and tempted them to start using Bitwarden in the first place? Am I speaking from experience? I’ll let you answer that one yourself. Actually, I have no idea whether they check your username and master password – and I don’t want to compromise my account to verify whether this exists. But this is locked for premium users only, listed under Vault Health Reports.

What do I mean? Bitwarden does offer some kind of audit, like LastPass did. So, now, there is a price tag against your online security. Actually, scratch that, it PROBABLY does exist on the internet! Can you verify this? Yes, but you have to pay unfortunately. Here’s the problem though, the key to access all this data might already exist on the internet. Bitwarden stores all your secrets, all username, passwords, maybe some secure notes, some credit card details. What’s Bitwarden? Bitwarden is probably the most commonly used Password Manager, after LastPass decided to slash the free tier. You’re just trusting that people don’t know how to look for these keys, and it helps you sleep soundly at night.This, well, the above, is Bitwarden. Also, a LOT of copies of the keys lie hidden away, somewhere – if you really know how to look, they’re there. This box is sitting in a very public place, say your city’s park. Imagine this – you got all your secrets stashed in a box, that requires a key.
